Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vgq4TVBJkU1eTb-rK9wbsKbBZIc.roa
File: Vgq4TVBJkU1eTb-rK9wbsKbBZIc.roa (raw, json)
Hash identifier: k61aviLpupO+cw87m4dqjIY5Ud3FAVmmOls8xDXns6w=
Subject key identifier: 56:0A:B8:4D:50:49:91:4D:5E:4D:BF:AB:2B:DC:1B:B0:A6:C1:64:87
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A2DC775BA30532F247B45744F5EE0185F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vgq4TVBJkU1eTb-rK9wbsKbBZIc.roa
Signing time: Fri 25 Aug 2023 17:39:21 +0000
ROA not before: Fri 25 Aug 2023 17:39:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213035
IP address blocks: 212.193.28.0/24 maxlen: 24
212.193.29.0/24 maxlen: 24
195.133.16.0/24 maxlen: 24
195.133.17.0/24 maxlen: 24
212.192.218.0/24 maxlen: 24
212.192.219.0/24 maxlen: 24
212.192.216.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
212.192.240.0/24 maxlen: 24
212.192.243.0/24 maxlen: 24
195.133.42.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
194.87.132.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2d:c7:75:ba:30:53:2f:24:7b:45:74:4f:5e:e0:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 25 17:39:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=560ab84d5049914d5e4dbfab2bdc1bb0a6c16487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:a5:55:1f:05:ad:1f:28:ed:62:ce:5b:6b:
f7:7a:cc:5e:a8:dc:1c:80:ec:c1:d7:23:91:20:5c:
aa:44:10:a1:7f:7c:3f:b8:5f:b2:b6:9d:00:69:47:
e9:2f:6f:e2:bd:f9:39:b7:86:03:56:82:44:23:08:
85:2d:64:38:ef:4a:d8:d3:5a:6e:d9:7c:54:cd:f0:
cd:48:be:39:63:12:13:c9:a2:0b:40:6f:8b:ce:2f:
2b:59:31:8c:dc:2f:f6:7b:5d:31:c6:d4:4d:f0:ed:
aa:bd:3e:a5:71:de:b4:69:c8:9a:6e:68:cd:63:fe:
21:08:36:61:dc:58:a9:4f:2f:ec:5a:aa:e2:3c:99:
5b:65:33:39:94:13:60:74:df:04:eb:1c:90:ab:a3:
fc:83:d7:15:45:7b:53:45:3c:e3:74:2f:c9:14:51:
74:3e:b5:87:4f:38:e1:ac:d8:d8:bf:0f:51:2b:1e:
70:4a:e8:3d:d5:25:0f:53:05:9e:a3:c8:98:f2:cf:
60:5b:96:cf:81:b5:7f:33:ba:f7:09:c9:9b:9c:09:
0b:8f:a3:50:48:28:c4:f8:7b:74:c4:03:a6:95:bb:
69:47:a0:99:f3:fa:55:c6:3c:0c:b1:28:b2:79:86:
d3:dd:0c:01:09:27:bf:80:1e:9f:0d:51:d7:e1:62:
b3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0A:B8:4D:50:49:91:4D:5E:4D:BF:AB:2B:DC:1B:B0:A6:C1:64:87
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vgq4TVBJkU1eTb-rK9wbsKbBZIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.132.0/24
195.133.16.0/23
195.133.42.0/23
212.192.216.0/22
212.192.240.0/24
212.192.243.0/24
212.193.28.0/23
Signature Algorithm: sha256WithRSAEncryption
51:f3:91:02:14:9b:60:51:af:ee:a0:87:4b:d4:c7:30:fa:8e:
43:31:3c:a1:54:95:a6:05:18:3e:1d:d2:cb:93:6b:08:6e:39:
ae:8c:51:31:e8:a0:cf:06:52:41:e3:8c:91:29:4b:18:1a:9f:
58:47:8d:f8:6e:11:23:ea:79:94:35:48:60:93:3d:f6:b2:af:
32:08:1f:20:b3:99:57:40:a7:15:24:89:0b:a1:76:56:29:9a:
a6:2c:99:b3:4e:f2:3f:a9:4a:ce:65:0d:ba:c0:e0:67:1b:bc:
00:a0:de:22:d5:b9:c7:45:23:89:26:32:0b:1e:f6:99:21:3d:
b6:81:e2:c0:aa:fd:4e:1c:5f:9a:31:ec:31:87:ff:06:ff:0f:
4c:ff:f8:fc:ca:a8:7b:94:6a:26:0e:1f:28:0d:25:84:06:b9:
cd:13:25:fa:21:8a:2d:70:b6:aa:22:0f:18:1b:32:2f:cf:b6:
e9:07:f3:94:ca:33:fd:df:19:44:1e:df:53:e2:a3:b0:a6:f7:
fe:f2:c9:3a:6a:94:82:66:d8:89:58:75:b2:91:6c:11:09:0e:
1c:ba:a1:7a:21:35:79:d0:b9:e9:b6:b7:7d:05:09:67:14:c1:
46:f9:d5:da:2b:7c:3c:a4:c5:74:9f:96:4f:f5:52:ea:97:c9:
ac:4a:da:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 15:38:47 2023 by rpki-client on console-ams.rpki-client.org