Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KHFIVMuMw4Zm3RTOghEAKE_V53o.roa
File: KHFIVMuMw4Zm3RTOghEAKE_V53o.roa (raw, json)
Hash identifier: nPRPc2I6HMHJDXMZJl0uPjP4+/gyqXvToIEVNs3HZrU=
Subject key identifier: 28:71:48:54:CB:8C:C3:86:66:DD:14:CE:82:11:00:28:4F:D5:E7:7A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BFA59A7BEF9B04E721B08A80B6CCEEB05
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KHFIVMuMw4Zm3RTOghEAKE_V53o.roa
Signing time: Thu 23 Nov 2023 04:04:21 +0000
ROA not before: Thu 23 Nov 2023 04:04:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
192.124.178.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:59:a7:be:f9:b0:4e:72:1b:08:a8:0b:6c:ce:eb:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 23 04:04:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28714854cb8cc38666dd14ce821100284fd5e77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:f6:20:03:e3:2a:cc:67:87:4c:37:52:c1:
93:b9:e4:1f:a0:dc:63:fa:a3:df:e8:80:0d:4c:ae:
6a:68:70:fe:38:d6:10:84:bf:7c:3e:6a:a9:c1:98:
6d:9f:95:ea:a2:f0:3a:12:8e:dc:27:54:4d:45:c3:
a4:42:2f:dd:d5:9a:70:8f:3a:2d:a9:30:8b:dd:00:
b0:e5:ef:c3:5c:db:e0:65:fb:1f:bd:50:a2:38:bf:
35:21:cf:25:00:fa:a0:81:04:66:de:e1:eb:82:11:
6d:3c:35:c1:ad:4f:16:c7:05:cd:d8:41:dd:7a:08:
87:3a:fd:23:21:75:84:b7:90:14:92:11:17:9d:67:
f8:32:d8:d5:2e:ef:0a:45:24:11:91:e1:37:54:01:
d0:86:37:93:7c:bf:3b:78:02:84:0b:6c:1d:b6:65:
91:0f:ed:4a:17:05:dd:c8:1d:dd:f9:b9:31:9b:9c:
19:66:40:c0:68:bf:01:cc:c6:96:34:b8:87:a2:bc:
b6:2c:b8:0b:91:46:e4:d7:4b:7b:b3:b0:fd:51:bd:
30:65:2a:33:5b:e1:39:72:77:a6:fe:8e:da:d8:f7:
dd:cb:cb:35:0c:80:47:87:5a:84:66:4c:5f:71:bc:
8d:e0:bd:7c:e1:d3:4c:1a:d0:a5:e2:b9:32:01:cd:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:48:54:CB:8C:C3:86:66:DD:14:CE:82:11:00:28:4F:D5:E7:7A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KHFIVMuMw4Zm3RTOghEAKE_V53o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.168.0/24
194.87.179.0/24
194.87.200.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:fc:11:95:8b:99:30:21:43:33:b9:93:ef:3b:27:95:db:30:
aa:dd:16:1b:c1:c5:e0:b5:a8:d0:f4:b5:3e:45:70:2e:a4:45:
88:bb:39:f6:ed:ad:b1:55:ca:90:51:b7:0a:ed:50:5b:c8:d2:
0a:c1:24:49:1d:6c:b0:7e:8a:03:3e:a4:39:34:35:4c:42:7b:
2f:62:80:55:07:d4:7a:12:3b:b1:39:9e:ea:91:5a:55:65:62:
e3:73:36:78:7e:c0:96:c2:b3:56:3d:13:5f:a4:f5:be:77:0c:
d5:34:4e:1e:6a:06:99:d0:ec:75:96:78:0f:e6:e5:4f:4c:d4:
f7:49:63:54:f7:3a:24:c3:7f:87:77:d0:1d:66:9c:fa:be:82:
34:13:c0:aa:ab:f9:c1:8e:39:d5:14:a3:27:0f:bf:1d:5c:a4:
83:46:ab:e7:be:e8:ec:d9:96:5e:b6:e0:f2:00:3f:24:e7:2e:
eb:0f:24:f4:14:a9:39:55:71:3e:c2:b8:c3:2f:bd:3b:3f:89:
4a:c5:2c:ca:18:6f:45:b4:6e:8f:c0:8c:87:aa:c5:c1:77:3b:
cb:d4:a2:68:db:e3:21:5e:7f:3b:28:74:41:a7:97:5f:df:2b:
d7:f2:a6:59:ba:ef:5c:12:95:62:1a:0d:30:f8:eb:55:72:ca:
27:d3:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 23 11:36:03 2023 by rpki-client on console-ams.rpki-client.org