Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OhIwFzUXZRGjisCa-Iv9tQ_3gds.roa
File: OhIwFzUXZRGjisCa-Iv9tQ_3gds.roa (raw, json)
Hash identifier: 8148CO1+VAKB36aINPbcR35qOqEWNESVICV+ZVlGrbQ=
Subject key identifier: 3A:12:30:17:35:17:65:11:A3:8A:C0:9A:F8:8B:FD:B5:0F:F7:81:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01894E186F8B202CF1218B311EBD4125EDA3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OhIwFzUXZRGjisCa-Iv9tQ_3gds.roa
Signing time: Thu 13 Jul 2023 07:12:51 +0000
ROA not before: Thu 13 Jul 2023 07:12:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 62.76.224.0/24 maxlen: 24
193.124.22.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
192.124.176.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
194.58.68.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
194.87.39.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:18:6f:8b:20:2c:f1:21:8b:31:1e:bd:41:25:ed:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 13 07:12:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a12301735176511a38ac09af88bfdb50ff781db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cc:e0:65:a8:e6:22:e9:58:9b:19:83:19:c9:
f5:98:5b:d7:f6:e5:5e:2b:ef:37:24:7c:f9:3e:f7:
d0:87:97:c2:f7:1f:25:f3:d1:88:fc:f3:22:5e:ba:
7d:46:62:72:ee:59:21:a3:66:f5:7c:4f:c8:d4:08:
57:8f:d2:35:e7:bc:d4:16:c1:72:dd:6c:56:75:ae:
c3:7e:17:2a:2f:39:57:96:2b:f9:71:f2:df:39:2e:
a5:ff:86:b8:57:6b:87:8e:e5:0b:55:f9:02:3c:9e:
8e:22:7a:1d:9c:0a:70:eb:92:b6:52:26:dd:5a:76:
5b:2e:64:fc:d0:ca:90:9b:4b:80:ed:fc:f5:c0:71:
39:01:54:81:9a:29:16:47:ad:8d:1b:f2:84:42:ca:
fa:73:8f:8c:85:b1:39:fd:3b:05:da:38:ba:74:dd:
0a:d2:10:19:8a:55:12:a2:81:41:1e:7f:3e:db:c6:
be:9a:b2:55:d7:15:4e:59:f2:b7:3d:37:7c:2b:1e:
9a:b0:7d:5f:67:2c:b4:8f:31:65:43:01:82:ae:3a:
f3:7b:37:24:2b:81:4d:e9:50:7c:af:bd:0b:ca:b4:
35:5a:b2:37:70:2b:0c:9a:2d:6e:e0:cf:bd:92:c2:
99:7e:b7:a0:d9:e1:f0:0c:d6:7b:12:04:55:7c:a3:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:12:30:17:35:17:65:11:A3:8A:C0:9A:F8:8B:FD:B5:0F:F7:81:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OhIwFzUXZRGjisCa-Iv9tQ_3gds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
62.76.234.0/24
185.72.8.0/24
192.124.176.0/24
193.124.22.0/24
193.124.41.0/24
194.58.34.0/24
194.58.68.0/24
194.87.39.0/24
194.87.47.0/24
194.87.189.0/24
212.192.12.0/24
212.192.15.0/24
212.193.2.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:bb:ce:01:9f:8a:8b:15:d8:0b:5c:84:b4:81:c9:ee:43:c7:
a2:8e:8e:32:53:63:fe:6b:5d:df:d8:26:e0:4d:e0:cb:89:26:
62:fc:2c:29:b4:a2:de:30:66:d8:12:cb:fe:21:d6:77:62:85:
97:af:e0:ed:a5:f0:2a:67:93:cc:14:7c:4f:fb:7f:4c:2b:cd:
84:ba:40:37:2d:06:a3:ef:2b:b4:b9:d5:8c:60:9d:1f:bd:55:
ea:d2:d6:b8:db:3c:ae:a0:bb:e2:ca:3d:61:42:1e:f8:b4:0a:
61:8c:40:c1:79:0c:c9:a6:6f:6c:b0:dd:b5:29:f0:1a:97:7b:
bb:cd:9c:85:b7:e4:39:11:69:4e:7b:da:86:4b:b7:35:31:62:
c8:31:ec:9e:d2:e3:68:fe:6a:c2:dd:6e:40:63:d4:61:8b:58:
38:58:a9:18:fe:7a:16:7e:57:b9:1d:f5:5d:c4:4a:30:88:57:
41:52:83:6e:fd:c8:d4:07:d6:eb:6e:b2:26:48:ab:60:2c:36:
10:69:b7:91:9d:03:41:0a:ed:bf:c5:72:ed:74:a3:7b:34:1f:
26:d1:40:28:c2:8c:f5:f6:79:5e:7b:2e:2d:c8:57:ef:63:40:
0e:12:5d:d3:15:8a:c9:42:0a:ea:05:3d:d5:59:41:47:d5:7c:
2a:73:4d:92
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYlOGG+LICzxIYsxHr1BJe2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNzEzMDcxMjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTEyMzAxNzM1MTc2NTExYTM4YWMwOWFmODhiZmRiNTBmZjc4MWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMzgZajmIulYmxmDGcn1mFvX9uVe
K+83JHz5PvfQh5fC9x8l89GI/PMiXrp9RmJy7lkho2b1fE/I1AhXj9I157zUFsFy
3WxWda7DfhcqLzlXliv5cfLfOS6l/4a4V2uHjuULVfkCPJ6OInodnApw65K2Uibd
WnZbLmT80MqQm0uA7fz1wHE5AVSBmikWR62NG/KEQsr6c4+MhbE5/TsF2ji6dN0K
0hAZilUSooFBHn8+28a+mrJV1xVOWfK3PTd8Kx6asH1fZyy0jzFlQwGCrjrzezck
K4FN6VB8r70LyrQ1WrI3cCsMmi1u4M+9ksKZfreg2eHwDNZ7EgRVfKM/uQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFDoSMBc1F2URo4rAmviL/bUP94HbMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvT2hJd0Z6VVhaUkdqaXNDYS1Jdjl0UV8zZ2RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAPkzgAwQA
PkzqAwQAuUgIAwQAwHywAwQAwXwWAwQAwXwpAwQAwjoiAwQAwjpEAwQAwlcnAwQA
wlcvAwQAwle9AwQA1MAMAwQA1MAPAwQA1MECMA0GCSqGSIb3DQEBCwUAA4IBAQBM
u84Bn4qLFdgLXIS0gcnuQ8eijo4yU2P+a13f2CbgTeDLiSZi/CwptKLeMGbYEsv+
IdZ3YoWXr+DtpfAqZ5PMFHxP+39MK82EukA3LQaj7yu0udWMYJ0fvVXq0ta42zyu
oLviyj1hQh74tAphjEDBeQzJpm9ssN21KfAal3u7zZyFt+Q5EWlOe9qGS7c1MWLI
Meye0uNo/mrC3W5AY9Rhi1g4WKkY/noWfle5HfVdxEowiFdBUoNu/cjUB9brbrIm
SKtgLDYQabeRnQNBCu2/xXLtdKN7NB8m0UAowoz19nleey4tyFfvY0AOEl3TFYrJ
QgrqBT3VWUFH1Xwqc02S
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org