Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P2MLRujO5aPpmchJrr54ytrsmFE.roa
File: P2MLRujO5aPpmchJrr54ytrsmFE.roa (raw, json)
Hash identifier: jFxKaUBANWyVofvar565/c654DMCC75W4as90AA2llA=
Subject key identifier: 3F:63:0B:46:E8:CE:E5:A3:E9:99:C8:49:AE:BE:78:CA:DA:EC:98:51
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185A9E8CE363442D87461360A048F87697A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P2MLRujO5aPpmchJrr54ytrsmFE.roa
Signing time: Fri 13 Jan 2023 06:54:44 +0000
ROA not before: Fri 13 Jan 2023 06:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 194.87.3.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a9:e8:ce:36:34:42:d8:74:61:36:0a:04:8f:87:69:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 13 06:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f630b46e8cee5a3e999c849aebe78cadaec9851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:92:c7:96:7b:08:35:55:8a:b3:12:64:81:
5e:8a:e6:0b:96:f8:56:4a:df:66:3b:0e:b4:8a:bc:
ed:66:ac:55:96:58:39:2f:fa:83:1f:fa:00:6e:66:
d1:02:cf:96:97:13:1e:9d:4c:1d:07:c9:67:d9:ad:
2b:38:05:db:78:e7:10:66:61:4a:4d:85:6c:93:b6:
34:2e:fb:80:cd:29:1d:18:3b:93:ea:dc:ba:cd:cd:
3f:94:a5:c8:16:7b:e4:2c:43:f5:62:01:b4:57:39:
24:13:e5:70:a4:c4:c7:eb:51:a7:f5:c7:64:15:91:
c0:f6:aa:81:9d:e3:fa:d8:70:97:91:47:4a:32:bc:
d3:13:02:3f:68:d1:d0:5a:03:a5:db:cf:f4:c6:1f:
c6:27:ea:05:b6:85:cb:3f:19:92:ae:2b:27:24:72:
51:32:7c:39:a2:68:c2:e1:6b:41:2d:0b:63:c8:1a:
3b:0b:10:4c:7e:d1:d6:71:bc:05:eb:95:64:b9:40:
01:e6:e9:4e:fe:a5:e0:90:76:e9:22:6e:f2:0b:b8:
82:b7:90:9b:00:58:16:00:e2:f4:51:51:e7:68:31:
27:12:db:34:a8:09:84:52:73:69:96:74:c8:6a:f1:
c2:90:67:36:a9:10:fe:20:ee:41:db:1a:d6:12:f8:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:63:0B:46:E8:CE:E5:A3:E9:99:C8:49:AE:BE:78:CA:DA:EC:98:51
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P2MLRujO5aPpmchJrr54ytrsmFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
193.124.16.0/24
193.124.93.0/24
193.124.202.0/24
194.87.3.0/24
194.87.16.0/24
194.87.22.0/24
194.87.36.0/23
194.87.177.0/24
195.58.54.0/24
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
20:b9:bf:85:42:5d:de:ef:19:41:6c:ee:82:01:1a:43:23:a8:
c9:9c:c5:a5:08:c3:32:07:07:37:83:b5:7a:52:82:42:b1:d4:
bb:7e:58:a4:76:73:bb:ea:a9:7e:57:52:0c:e2:9f:7e:17:ed:
7b:0d:c1:64:6d:0c:08:04:6e:77:4e:dc:b6:ae:ac:4c:6c:04:
58:9f:59:6a:c3:46:b0:53:3c:d6:b4:5d:ec:9b:5c:32:b2:88:
ce:09:8c:02:0d:37:49:d1:19:55:97:22:1d:bc:7b:ab:54:4a:
98:1b:a4:cd:a2:cf:cd:7c:d2:f3:b4:8b:e9:05:14:0b:d5:86:
f5:00:e1:4f:d3:9a:01:8e:98:74:f2:dc:04:fc:e8:16:25:78:
3c:1e:97:26:59:da:c2:b7:a2:21:65:39:41:c0:10:0c:a5:b9:
e0:9b:9b:da:6c:e9:f8:56:75:e2:2a:ba:5f:67:e1:71:ae:0d:
83:de:e5:c4:02:c9:30:35:21:c1:08:d4:cb:af:db:05:24:f5:
7c:a9:2b:ec:0f:99:0b:9c:5d:e4:78:f4:20:71:8a:05:14:f2:
e9:22:18:d1:6f:b2:aa:e5:6b:bf:d1:99:b3:0e:3e:a2:a3:b0:
c3:37:55:ed:4b:eb:94:8f:da:a3:48:03:e8:93:e7:a2:86:85:
6e:56:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org