Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VuzjDfQpCVB08_xwAKJKhJf9y2c.roa
File: VuzjDfQpCVB08_xwAKJKhJf9y2c.roa (raw, json)
Hash identifier: NEMTAYU+Pv8rfOLx4xye6pwy+JMzBEabsKNh3tShmdo=
Subject key identifier: 56:EC:E3:0D:F4:29:09:50:74:F3:FC:70:00:A2:4A:84:97:FD:CB:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189F488BAD727B44C6E545B36C433832BFC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VuzjDfQpCVB08_xwAKJKhJf9y2c.roa
Signing time: Mon 14 Aug 2023 14:52:28 +0000
ROA not before: Mon 14 Aug 2023 14:52:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f4:88:ba:d7:27:b4:4c:6e:54:5b:36:c4:33:83:2b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 14 14:52:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56ece30df429095074f3fc7000a24a8497fdcb67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:ec:9b:03:f0:db:b6:a3:5a:d6:a9:2b:ed:
91:7a:b5:2b:db:0d:b0:9b:ec:64:3f:20:97:08:7f:
34:37:8d:c7:7e:e8:6a:67:02:df:1b:c1:92:bd:37:
eb:81:08:66:76:7e:9d:33:48:c2:d4:6c:5a:8a:0b:
2d:81:81:29:26:46:65:ee:07:6b:f8:b9:9c:45:7a:
17:4a:3c:e1:f7:91:f8:91:3a:55:9b:1c:ef:95:e8:
11:30:10:31:68:8c:12:f3:9d:0b:c3:d9:21:01:34:
19:e2:32:7c:32:01:21:15:cc:04:d5:ad:96:af:d4:
15:f5:47:86:93:36:d5:f2:4a:4c:4e:62:fc:34:2c:
aa:ef:b6:f3:02:b3:54:9e:65:82:60:c7:ac:b7:d9:
fc:40:f1:ee:f2:f6:25:c1:3a:f9:02:b3:7b:c1:2f:
60:e5:3c:7e:3b:72:33:38:17:7e:3e:d3:86:3b:9b:
aa:7b:15:94:19:ee:e7:7e:fe:71:8b:0d:eb:de:75:
22:82:0f:ba:8e:9d:91:d8:f4:3b:4a:1d:b2:56:c5:
f7:9d:7d:a7:db:e7:f2:ad:bf:9f:77:94:87:69:1d:
80:2b:b1:f7:d0:cd:c2:93:d0:16:2a:db:09:d1:63:
67:90:15:b6:9f:26:4b:16:0e:45:7b:f8:9c:22:94:
1f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:E3:0D:F4:29:09:50:74:F3:FC:70:00:A2:4A:84:97:FD:CB:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VuzjDfQpCVB08_xwAKJKhJf9y2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.182.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.24.0/22
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/24
194.87.134.0/23
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.73.0/24
195.133.84.0/23
212.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
96:86:87:44:4e:10:3b:e8:58:44:7b:30:93:53:6c:a7:f1:49:
4c:d2:bd:34:6f:5f:f2:68:46:fd:92:26:87:9b:51:a2:41:a3:
d5:0f:82:b6:aa:5b:b1:a8:ad:0a:47:35:ad:40:d9:e7:5e:0f:
c1:1f:cd:23:5f:b7:8b:c2:72:49:a2:85:ac:0e:94:9c:19:30:
29:d9:6a:4e:c0:15:9f:05:ab:fe:f6:87:b6:7f:36:b2:09:0f:
6f:f0:b5:8f:21:9d:7f:3c:5f:ec:63:a3:93:c9:56:16:1a:66:
6d:44:f9:d2:6e:b5:f4:e3:2a:0d:59:63:ae:ab:3d:c7:2f:fb:
a9:59:49:a5:79:c1:88:6d:00:ba:37:26:ef:16:4b:71:96:2c:
ee:55:91:2e:07:54:ff:69:f1:82:52:77:81:87:c8:0b:d5:53:
a4:87:b8:72:4c:9a:94:26:8d:55:72:b2:25:ff:3c:7e:ef:af:
9d:f6:4c:b7:90:17:d1:b0:40:c3:7b:a4:37:b4:8c:ff:98:32:
b5:5f:ca:f1:07:da:96:84:61:6a:02:89:4a:81:a9:aa:43:de:
b0:f7:4c:8a:ec:dc:b5:29:b6:08:e3:79:ed:21:34:4f:13:43:
47:d2:62:cf:40:bb:a8:ca:4a:4f:07:96:33:da:cc:14:9e:2b:
7f:85:cc:0b
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 18 15:22:12 2023 by rpki-client on console-ams.rpki-client.org