Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RHTMIlJcsRxyz7WEeL36MQ1UP4c.roa
File: RHTMIlJcsRxyz7WEeL36MQ1UP4c.roa (raw, json)
Hash identifier: nx0e08iLnsgGBepc7OQwUiZxZiA1EwcsDWLLGeU2OMI=
Subject key identifier: 44:74:CC:22:52:5C:B1:1C:72:CF:B5:84:78:BD:FA:31:0D:54:3F:87
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186CBBE536CA68F6C54D9A9421937906167
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RHTMIlJcsRxyz7WEeL36MQ1UP4c.roa
Signing time: Fri 10 Mar 2023 13:38:13 +0000
ROA not before: Fri 10 Mar 2023 13:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 62.76.226.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cb:be:53:6c:a6:8f:6c:54:d9:a9:42:19:37:90:61:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 10 13:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4474cc22525cb11c72cfb58478bdfa310d543f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ec:04:e5:0b:f8:ab:52:28:07:e4:90:dd:31:
6b:de:0b:0a:6d:4c:a9:59:ab:90:50:35:b1:cf:2a:
e9:c8:f8:b8:46:67:c6:3b:84:66:4a:4d:42:e5:90:
89:87:c7:86:16:73:88:0b:48:a5:b1:4b:c8:00:fd:
c2:06:bd:11:d6:64:1d:cf:c8:03:8c:22:b6:0c:d0:
5f:fe:e1:ae:54:1d:c3:75:46:9e:cf:d3:12:50:66:
0b:e3:ea:e4:b2:d8:08:ca:93:3f:f3:3a:10:e7:04:
c4:d1:59:bb:29:07:56:5d:15:7f:fc:b9:ea:85:f1:
d7:f2:aa:6d:78:87:37:8f:ea:9b:ef:81:a2:20:a0:
26:0a:bf:61:3a:ec:4c:36:b8:55:b0:78:5a:08:79:
48:0e:d3:ea:c1:ea:bd:9a:28:77:4d:c0:62:de:e0:
d9:78:82:e0:49:8d:39:2a:9b:40:94:e1:2f:75:db:
2e:ce:88:cd:c3:d7:a8:e2:18:24:35:7c:09:12:2d:
8e:16:f8:58:dd:ca:4b:2f:da:2e:4c:7c:57:ec:ce:
36:0d:6f:b7:e2:f2:8e:f9:4e:50:7a:32:42:2a:90:
15:75:15:65:0c:c6:d8:87:87:b6:24:58:92:d8:cc:
52:14:ad:10:54:43:c7:99:e4:1e:3e:1a:49:ce:9e:
80:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:74:CC:22:52:5C:B1:1C:72:CF:B5:84:78:BD:FA:31:0D:54:3F:87
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RHTMIlJcsRxyz7WEeL36MQ1UP4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.180.0/24
193.124.90.0/24
193.124.200.0/24
194.87.10.0/24
194.87.124.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:17:41:b6:8e:af:08:91:ad:f4:6a:c1:06:00:69:14:69:fb:
1b:e3:40:fb:10:68:5e:44:3d:50:dd:be:2d:df:7a:04:98:93:
e8:8e:41:21:2b:12:a4:20:87:6f:c6:6d:35:5b:d9:4c:d4:04:
ba:4f:54:ae:bf:fc:ae:65:7c:db:f8:2a:6a:3b:b3:4f:23:fb:
a0:fb:a2:e2:7c:6f:dd:dc:ff:c2:45:2f:45:d2:3c:34:ec:f4:
df:8c:7b:91:2f:63:5f:36:75:8e:84:4c:57:3e:ef:53:1c:44:
f1:34:08:bd:e3:5f:76:01:82:8e:dd:00:89:d4:e2:3e:c4:c4:
3b:1f:6c:f7:4b:03:3b:bc:a9:9e:fa:61:a0:26:eb:86:0a:aa:
79:ef:86:68:dc:38:94:e2:7a:bf:e5:09:df:51:59:db:47:e1:
9e:5a:74:5d:fb:b6:fe:a8:ea:a5:9f:04:b6:a6:68:33:a1:0e:
22:3c:4b:21:a9:f1:79:d8:87:3d:f9:a8:d1:a6:1a:27:7b:7b:
ed:ff:dc:05:b9:60:99:57:e2:b6:7b:ac:ae:08:59:8a:76:41:
50:bf:6c:48:7b:5f:7d:5f:4a:23:cb:da:10:6c:e2:64:cd:1f:
04:1a:55:a3:b0:12:8c:c5:8f:e6:f1:a1:c3:52:31:46:e8:0c:
b4:75:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org