Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M7aeOmIBihVlSiOTvUsh2eFppls.roa
File: M7aeOmIBihVlSiOTvUsh2eFppls.roa (raw, json)
Hash identifier: LGfj7LpaQC6TUmTo6hyjGdEVve6vRu8EsltnhULlzJc=
Subject key identifier: 33:B6:9E:3A:62:01:8A:15:65:4A:23:93:BD:4B:21:D9:E1:69:A6:5B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01872E0F557A2C5981C8478CE463D7773407
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M7aeOmIBihVlSiOTvUsh2eFppls.roa
Signing time: Wed 29 Mar 2023 15:49:29 +0000
ROA not before: Wed 29 Mar 2023 15:49:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2e:0f:55:7a:2c:59:81:c8:47:8c:e4:63:d7:77:34:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 29 15:49:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=33b69e3a62018a15654a2393bd4b21d9e169a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:8b:3a:80:bc:c7:03:3c:46:8e:58:c0:b5:
e9:0f:30:31:bc:19:da:fe:d1:80:da:a2:e4:14:9f:
d2:a1:67:31:ae:c4:f6:b4:ce:0d:17:9c:c9:19:41:
c4:97:ac:b1:d5:ae:c9:db:fc:10:7e:12:fd:04:7e:
75:f4:83:79:ea:6f:5a:07:c6:e6:c4:8b:92:5e:de:
c9:af:9a:3d:e6:9c:e6:69:c3:ff:87:d3:90:6d:6e:
82:80:a0:bb:10:e3:31:ef:bd:5c:52:94:b2:26:fc:
54:a1:69:93:56:71:3e:99:fa:f5:93:a0:7f:b6:cf:
b2:69:c8:b0:78:69:dc:81:ac:cd:e2:8b:fe:34:8a:
50:a1:19:cd:ed:63:40:b4:6a:77:d6:f7:50:96:df:
1c:93:53:bb:c8:c9:8d:aa:a5:51:00:3a:76:f3:c9:
26:ec:69:3b:09:81:c0:6b:86:60:f1:79:53:42:7e:
82:18:c6:b5:cd:12:8c:78:a7:1e:36:16:3a:7f:e5:
c9:18:56:03:f0:26:d4:20:0c:22:28:9d:fd:11:3c:
39:b1:7e:f3:d2:34:83:45:cb:6c:2d:5a:ab:e3:10:
ec:c3:30:16:7d:b5:8c:93:74:04:96:5e:8c:c7:4d:
f2:cb:eb:24:d6:7c:b0:89:a5:af:35:21:ec:42:1d:
da:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B6:9E:3A:62:01:8A:15:65:4A:23:93:BD:4B:21:D9:E1:69:A6:5B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/M7aeOmIBihVlSiOTvUsh2eFppls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.133.0/24
193.124.203.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.82.0/24
194.87.118.0/24
194.87.136.0/24
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
11:1f:09:f3:a1:91:e0:1d:98:41:a9:81:1f:a8:f4:aa:c4:04:
06:12:82:62:f7:cf:95:52:7e:c9:ec:14:f7:28:0b:fc:61:b0:
db:95:41:d3:13:c6:97:3c:c6:f6:66:b3:ef:ed:6a:88:52:f1:
91:8b:35:b4:1e:e7:19:d5:05:60:54:77:0f:83:a4:8a:02:a5:
1d:62:f8:18:08:a2:83:7e:bd:36:00:a7:a6:60:b3:14:d1:e8:
79:36:18:0a:12:f1:c5:e3:7d:2d:94:d1:9c:20:ce:16:e5:90:
86:fb:4b:86:b5:ea:52:fe:41:83:8f:6a:db:ed:11:16:99:dc:
f5:f2:4c:ec:f4:5b:51:16:aa:2d:50:3a:52:3b:6e:23:d9:db:
8f:d0:c1:19:fb:81:43:17:71:0f:9e:9d:0f:6b:cd:fa:1b:c0:
ed:89:d5:98:1d:87:0e:d0:c6:c0:49:7b:d7:c6:01:72:7f:14:
87:21:7f:c3:57:e2:80:3d:a7:cf:59:9c:b4:29:6c:57:7c:8a:
c1:1e:03:c5:3a:98:06:22:f0:71:fb:ec:df:3f:5b:74:ff:3a:
bd:bc:b7:93:d8:6e:82:ee:b5:f0:54:af:52:97:30:40:6a:59:
7c:58:12:8b:49:1f:6a:4b:9c:1b:5b:d2:9e:79:92:2d:13:7b:
99:ea:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-ams.rpki-client.org