Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HbXdR7No8mkaUIWAVYTiZb489VU.roa
File: HbXdR7No8mkaUIWAVYTiZb489VU.roa (raw, json)
Hash identifier: nSBCH4FJJZoR+rA2C++GbJl8yWEvoURglIHYt23+j58=
Subject key identifier: 1D:B5:DD:47:B3:68:F2:69:1A:50:85:80:55:84:E2:65:BE:3C:F5:55
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B5BE1A3E9F215516018F46133A955B591
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HbXdR7No8mkaUIWAVYTiZb489VU.roa
Signing time: Mon 23 Oct 2023 09:33:16 +0000
ROA not before: Mon 23 Oct 2023 09:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.63.0/24 maxlen: 24
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:e1:a3:e9:f2:15:51:60:18:f4:61:33:a9:55:b5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 23 09:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1db5dd47b368f2691a5085805584e265be3cf555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:fe:47:56:10:d0:8b:c8:24:c2:3c:cd:fc:40:
97:a5:b1:2e:3b:5e:f9:c5:53:09:e8:a7:ee:07:af:
2d:37:4a:bb:a2:2f:a2:93:16:30:f4:74:8b:f2:89:
9d:7b:94:16:e4:0d:18:5b:f3:d6:1c:44:b9:19:2b:
0d:9c:8f:a2:1b:00:31:00:05:67:3c:3f:44:97:3e:
53:e7:54:e5:7e:2a:33:30:1d:c9:3a:8f:5e:f8:03:
50:06:8e:eb:77:61:cf:34:dd:73:bf:55:b6:f9:22:
fa:65:12:74:c2:63:4d:60:f0:11:07:f7:8a:24:39:
eb:30:58:44:60:8c:24:aa:7c:3a:ae:89:8f:83:6d:
5e:3b:aa:c5:da:8c:39:6c:cd:55:61:e7:e7:8a:b3:
51:4f:f4:2b:e3:2d:ec:67:b2:ed:0e:a2:be:cb:eb:
fe:e5:44:e0:6b:36:23:df:b7:a3:8c:b8:71:0e:da:
71:22:fd:2d:75:9e:9b:d6:cf:52:be:af:5f:52:df:
2f:60:42:19:e1:07:52:6f:59:d3:96:a2:62:d4:35:
54:55:76:12:48:2c:0f:d9:27:7f:7c:44:94:97:cb:
16:47:9a:06:5c:2b:df:72:79:9f:55:5b:dc:f8:62:
01:e8:6b:2b:9e:3d:6f:86:5b:0b:3b:0b:02:a4:06:
e0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:DD:47:B3:68:F2:69:1A:50:85:80:55:84:E2:65:BE:3C:F5:55
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/HbXdR7No8mkaUIWAVYTiZb489VU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.220.0/24
194.87.222.0/24
194.135.18.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:13:25:11:df:1f:02:44:e2:fc:03:7c:18:02:01:bc:d3:51:
39:f8:24:7c:4a:1a:1f:8c:8b:fc:fb:84:5f:4b:df:0b:57:28:
6e:d5:fd:63:5d:25:9d:ec:e9:ee:c5:fa:f6:b3:96:b7:7d:57:
b0:17:ba:bc:1b:89:ed:4b:66:2c:3b:8c:dd:dd:c3:ce:c1:d0:
c1:97:62:96:99:d2:81:67:df:67:8a:d5:ec:b1:a7:85:73:0e:
0e:f3:0e:0b:45:31:35:b3:2e:fb:3b:6d:fb:ff:b7:50:cc:0f:
34:5a:c6:5e:a9:07:a8:14:9d:f4:0d:ba:d5:c3:97:53:79:13:
26:5b:fb:5e:e4:a5:5f:54:5c:41:ca:30:1f:8f:75:39:89:47:
70:df:ba:93:cb:34:4a:d5:a8:0f:21:a5:50:a9:49:fb:1c:ec:
7e:f0:7a:b9:89:dd:d7:1b:b5:bc:a3:1e:1a:f5:0a:bc:13:45:
95:ac:19:63:a8:b0:e5:df:12:12:dd:0f:6f:5e:01:27:fe:ce:
61:ba:16:15:b3:aa:d3:5c:47:93:74:5a:b6:f0:8f:79:e5:68:
4d:12:0e:67:11:95:d7:8b:af:21:23:e4:56:43:70:7e:46:e3:
cd:1c:34:60:94:ac:9b:7e:d3:df:4a:a6:8f:22:37:c4:50:ba:
2c:18:f2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 18:09:36 2023 by rpki-client on console-ams.rpki-client.org