Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Kfs0LvRZvd_Uk7KBc3V5amtE-AI.roa
File: Kfs0LvRZvd_Uk7KBc3V5amtE-AI.roa (raw, json)
Hash identifier: bs+KuO9lNW9808HkVQQ2W1trO/hDUymx3IwQQ0TU0g4=
Subject key identifier: 29:FB:34:2E:F4:59:BD:DF:D4:93:B2:81:73:75:79:6A:6B:44:F8:02
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018606AF779846B19A29D9BBC5AA6B3892FE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Kfs0LvRZvd_Uk7KBc3V5amtE-AI.roa
Signing time: Tue 31 Jan 2023 07:16:48 +0000
ROA not before: Tue 31 Jan 2023 07:16:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.123.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.136.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
195.133.12.0/24 maxlen: 24
192.124.172.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
212.192.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:06:af:77:98:46:b1:9a:29:d9:bb:c5:aa:6b:38:92:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 31 07:16:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29fb342ef459bddfd493b2817375796a6b44f802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:71:ba:c1:08:77:5d:8a:b2:78:ee:8d:a8:19:
91:fc:72:e7:95:94:a7:b2:5a:d0:2e:11:29:06:c2:
e0:75:fc:39:dc:7a:93:21:68:98:50:d5:cd:37:68:
2f:07:71:63:f9:99:68:8b:a3:d4:f3:28:86:36:09:
be:20:7f:ca:70:08:5c:56:10:c9:2c:0a:52:58:78:
b4:2a:eb:7a:03:a6:e1:51:8a:05:76:c7:64:a3:e3:
13:fe:35:e5:da:85:1c:95:72:60:5f:1d:6e:da:8c:
fc:c9:de:ab:0b:62:0a:b9:6b:39:ed:ff:a0:84:1f:
5c:75:e3:f2:34:d6:f1:d5:d0:8f:f2:a5:73:69:fe:
a1:a9:5d:2c:7d:7a:dc:9c:55:29:d6:28:5d:a1:34:
d8:72:3e:33:23:cf:78:12:19:6a:c8:11:e5:2b:57:
18:48:c4:d8:e8:19:39:f9:ad:e0:fd:2c:d1:71:be:
cf:4c:18:e8:8d:87:8f:43:cd:1c:5c:64:b7:99:d9:
b4:87:94:15:ea:60:ec:73:b7:11:43:d5:c3:bb:b5:
b7:14:4a:5e:9b:fa:f9:f1:95:0d:26:e8:ac:fb:0d:
75:b8:06:48:9b:f7:f2:4d:1f:98:6f:c9:b5:0f:ba:
b7:4f:48:cb:1d:af:1c:ea:32:21:a8:09:1e:75:20:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FB:34:2E:F4:59:BD:DF:D4:93:B2:81:73:75:79:6A:6B:44:F8:02
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Kfs0LvRZvd_Uk7KBc3V5amtE-AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.182.0/23
193.124.8.0/24
193.124.133.0/24
193.124.203.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.87.6.0/24
194.87.17.0/24
194.87.22.0/24
194.87.27.0/24
194.87.82.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.122.0/23
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.165.0/24
194.87.171.0/24
194.87.198.0/23
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.12.0/24
195.133.55.0/24
195.133.94.0/24
195.133.193.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.192.211.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5b:44:b0:40:74:00:50:d0:34:2e:c7:d8:ad:9b:59:00:bf:
e2:a0:4d:81:98:b4:5e:ed:03:f1:85:38:b0:03:e0:44:c0:4f:
72:ed:e2:74:77:34:68:ec:be:54:a4:bd:d2:46:d4:14:74:e4:
02:56:b3:4d:d1:3d:2f:0e:ba:c7:aa:53:a0:93:22:c9:f9:98:
5c:83:21:66:5d:20:97:36:84:b2:60:a5:bb:5b:b6:18:12:ad:
df:ac:fb:cb:70:cf:c4:21:a1:0d:5b:b3:fc:11:3b:27:99:84:
3e:2d:2d:b9:23:1a:47:03:8c:df:bc:e1:6b:80:a0:29:cc:3d:
b4:04:7e:b9:4a:9c:9b:c6:96:aa:94:fd:cb:8a:09:e1:79:a8:
65:ee:5e:53:c3:56:b0:98:6b:e6:53:8e:34:2a:87:87:93:9e:
89:ec:14:53:eb:80:01:42:6e:19:c1:a4:b0:16:6d:b7:21:72:
cf:85:c8:98:5c:28:2d:c6:cb:03:05:33:23:1f:8d:20:19:c5:
2d:1b:de:c9:8f:ac:55:68:d4:c3:53:ce:00:cf:12:34:e9:10:
1d:43:c9:16:fd:d2:33:14:8c:6c:c6:94:02:55:8e:5a:1c:40:
0b:dc:19:30:63:7e:7c:aa:3d:88:34:c9:c7:e3:a0:0e:b3:e4:
cb:dd:5d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org