Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WAaCCqiDTSaZ1OuZ_HfCSW_dfeY.roa
File: WAaCCqiDTSaZ1OuZ_HfCSW_dfeY.roa (raw, json)
Hash identifier: W+7d3hrPghCqDlXj1AlbgxFMgkeKhm/iqIKt49JIUL4=
Subject key identifier: 58:06:82:0A:A8:83:4D:26:99:D4:EB:99:FC:77:C2:49:6F:DD:7D:E6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A11F68B3523AE32C1B190BFB0BE3278A7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WAaCCqiDTSaZ1OuZ_HfCSW_dfeY.roa
Signing time: Sun 20 Aug 2023 08:01:24 +0000
ROA not before: Sun 20 Aug 2023 08:01:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 195.133.81.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:f6:8b:35:23:ae:32:c1:b1:90:bf:b0:be:32:78:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 20 08:01:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5806820aa8834d2699d4eb99fc77c2496fdd7de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:28:54:f4:8f:e2:5c:77:17:02:98:5b:18:
aa:1e:8b:af:de:ca:45:5f:71:4d:6b:ab:a9:2e:52:
a7:b7:b1:44:00:b9:aa:9c:67:dc:6d:e3:65:c2:ce:
09:49:69:e5:13:b1:3c:3c:f8:21:1b:b4:16:31:d2:
2b:89:a9:dc:4c:f9:d3:2e:39:7b:eb:b6:47:79:87:
84:84:47:d0:4f:d3:3a:c1:b6:ff:67:88:8b:5d:7a:
94:b5:9d:60:ac:c0:07:79:21:3b:12:60:8a:2e:0b:
b6:6a:58:6b:83:52:fd:e7:25:3d:84:14:40:7e:32:
65:99:be:fb:08:5e:a0:42:8b:ad:d8:44:55:18:38:
cf:ae:9a:a2:53:b5:3c:e6:88:1b:7e:f1:ac:74:10:
7d:82:6e:ab:36:6c:8f:6b:69:85:12:a3:02:e6:3d:
56:ff:32:14:d6:3f:75:66:06:5b:93:4d:24:3d:38:
36:3f:2d:09:4b:b5:75:17:05:27:81:d0:dd:f5:46:
65:32:91:02:7b:97:8e:4e:0c:53:7e:e1:b6:8d:e4:
fe:34:70:49:3d:4f:b6:01:43:1c:88:eb:8d:2a:56:
aa:b9:a8:2c:6a:00:64:88:4f:30:f3:9e:87:24:ba:
dd:83:06:9b:f1:c7:97:b0:0b:58:d8:e4:8b:e7:77:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:06:82:0A:A8:83:4D:26:99:D4:EB:99:FC:77:C2:49:6F:DD:7D:E6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WAaCCqiDTSaZ1OuZ_HfCSW_dfeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.41.0/24
194.87.228.0/24
194.135.30.0/24
195.133.81.0/24
195.133.194.0/24
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6d:5c:16:aa:a8:8f:22:e4:81:24:42:d5:47:ba:dc:2e:57:
9b:ae:fa:0d:a1:07:6a:71:db:59:79:5f:ba:5e:ac:ae:a6:25:
31:52:d1:31:32:16:9d:aa:f4:4e:28:6d:c4:01:f5:4f:ae:5a:
34:81:a6:ac:ac:c7:fa:c0:17:7d:96:f6:a7:10:21:f6:6b:45:
01:9d:3f:e1:db:08:03:10:b5:2c:f4:ff:de:c4:e2:14:8e:6f:
88:11:db:1e:1a:46:a6:c6:03:5b:44:9c:18:89:72:9d:c9:7c:
6d:d1:ba:b6:62:43:ea:f0:17:fd:c5:95:5c:97:92:ce:66:b0:
85:2d:a0:4f:ab:dd:c0:5f:c4:58:c7:fd:3b:c5:fb:70:a1:cd:
39:ff:4a:ba:a5:67:cc:25:22:25:4b:d5:5e:b0:b4:d7:0f:f9:
0b:bf:c2:46:49:61:f2:ba:c2:3e:d3:1a:67:99:20:cc:cd:04:
ed:94:03:1b:8d:f4:e2:16:0a:08:3a:64:00:35:2d:96:1b:06:
f6:ef:d5:c2:8c:0f:54:92:a9:95:28:4d:08:a6:19:11:db:df:
09:27:36:ee:9e:86:63:29:33:4d:49:b7:ff:3f:d1:ab:b9:1c:
20:21:34:b6:2a:41:fb:8a:ce:7a:bf:21:70:48:89:be:26:7a:
c0:24:7e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 06:31:40 2023 by rpki-client on console-fra.rpki-client.org