Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MnC5qTdFkGTNjINW7U-oulCfmDM.roa
File: MnC5qTdFkGTNjINW7U-oulCfmDM.roa (raw, json)
Hash identifier: 8/g/FHk2KizSKnuYzKhqxHMy6IiMcpbWdzxFgfmru3E=
Subject key identifier: 32:70:B9:A9:37:45:90:64:CD:8C:83:56:ED:4F:A8:BA:50:9F:98:33
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189C05BA588229FAAA1E82CC46CE9E4D713
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MnC5qTdFkGTNjINW7U-oulCfmDM.roa
Signing time: Fri 04 Aug 2023 11:42:58 +0000
ROA not before: Fri 04 Aug 2023 11:42:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.36.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c0:5b:a5:88:22:9f:aa:a1:e8:2c:c4:6c:e9:e4:d7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 4 11:42:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3270b9a937459064cd8c8356ed4fa8ba509f9833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:71:12:ba:77:47:29:9f:7b:e5:7a:a3:8f:6d:
4f:f3:d4:cb:ca:f6:e2:5f:fc:67:ac:1a:51:9a:7a:
7f:7b:75:96:86:f8:71:d3:74:90:1c:fe:18:1d:77:
c0:c4:26:9b:32:92:b2:77:81:bd:a8:65:cf:15:b3:
73:c0:c6:cd:b3:3f:3e:31:c4:f7:b4:03:b5:b4:3b:
1f:c6:99:92:45:5e:14:bc:96:66:73:2b:97:6c:b9:
59:ec:4f:eb:cf:f9:b5:6f:39:ee:36:2e:76:95:7e:
b1:74:75:a7:a7:32:2a:41:3a:a7:54:1c:c5:ac:d2:
fd:9f:5c:70:b2:bf:d3:9a:cc:7b:12:d7:c5:88:80:
f3:7d:78:8e:47:85:be:b2:47:f4:34:05:35:e7:4b:
da:72:0c:52:cb:92:0c:73:89:3b:d1:f7:c0:bd:43:
67:b8:2e:80:24:37:4c:11:8d:98:e9:b5:f2:db:e6:
25:00:ee:da:41:d3:a7:a6:34:1a:a3:01:66:7e:5b:
fe:e0:d9:21:e3:13:91:b2:06:ad:8f:94:d5:4d:1a:
c3:f4:ff:11:24:fb:c2:06:a4:2c:38:c6:92:a1:a5:
10:bb:11:32:eb:b6:7f:ab:1f:75:55:0f:3e:4e:8e:
a5:6d:8d:f3:44:d1:86:09:5d:11:bb:c7:7c:0a:01:
b6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:70:B9:A9:37:45:90:64:CD:8C:83:56:ED:4F:A8:BA:50:9F:98:33
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MnC5qTdFkGTNjINW7U-oulCfmDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.182.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.24.0/22
194.87.36.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.134.0/23
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.35.0/24
195.133.73.0/24
195.133.84.0/23
195.133.194.0/24
212.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e3:f2:e3:af:25:c2:6e:39:21:1c:2e:63:31:eb:2f:fe:60:
eb:37:24:c1:d4:34:34:49:58:8b:65:55:5c:47:07:82:04:01:
d1:b4:41:88:fd:04:59:d8:42:34:f2:8d:f2:cf:66:df:2c:03:
f2:75:ad:43:1c:60:3f:8d:7a:47:3b:cd:48:27:45:30:de:31:
1a:11:a0:d4:06:87:39:b1:8a:f5:0e:c0:2f:67:73:f9:5d:b9:
89:c2:59:8f:2b:fc:89:ab:f8:3f:73:f9:8c:7b:15:91:71:97:
a0:70:2c:7f:a3:64:55:1c:9d:7c:0e:d4:28:21:e5:88:72:00:
85:13:ee:8c:bf:b0:89:c3:be:99:40:7f:4d:03:b2:10:bf:3e:
5d:eb:fd:aa:3c:f4:2a:a5:f9:86:97:72:ae:2f:15:04:63:73:
9c:86:be:bf:c2:59:54:9c:30:9b:e3:b4:44:97:96:12:b7:fd:
05:ff:b6:83:ae:75:8a:a9:db:f1:02:78:67:85:b4:11:b1:f4:
1b:57:90:1b:63:5d:a3:ed:4b:81:b0:08:8e:84:20:dc:7b:23:
b7:71:68:3c:fb:92:25:a8:b4:88:2b:20:cc:10:ac:6d:0c:02:
2f:64:99:6a:d8:b0:c7:eb:97:07:45:1b:ad:bc:7d:d2:39:a7:
e6:c0:5b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 7 13:54:01 2023 by rpki-client on console-ams.rpki-client.org