Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MsKWcLQRUxL_86_4TVnPbHkLlD0.roa
File: MsKWcLQRUxL_86_4TVnPbHkLlD0.roa (raw, json)
Hash identifier: cbMheQvnQRc+vAyE4T26xwjNq+hk6V9oeLjIs9W16Go=
Subject key identifier: 32:C2:96:70:B4:11:53:12:FF:F3:AF:F8:4D:59:CF:6C:79:0B:94:3D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01877A09E55CEEBD9CA1F63977C2FEC48EFF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MsKWcLQRUxL_86_4TVnPbHkLlD0.roa
Signing time: Thu 13 Apr 2023 09:54:41 +0000
ROA not before: Thu 13 Apr 2023 09:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:09:e5:5c:ee:bd:9c:a1:f6:39:77:c2:fe:c4:8e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 13 09:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=32c29670b4115312fff3aff84d59cf6c790b943d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:6d:7b:a9:2f:37:6f:8d:88:af:54:6e:22:
f6:19:a9:2a:3e:c5:6b:a8:96:d8:63:b7:88:9a:cb:
77:a0:34:30:35:85:1e:0c:91:25:80:79:ea:12:29:
d8:7e:f0:37:41:1f:63:c1:69:d0:aa:57:8e:91:e6:
0d:86:29:86:be:86:77:80:42:3c:f5:89:b3:54:cb:
45:42:aa:3e:d4:4a:ec:f0:bf:1c:a7:11:2a:5f:27:
ab:4f:62:ab:15:08:38:c7:05:63:e4:03:2d:7d:40:
f0:6f:3c:56:10:4e:cc:49:f4:29:c6:d6:ac:b0:ab:
92:2f:cc:29:7c:66:76:7c:22:63:96:15:03:7c:e1:
74:3d:23:dd:4b:55:22:b1:a8:f4:1b:87:7b:14:01:
ec:97:42:99:d1:a7:ab:b3:d4:54:67:e6:22:93:18:
4a:2f:a7:85:ea:ce:99:fd:71:4f:7b:fb:fa:18:f4:
a3:a8:9b:f1:b0:ce:fa:d3:26:4f:9f:fc:97:d1:e8:
18:aa:7c:d4:1d:7b:67:66:5f:7c:75:9c:31:0c:31:
34:b9:c5:18:75:5d:d4:33:c7:61:d1:25:08:bb:d4:
a7:8a:bb:3b:86:09:80:02:28:57:8b:8f:69:9c:90:
6b:8b:8e:a0:6d:24:e1:a1:ea:3e:5d:ed:c2:3a:bb:
5c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C2:96:70:B4:11:53:12:FF:F3:AF:F8:4D:59:CF:6C:79:0B:94:3D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/MsKWcLQRUxL_86_4TVnPbHkLlD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
193.124.203.0/24
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.82.0/24
194.87.118.0/24
194.87.136.0/24
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.50.0/24
195.58.56.0/21
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
34:50:85:57:75:2e:1e:af:65:ce:ca:72:2f:06:c4:5a:5b:67:
57:3b:1b:fa:84:cb:75:3f:af:aa:9b:b4:cd:4b:67:6a:6e:79:
2e:37:03:a2:95:ce:02:3d:77:a8:61:ae:81:8f:d6:24:67:dc:
52:e9:d7:c5:60:9f:cd:be:3a:85:dc:47:24:f0:92:26:83:fe:
99:6a:59:5c:da:1e:79:c8:3f:b9:66:ac:e9:57:d9:e1:f4:63:
5c:42:5c:73:ce:a3:7f:a0:6b:18:90:66:36:a1:4d:ab:54:3f:
6a:ba:29:26:cc:4e:64:f7:cf:e8:52:8f:b5:78:74:f5:90:77:
31:cc:a8:d4:39:2b:87:d5:01:61:36:c1:93:fc:f6:35:81:4b:
2f:94:5a:25:e8:6e:04:17:3a:08:fb:32:0a:10:3c:52:da:73:
8a:a6:87:6d:6f:b4:88:86:1a:33:95:8f:5e:2a:d0:07:cc:a6:
0e:12:d9:73:f0:f3:45:2b:f7:b4:4c:24:a0:32:35:c1:53:95:
b1:3d:fa:b9:a4:ad:62:c7:a2:d1:2e:4c:52:7d:41:f6:53:ee:
8d:66:5d:77:c8:00:f5:c1:e9:bd:47:52:06:b8:13:ba:ba:07:
4a:a3:aa:e3:48:23:7f:48:c2:bb:d8:e4:f5:f0:94:9c:31:6c:
b7:ea:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:01 2023 by rpki-client on console-fra.rpki-client.org