Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L3h9fVRJ9CTJlleXO3MoN7ZqKgY.roa
File: L3h9fVRJ9CTJlleXO3MoN7ZqKgY.roa (raw, json)
Hash identifier: QJw3g6818tR8ink8QgkE9BDOavZTJLwyd47DNLWkBV0=
Subject key identifier: 2F:78:7D:7D:54:49:F4:24:C9:96:57:97:3B:73:28:37:B6:6A:2A:06
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B4BCF423F1051DFB4292E5B9DA6215E00
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L3h9fVRJ9CTJlleXO3MoN7ZqKgY.roa
Signing time: Fri 20 Oct 2023 06:39:15 +0000
ROA not before: Fri 20 Oct 2023 06:39:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.63.0/24 maxlen: 24
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4b:cf:42:3f:10:51:df:b4:29:2e:5b:9d:a6:21:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 20 06:39:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f787d7d5449f424c99657973b732837b66a2a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:11:ba:d7:c3:ca:cd:fe:8e:5d:08:16:9c:
44:a3:72:fc:5b:19:59:3e:3c:a5:c3:0b:a0:14:7a:
b9:f2:68:55:86:63:dd:60:9d:c6:77:24:76:96:e0:
92:cc:4a:44:b0:e8:a8:fd:1d:60:de:5d:29:74:cc:
6e:ac:57:19:c9:4e:3c:1b:76:fb:35:37:83:07:75:
f7:6a:0d:06:7f:28:33:6e:1b:91:21:60:04:7b:ec:
57:7b:0d:73:0d:fb:46:83:7a:12:69:8e:71:b8:60:
cd:18:83:92:fc:40:46:f7:26:81:73:f5:05:cb:8e:
8a:a4:19:d6:87:8c:e9:2a:72:a6:c5:e3:6b:a7:94:
f4:61:27:05:46:5e:2c:15:ed:4f:20:3e:44:84:67:
26:c4:ee:5b:57:8e:a1:89:d6:96:d4:fe:55:47:f4:
7b:9d:d1:55:8f:74:6b:3f:b8:9d:dc:fa:5f:45:90:
1d:83:e8:96:33:85:40:33:fc:0f:a1:d6:43:6a:b3:
03:d8:4e:3e:ff:60:f9:c2:b5:64:b3:0d:77:82:27:
2a:7a:db:b9:1f:6e:96:c4:60:c0:6f:7d:33:b7:96:
06:35:04:56:ea:6a:16:f0:3f:5a:30:ee:51:76:37:
4e:57:c4:31:e1:9a:7e:5a:2a:15:b1:f6:af:a6:c8:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:7D:7D:54:49:F4:24:C9:96:57:97:3B:73:28:37:B6:6A:2A:06
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L3h9fVRJ9CTJlleXO3MoN7ZqKgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.181.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.220.0/24
194.87.222.0/24
194.135.18.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c0:d6:e5:04:17:85:e5:fb:32:1e:68:25:47:77:80:89:f8:
26:b9:f3:db:58:b6:28:fc:ac:8f:29:a6:cb:9c:4d:24:08:2a:
7c:d9:6d:71:c3:a2:b4:20:2b:6b:52:b8:a3:92:93:40:5b:e6:
77:56:f9:60:75:0d:e2:0b:9b:41:0a:e8:03:a7:8a:c9:c2:33:
38:6b:fa:13:47:53:a1:48:f4:16:2b:ad:d5:6b:b8:0c:09:d2:
1f:54:3d:76:e1:49:6e:d6:49:55:f8:b0:f7:8a:00:9d:4e:4b:
31:fb:ab:73:ac:9c:f5:80:f7:94:39:07:3c:aa:7a:0f:42:e0:
b1:98:20:ae:23:5a:7f:8e:72:bb:bb:37:69:cc:cb:2f:e1:bf:
fd:eb:4d:e0:6c:69:eb:6f:9d:76:4f:53:ff:86:33:a5:b2:56:
04:02:d6:05:4f:4d:b0:81:05:97:28:48:60:e5:90:1e:b4:bb:
84:d3:bc:dc:a0:18:89:b3:11:a2:78:84:5b:bd:97:c9:e2:e4:
3a:67:2a:58:22:34:00:3a:f6:d2:5b:de:1b:1a:4f:f0:1a:7d:
bf:4e:4f:91:48:7b:5e:98:11:f4:76:fc:ae:6e:42:4a:1e:05:
31:0f:58:ef:c4:ee:20:ef:9f:df:7c:df:9f:c5:b1:48:57:1c:
bd:43:85:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 23 10:11:27 2023 by rpki-client on console-ams.rpki-client.org