Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Nx2W7nztw-89m7Zww5UPBbyKJEo.roa
File: Nx2W7nztw-89m7Zww5UPBbyKJEo.roa (raw, json)
Hash identifier: yq/4XZTmo9uKUrPkF+M24uW7xFV/5aVtYmcI0/4AFJM=
Subject key identifier: 37:1D:96:EE:7C:ED:C3:EF:3D:9B:B6:70:C3:95:0F:05:BC:8A:24:4A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185B5E48084B8BCEB318E4336084516D3A3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Nx2W7nztw-89m7Zww5UPBbyKJEo.roa
Signing time: Sun 15 Jan 2023 14:45:29 +0000
ROA not before: Sun 15 Jan 2023 14:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b5:e4:80:84:b8:bc:eb:31:8e:43:36:08:45:16:d3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 15 14:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=371d96ee7cedc3ef3d9bb670c3950f05bc8a244a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:42:8f:03:0c:89:0e:b8:97:09:5d:b3:bb:
51:cd:31:bc:9f:84:1f:7a:6f:9b:8d:94:17:57:18:
1b:4f:74:e3:48:63:36:33:e7:de:de:ed:ed:0a:02:
46:e4:59:81:aa:1d:4d:35:a5:75:76:fc:fb:71:cb:
a6:6c:4f:08:61:3d:23:81:eb:07:14:f0:a0:44:c6:
f6:f3:8d:fd:38:5f:c6:85:49:6c:c4:c0:d9:8b:f6:
e1:29:3b:60:53:d6:b0:e4:f4:d5:1f:59:82:1b:ea:
1d:ff:ca:57:ba:d9:9a:8f:4e:7d:96:d3:0f:e9:bd:
71:ff:64:b5:a9:40:b0:77:cf:cb:e7:8a:e1:74:0b:
06:63:1b:6b:33:42:43:20:9f:66:ba:c8:4e:92:56:
a2:f4:37:2c:71:47:b0:06:f2:3c:c5:48:1f:fb:4c:
96:c8:7d:6d:ba:5d:45:79:a9:4e:5f:c8:60:4e:57:
01:74:d0:6c:81:b9:4d:30:e4:13:9c:d6:a8:45:bc:
c8:27:36:8f:99:41:91:47:5b:a4:db:5c:c0:af:4b:
87:28:be:e8:8b:da:2f:5b:a7:a9:61:b2:a7:a0:79:
81:3b:12:12:32:bf:55:df:b0:0a:1f:bf:cb:cf:89:
6f:de:fb:b6:11:c8:4c:0e:64:79:9b:57:9e:0d:aa:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:1D:96:EE:7C:ED:C3:EF:3D:9B:B6:70:C3:95:0F:05:BC:8A:24:4A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Nx2W7nztw-89m7Zww5UPBbyKJEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.18.0/24
193.124.41.0/24
193.124.205.0/24
194.58.43.0/24
194.58.46.0/24
194.87.30.0/24
194.87.64.0/24
194.87.108.0/24
194.87.161.0/24
194.87.207.0/24
195.133.94.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
76:9f:b5:7c:51:f1:f8:90:2f:4a:9f:ed:f4:5b:01:e6:a5:84:
81:e1:55:86:47:e3:56:b4:fc:57:eb:b4:83:9b:5d:c3:26:78:
39:70:b5:e0:bb:25:5e:d2:4d:9b:e9:e1:6b:b4:17:5c:4b:cf:
4c:67:41:8c:a3:cd:72:5e:ab:e3:2e:88:d4:29:72:f3:1b:af:
64:ae:31:cb:5c:63:26:01:b6:2b:3f:56:27:24:51:6c:7f:d3:
05:2a:ba:af:c1:79:a6:55:58:41:1d:51:2c:62:70:e8:cb:e0:
78:cd:3b:af:41:84:98:5d:3e:02:f3:7d:c7:b8:01:3d:38:53:
8a:0b:5e:12:9c:73:ea:9c:fa:96:f1:11:77:08:ba:65:05:66:
28:a5:82:b1:81:58:9d:c6:67:8b:ad:89:e9:26:8e:c0:60:7a:
78:35:72:53:5a:c5:27:10:ed:5b:52:80:b1:12:be:ec:5d:a2:
d3:b5:2e:a2:e8:2c:88:10:fe:d2:cd:fe:7b:d0:00:ab:88:47:
a4:79:22:ce:78:f6:92:cf:a2:7e:65:bf:98:1f:93:e4:59:9f:
76:9b:ff:4f:a7:4f:34:f8:5d:a4:83:72:03:5f:d5:09:0d:c6:
31:4d:5b:78:36:57:bb:28:3f:90:16:7a:ce:d3:ad:8e:e2:f8:
2a:0a:0d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:02 2023 by rpki-client on console-fra.rpki-client.org