Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N_LXeddoWPuVl1CLxV8XWrJL08k.roa
File: N_LXeddoWPuVl1CLxV8XWrJL08k.roa (raw, json)
Hash identifier: 5ADInDEQEHxx/Wy2R4SMxdfHJ1GlnIFOaAZ83VIPstk=
Subject key identifier: 37:F2:D7:79:D7:68:58:FB:95:97:50:8B:C5:5F:17:5A:B2:4B:D3:C9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A600BDCBB85290DFC83D760487617FD66
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N_LXeddoWPuVl1CLxV8XWrJL08k.roa
Signing time: Mon 04 Sep 2023 11:55:04 +0000
ROA not before: Mon 04 Sep 2023 11:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 193.124.3.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
193.124.6.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
194.58.58.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.78.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
194.87.205.0/24 maxlen: 24
193.124.226.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
194.87.230.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
212.192.210.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:0b:dc:bb:85:29:0d:fc:83:d7:60:48:76:17:fd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 4 11:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37f2d779d76858fb9597508bc55f175ab24bd3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f9:6f:2f:9b:63:3d:14:01:b6:a8:3d:bd:79:
77:63:d9:32:d7:ea:24:0f:9d:02:88:8f:4d:77:01:
c6:52:e8:cc:ca:8f:a2:ae:3e:46:39:7c:bf:bd:22:
d2:b3:42:38:0f:14:dd:1a:b1:61:7a:cc:6e:bd:dc:
0d:f9:d7:6f:8d:82:22:f6:8c:a9:52:84:2b:f8:75:
ca:5e:d2:97:03:61:dc:68:09:16:5b:48:3b:32:98:
d4:5d:5a:10:b8:27:83:79:e1:21:3a:4f:c8:3f:f2:
f3:1b:6e:69:1c:a5:6e:1c:c2:fa:cc:db:e2:2b:e2:
bf:50:ad:28:55:68:d0:78:d3:d3:ce:3d:96:d3:2c:
b2:6e:e3:cc:de:f2:05:57:21:8a:0a:5f:87:64:27:
b0:aa:6c:71:12:bf:7d:74:74:6e:bb:51:4f:4f:e8:
74:08:62:e8:3e:13:50:fa:5c:5b:4e:f9:37:f8:4f:
bb:6d:6f:12:5c:83:73:d9:05:f4:02:ba:63:26:28:
bf:9e:d6:b2:ba:f9:ca:c8:bc:88:2b:07:f7:07:1f:
24:26:42:6f:f2:29:cb:4b:60:22:a7:b0:9d:6a:88:
be:ca:ba:7c:af:ad:b4:65:75:87:ce:bd:c2:30:17:
5f:11:fe:98:41:14:67:f7:7a:da:78:2f:fe:dc:f0:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F2:D7:79:D7:68:58:FB:95:97:50:8B:C5:5F:17:5A:B2:4B:D3:C9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/N_LXeddoWPuVl1CLxV8XWrJL08k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
62.76.235.0/24
193.124.3.0/24
193.124.6.0/24
193.124.8.0/24
193.124.91.0/24
193.124.94.0/24
193.124.226.0/24
194.58.43.0/24
194.58.58.0/24
194.58.60.0/24
194.87.3.0/24
194.87.34.0/24
194.87.36.0/24
194.87.42.0/24
194.87.78.0/24
194.87.116.0/22
194.87.165.0-194.87.166.255
194.87.176.0/23
194.87.205.0/24
194.87.230.0/24
195.58.55.0-195.58.56.255
195.58.59.0/24
195.58.62.0/24
195.133.80.0/24
195.133.82.0/24
212.192.7.0/24
212.192.10.0/24
212.192.30.0/24
212.192.210.0/23
Signature Algorithm: sha256WithRSAEncryption
77:f7:71:4f:83:8e:49:70:f1:6d:69:77:a4:f4:ec:08:fd:97:
6d:57:65:27:fb:31:b2:8d:dc:5d:8c:2a:2d:30:5c:01:9b:a3:
01:40:73:b3:6b:b4:5e:6e:35:21:cf:7c:79:48:f3:71:49:c0:
32:41:0a:06:93:fe:f0:69:d6:b0:c9:51:2d:92:2a:88:73:10:
06:ca:73:b5:5a:46:f2:cc:6c:49:eb:e6:8d:55:d4:26:92:e8:
4e:15:ab:0e:26:aa:68:b0:53:b0:fe:8a:e2:53:e5:79:7b:b3:
6a:e2:43:d6:05:f9:54:7e:42:00:40:db:db:88:d1:52:09:32:
e8:d4:56:14:be:0c:b7:6b:46:d3:40:11:0f:14:85:e5:af:a7:
54:21:a4:1c:6b:c3:25:b3:b2:04:23:d4:76:30:07:08:f3:78:
92:dc:d1:ad:26:b6:98:57:e9:4a:39:d4:1c:46:8b:c0:d6:96:
0c:96:db:2b:43:21:a1:76:de:60:3d:02:6d:46:89:7e:48:fc:
06:42:56:fe:9e:63:48:6a:9f:49:1b:6f:68:23:4a:53:6f:ec:
e0:cd:d0:2e:f3:70:24:c4:89:b7:0f:1c:28:49:7e:82:20:bc:
6f:86:d6:ce:10:97:1b:a3:17:6c:e6:c9:30:a7:0b:bc:85:65:
85:e7:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 12:48:08 2023 by rpki-client on console-ams.rpki-client.org