Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P7WI2DhPugU91beqkGlfgfyBviw.roa
File: P7WI2DhPugU91beqkGlfgfyBviw.roa (raw, json)
Hash identifier: ifkL1KbvpLiJJNtgYX5Q4dHW8hI5OXrJiu43HAfZnZc=
Subject key identifier: 3F:B5:88:D8:38:4F:BA:05:3D:D5:B7:AA:90:69:5F:81:FC:81:BE:2C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189A572BCE8B14E00CDAD46C55D17B0E494
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P7WI2DhPugU91beqkGlfgfyBviw.roa
Signing time: Sun 30 Jul 2023 06:18:27 +0000
ROA not before: Sun 30 Jul 2023 06:18:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 62.76.226.0/24 maxlen: 24
194.87.3.0/24 maxlen: 24
195.133.84.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.34.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.87.176.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.117.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.119.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.86.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a5:72:bc:e8:b1:4e:00:cd:ad:46:c5:5d:17:b0:e4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 30 06:18:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fb588d8384fba053dd5b7aa90695f81fc81be2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:c2:7e:cb:0e:2b:03:78:80:fc:05:dc:dc:
d5:f8:58:f6:ea:6a:4f:35:f2:86:4b:94:e7:6a:85:
bf:f2:f6:be:d8:5c:5f:b2:6d:b8:16:55:23:13:67:
c0:8d:7b:cb:9f:2b:46:38:89:81:b4:67:8a:e1:e7:
9f:2a:73:31:5b:69:79:98:04:f1:25:29:60:5a:d1:
77:f0:bc:c2:1d:14:8b:14:a1:74:b9:00:14:73:53:
21:66:30:be:6b:38:4c:48:f7:49:6c:86:53:10:85:
c2:a2:69:55:6d:7b:67:2f:ab:77:e0:1a:e3:b8:0d:
26:d3:55:ea:84:e8:03:87:51:be:cd:57:03:56:e9:
5d:4d:fb:6f:2f:ad:ba:59:1f:7a:8c:4e:22:5c:38:
cc:9e:c7:8c:88:22:d9:d2:eb:0c:fd:db:29:ab:f6:
d2:da:c1:65:1a:3c:9a:f9:fe:45:03:84:93:ff:2b:
85:8f:07:d4:db:91:11:70:7e:f0:aa:94:20:04:2b:
6c:69:43:3f:e2:17:1e:4d:ea:2e:ea:f7:92:8c:d2:
c6:33:9f:9d:b1:09:0e:6c:8e:cd:de:9e:12:7b:71:
ce:d6:09:33:66:1e:05:00:fb:4e:13:bb:17:2e:ef:
e6:1e:0d:81:66:2a:75:ed:bf:16:2c:1d:1b:63:6a:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B5:88:D8:38:4F:BA:05:3D:D5:B7:AA:90:69:5F:81:FC:81:BE:2C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/P7WI2DhPugU91beqkGlfgfyBviw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
194.87.3.0/24
194.87.16.0/24
194.87.34.0/24
194.87.42.0/24
194.87.86.0/24
194.87.91.0/24
194.87.104.0/24
194.87.117.0-194.87.120.255
194.87.176.0/23
194.87.188.0/24
195.58.56.0/24
195.58.59.0/24
195.58.61.0-195.58.62.255
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:85:7d:48:ec:c9:27:f2:59:97:6f:59:84:3f:d1:b5:d5:b1:
96:e6:c2:87:ad:6f:4a:93:08:5e:72:05:9a:49:ea:e4:67:c8:
1d:5a:67:b5:aa:32:ca:c0:6f:7b:84:ee:2b:6b:87:ba:61:7a:
0c:db:f4:9d:d7:ee:fc:85:92:38:74:d4:ee:4b:80:83:48:3a:
ec:a4:5b:fb:fe:5f:42:05:e8:87:f9:b4:46:05:0f:8f:0e:f2:
a7:21:ed:73:ad:24:b8:6d:99:af:fc:d7:2b:65:7d:bf:72:a2:
59:eb:02:ae:c7:aa:b7:cb:ac:2d:aa:54:12:7c:44:ed:b6:fb:
da:d4:15:2a:93:9b:cf:f7:82:c3:5c:e0:03:fd:55:f8:81:b7:
f4:41:77:08:73:73:77:50:44:9c:f1:57:ff:22:cc:b3:43:f6:
87:88:1f:20:45:0c:65:bd:d3:ec:a7:eb:31:99:57:a0:bf:39:
bc:06:ad:63:3a:f8:5c:db:58:32:8f:28:98:cb:54:c2:b9:fe:
48:d0:37:ad:aa:e3:10:33:bd:67:89:88:b8:41:cf:54:0d:e3:
b5:e1:e5:75:73:5f:5a:6c:8b:2f:b0:3e:c7:68:54:f0:7a:61:
38:e0:d7:01:eb:d0:4d:7a:e7:66:3d:3c:07:90:56:db:56:3d:
1e:50:4e:da
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 30 07:01:35 2023 by rpki-client on console-fra.rpki-client.org