Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TWezrQJ1h4bZiFT4gXfTHGI9QBo.roa
File: TWezrQJ1h4bZiFT4gXfTHGI9QBo.roa (raw, json)
Hash identifier: 29bTPnZlyHj4eXzkFzCpl4vBkntgDG9Cfn9kdFYaW2s=
Subject key identifier: 4D:67:B3:AD:02:75:87:86:D9:88:54:F8:81:77:D3:1C:62:3D:40:1A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185EEE910697B81C8CFA06FA1D7B6380978
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TWezrQJ1h4bZiFT4gXfTHGI9QBo.roa
Signing time: Thu 26 Jan 2023 16:28:49 +0000
ROA not before: Thu 26 Jan 2023 16:28:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.31.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.13.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
192.124.188.0/24 maxlen: 24
195.133.40.0/22 maxlen: 24
195.133.39.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ee:e9:10:69:7b:81:c8:cf:a0:6f:a1:d7:b6:38:09:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 26 16:28:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d67b3ad02758786d98854f88177d31c623d401a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9c:eb:cc:3f:a1:1f:f5:f9:33:ba:19:23:2f:
57:28:c4:df:b0:87:65:6a:72:d8:fa:94:82:67:e9:
e2:b4:5f:56:a1:2a:fc:ca:9d:12:a4:72:83:77:1f:
8b:4e:c2:11:1d:65:a1:94:16:2a:28:5b:ca:36:6c:
54:fe:50:c6:e0:46:5a:00:9e:74:81:c1:61:da:3d:
a0:de:7b:d3:88:7b:8d:38:66:a1:fa:8d:f2:dc:ad:
bf:fd:dd:6d:ae:04:08:84:c0:4d:83:85:a5:ab:4b:
58:33:9a:3f:c8:2b:20:70:e5:b7:06:e6:81:76:b3:
3f:a7:59:43:6b:aa:00:6b:fe:bd:cd:a9:f7:85:42:
db:7e:de:e6:2f:9d:b9:03:14:6e:ab:19:00:7c:a5:
e9:6e:47:d4:56:67:e6:2e:6a:51:12:f2:f3:f0:ad:
08:28:80:04:02:8f:6d:bf:1a:9e:10:9d:49:e7:49:
de:6c:0d:b9:1d:51:39:bc:fc:30:83:b9:ee:9e:81:
46:43:b2:ff:93:92:4a:70:01:0c:79:e0:8d:a9:fa:
42:14:a4:14:ca:1d:3c:6c:2a:2f:ad:ea:4c:18:bd:
f2:f6:e1:c9:f9:74:ab:86:2a:04:93:71:f4:43:17:
35:79:dc:13:2f:0a:9c:16:9e:a4:41:e1:b1:4c:41:
a5:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:67:B3:AD:02:75:87:86:D9:88:54:F8:81:77:D3:1C:62:3D:40:1A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TWezrQJ1h4bZiFT4gXfTHGI9QBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.188.0/24
193.124.227.0/24
194.85.249.0/24
194.85.251.0/24
194.87.187.0/24
195.133.13.0-195.133.14.255
195.133.37.0/24
195.133.39.0-195.133.43.255
212.192.4.0/24
212.192.240.0/24
212.193.28.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
97:86:e3:f1:dd:6b:f1:8c:92:30:dc:50:90:b3:5c:05:ee:92:
a1:a3:01:d8:2e:aa:67:22:ec:40:1c:78:f1:d2:66:d8:08:2c:
0c:26:26:cc:4d:3d:56:0a:e5:c9:40:9c:b2:1e:52:39:c5:22:
3b:e6:23:51:6c:aa:d8:01:a5:6a:3e:e9:6b:bb:ef:e1:95:e9:
66:ad:0e:b3:ee:ed:d9:bf:2b:ae:4d:62:17:eb:85:6f:cd:d3:
20:98:a6:d9:16:ac:6a:05:44:ae:c1:dc:7c:8f:5c:08:30:38:
82:52:a8:69:b6:50:04:92:d0:b2:52:45:d6:ce:a7:6b:eb:22:
02:96:40:c2:9e:7f:1d:e7:c7:fc:d2:73:fe:49:9f:a2:24:66:
e2:b7:7d:5c:09:d4:e5:21:80:1f:d2:01:eb:cd:a5:d4:a3:03:
f6:52:bc:5a:be:31:a4:e7:03:15:28:96:d7:ce:7e:fa:6e:c2:
86:26:2a:b4:25:23:45:3c:ff:6b:bd:86:ca:05:36:f7:26:3a:
4d:1f:f0:00:d0:47:16:d0:cb:59:45:7d:39:cd:79:5d:d6:39:
22:38:d4:1f:8c:03:e0:34:1d:c2:63:32:65:06:3f:3a:25:1c:
55:ef:23:48:94:6a:7d:3f:7c:29:b7:9b:63:1b:80:da:49:26:
f8:79:c0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org