Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmGLQsEDn9Jb1GEpm5W99OGZEQ0.roa
File: FmGLQsEDn9Jb1GEpm5W99OGZEQ0.roa (raw, json)
Hash identifier: 68ZZTsiosGmX0IdKFxJzX/KCR5JQAQjOLFJ56BMQH3E=
Subject key identifier: 16:61:8B:42:C1:03:9F:D2:5B:D4:61:29:9B:95:BD:F4:E1:99:11:0D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018607FCCBE95B26CB39E29288DE099D5BFE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmGLQsEDn9Jb1GEpm5W99OGZEQ0.roa
Signing time: Tue 31 Jan 2023 13:20:52 +0000
ROA not before: Tue 31 Jan 2023 13:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
195.133.12.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
212.192.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:fc:cb:e9:5b:26:cb:39:e2:92:88:de:09:9d:5b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 31 13:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16618b42c1039fd25bd461299b95bdf4e199110d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:ea:19:88:aa:23:ff:aa:81:f3:f8:a7:81:
2b:c8:0c:c9:f4:33:1b:b5:0d:84:38:53:8f:9d:eb:
2f:4d:ab:63:56:9b:50:59:b7:7c:29:c0:7d:56:f0:
71:df:44:1f:a4:2c:46:ac:c8:f3:24:90:a4:dc:8f:
2a:35:83:82:48:ee:e1:d9:3e:39:bd:ea:13:2e:8e:
fb:5b:d1:09:cd:21:e5:0c:cc:d6:0c:97:3d:9f:bb:
08:04:a8:d4:18:dd:d4:00:91:e9:1f:96:9b:b7:45:
9a:a3:bc:56:00:12:af:6c:6d:5d:c5:c8:bd:a9:29:
51:16:90:3b:90:0d:cd:4a:a7:37:3d:66:a8:66:f8:
f2:b8:96:b0:98:9a:09:d3:b5:67:53:c5:fb:63:77:
cd:16:31:9c:3e:4d:49:99:3f:f2:8e:fd:0e:1b:91:
de:b9:00:7d:46:9d:96:24:16:1d:cf:57:d3:b4:34:
2a:db:4d:41:a1:d7:c6:4c:fb:15:1e:94:e2:c2:aa:
d3:7f:f1:49:97:ed:09:79:30:e9:d7:1b:31:c2:34:
3c:87:db:6a:1c:6f:fe:4f:84:27:b5:20:58:50:ae:
64:43:0e:0e:23:89:28:83:3e:1e:32:db:6a:92:4b:
3b:da:72:fb:85:ab:ed:2d:6a:46:9a:c2:c4:d8:d5:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:61:8B:42:C1:03:9F:D2:5B:D4:61:29:9B:95:BD:F4:E1:99:11:0D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FmGLQsEDn9Jb1GEpm5W99OGZEQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.182.0/23
193.124.8.0/24
193.124.133.0/24
193.124.203.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.87.6.0/24
194.87.22.0/24
194.87.27.0/24
194.87.82.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.122.0/23
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.165.0/24
194.87.171.0/24
194.87.198.0/23
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.193.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.192.211.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:25:ea:b2:fb:09:34:ea:b8:f9:2f:d2:cf:eb:57:c0:56:ca:
3b:37:55:da:11:a7:f5:4e:76:4b:11:3c:02:52:95:3c:2d:e2:
3a:13:c3:3b:39:2f:4d:0d:ac:99:65:e9:bf:8c:a8:21:e6:30:
52:2b:ea:d3:bd:bb:f2:b7:eb:aa:25:cc:bb:85:0f:8a:6d:b8:
c6:44:44:d8:28:6a:f7:e9:96:50:8d:c7:57:87:c9:7f:e8:2d:
83:74:ea:33:84:aa:a0:a3:16:db:bf:fe:6e:e3:ba:4f:10:e2:
48:7c:0d:31:b2:b5:62:bf:9d:8d:e9:52:b5:27:fb:1e:70:6b:
26:18:5d:74:51:9b:4b:2f:e3:1a:d3:ee:86:7d:59:4f:44:44:
fe:d5:89:b5:4b:af:65:e3:3b:6b:de:a8:55:2e:a5:36:5b:e0:
78:86:89:b9:99:84:90:ac:63:4f:90:c7:28:d3:43:84:59:8d:
33:19:67:f3:2b:32:bb:08:d5:5b:5b:47:a2:74:d2:ee:db:c0:
8f:c6:7c:b7:7f:32:aa:f5:37:15:0f:00:0b:12:ce:c7:9d:cc:
af:79:f0:20:6e:17:81:ad:68:e9:92:61:d0:d9:07:c2:90:95:
cc:dc:e6:38:b5:3d:c1:11:39:7b:5a:e6:88:3e:c1:44:44:a5:
4b:f0:cb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:59 2023 by rpki-client on console-fra.rpki-client.org