Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GXBOdzUGu69YD5NcLb_8YJKkCwE.roa
File: GXBOdzUGu69YD5NcLb_8YJKkCwE.roa (raw, json)
Hash identifier: vYt7qh0WNXJ12aY8HQNF+lnzxR9MGvO+CpfGAfW9Mm0=
Subject key identifier: 19:70:4E:77:35:06:BB:AF:58:0F:93:5C:2D:BF:FC:60:92:A4:0B:01
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189E3B861143A91554D667D6A204E74B30C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GXBOdzUGu69YD5NcLb_8YJKkCwE.roa
Signing time: Fri 11 Aug 2023 08:30:58 +0000
ROA not before: Fri 11 Aug 2023 08:30:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 194.87.117.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:b8:61:14:3a:91:55:4d:66:7d:6a:20:4e:74:b3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 11 08:30:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19704e773506bbaf580f935c2dbffc6092a40b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:1d:ef:18:db:13:63:e6:be:96:2f:45:13:
98:fa:36:fb:6e:f4:83:65:90:69:79:54:26:4b:c0:
a7:bc:f8:2c:49:5b:a0:2b:2a:f7:86:41:13:97:3b:
15:38:fa:35:4d:09:24:a7:46:31:54:0f:e8:98:42:
1f:35:77:1e:43:f5:da:ba:54:7c:5d:d4:06:ea:4d:
38:3f:d1:27:d2:3d:70:2d:16:73:53:14:a7:91:5d:
b7:66:fe:af:d6:fc:3e:bf:43:c3:3b:e5:62:33:1c:
8e:4c:6c:21:21:b8:5b:0e:02:04:75:0b:4b:0e:65:
51:f2:25:36:9c:31:3d:54:53:6f:02:ae:94:bd:e3:
3c:01:4f:4a:49:00:69:78:70:f1:5a:a0:b8:d5:9c:
85:7f:e7:a2:86:09:ee:2d:c2:2c:a2:0e:c0:30:39:
f8:a5:ce:2a:bb:a6:91:8e:b3:c5:ff:cc:fb:c1:e0:
60:6a:42:2c:68:2b:7a:50:58:41:f9:7a:ba:7a:42:
4f:eb:31:01:d3:e8:b8:64:1c:28:d6:b3:90:17:68:
6e:14:1b:3e:cf:0b:f7:75:47:19:f0:58:63:bd:52:
03:b2:d4:9e:36:ad:49:3f:9d:46:57:53:bd:66:e9:
c6:51:a8:34:b1:a2:08:c0:55:48:7b:d2:55:bd:70:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:70:4E:77:35:06:BB:AF:58:0F:93:5C:2D:BF:FC:60:92:A4:0B:01
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GXBOdzUGu69YD5NcLb_8YJKkCwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.91.0/24
194.87.117.0/24
194.87.120.0/24
194.87.177.0/24
194.87.188.0/24
195.58.56.0/24
212.192.8.0/24
Signature Algorithm: sha256WithRSAEncryption
87:39:be:cd:3a:c9:d2:c9:32:d8:9b:f2:6c:1a:59:75:7d:f5:
24:66:57:18:bd:fa:30:78:f5:da:dc:3f:57:dc:90:f7:eb:ed:
88:ff:cd:45:df:ae:f4:8f:26:45:32:81:5e:4b:c1:29:53:8c:
06:fd:41:7a:73:24:b8:27:ad:9a:79:43:c6:70:97:cc:05:47:
48:ee:ac:98:06:a4:5b:2c:d9:d8:68:9a:9d:f0:f3:05:4e:58:
04:64:90:2c:6a:b0:c3:8b:fc:9a:ec:0a:4d:49:dc:5d:58:9f:
db:89:ee:56:e7:c5:9a:0d:9b:f5:6e:92:3d:82:20:ae:95:5b:
61:0b:cb:e9:c5:0c:1c:c7:79:5b:a1:07:b5:a7:db:01:fe:f4:
12:10:8e:5f:ea:be:b9:0b:26:c8:a0:ff:7e:df:a3:99:a0:11:
64:58:46:6a:8f:fa:6d:c3:75:97:49:21:0a:6f:bc:e6:71:ea:
13:89:08:28:50:56:bf:b2:c8:f6:6f:6d:eb:45:84:8b:47:5a:
d1:73:b6:62:0a:3f:29:20:67:76:c6:11:9a:40:6c:25:b6:a1:
42:3d:6e:7c:ba:46:59:25:2c:4b:5e:b9:b3:e3:f1:a7:38:0f:
76:03:e4:15:91:14:8f:1a:05:b9:27:77:ff:c7:54:89:48:71:
05:52:92:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 11 09:15:39 2023 by rpki-client on console-fra.rpki-client.org