Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WCqdPCCZwI1TKdkYC1sZQ0Z9nbA.roa
File: WCqdPCCZwI1TKdkYC1sZQ0Z9nbA.roa (raw, json)
Hash identifier: e6EODQpjC16a2O5PGOpdsQ6gFD48a45qJaEdjv+/6Jw=
Subject key identifier: 58:2A:9D:3C:20:99:C0:8D:53:29:D9:18:0B:5B:19:43:46:7D:9D:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018962FFB2740EEBAC736BDC416581E67641
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WCqdPCCZwI1TKdkYC1sZQ0Z9nbA.roa
Signing time: Mon 17 Jul 2023 08:37:51 +0000
ROA not before: Mon 17 Jul 2023 08:37:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.105.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.129.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:62:ff:b2:74:0e:eb:ac:73:6b:dc:41:65:81:e6:76:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 17 08:37:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=582a9d3c2099c08d5329d9180b5b1943467d9db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:a4:ea:af:25:34:3d:13:05:56:64:ad:f0:
a9:cc:91:18:d8:f2:7f:81:a3:68:ff:c2:83:85:50:
4b:fa:f7:1c:c2:77:58:c9:e1:22:d8:64:34:a5:45:
65:e4:74:b8:f6:bf:c4:f8:28:bb:dd:d8:96:25:a9:
8c:4f:29:c6:d9:4e:6b:2b:08:47:ec:7f:4a:8c:91:
1c:da:e4:ca:fa:2a:7a:50:5e:28:41:be:46:d7:5a:
53:eb:bf:1f:41:a9:88:4d:5a:ee:d1:53:01:75:a0:
7b:93:f3:0f:0e:78:55:32:a5:4b:ec:67:31:b9:12:
c2:63:21:74:5b:9d:16:17:70:e2:e9:b8:86:c8:93:
b1:c2:c2:84:53:23:53:b0:a0:ab:e9:fe:7f:bc:b9:
51:4e:aa:54:a4:d6:fe:74:d8:42:73:81:97:5e:4e:
cc:32:ee:1a:b1:14:6d:f3:de:76:ce:8a:4c:c0:e1:
15:13:5e:16:3e:75:08:25:3a:ed:b3:3b:c1:ec:7d:
91:d1:cf:05:77:ce:e5:25:2c:48:1a:18:b4:92:5d:
f5:a9:ad:0f:ff:04:7a:87:a0:bc:d9:97:f7:44:41:
a7:77:6f:54:a2:d9:62:fb:2d:4b:ef:bc:74:55:71:
67:c0:16:11:18:6d:0e:d6:d8:f2:0e:e0:09:0d:ab:
c0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2A:9D:3C:20:99:C0:8D:53:29:D9:18:0B:5B:19:43:46:7D:9D:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WCqdPCCZwI1TKdkYC1sZQ0Z9nbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
193.124.5.0/24
193.124.91.0/24
193.124.95.0/24
194.87.51.0-194.87.52.255
194.87.54.0/24
194.87.81.0/24
194.87.105.0/24
194.87.114.0/24
194.87.121.0/24
194.87.129.0/24
194.87.178.0/24
195.58.35.0/24
195.133.14.0/24
195.133.79.0/24
195.133.81.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
24:13:b4:e8:c5:2e:87:a2:92:61:44:de:00:23:64:a8:f0:53:
04:38:f1:cc:a1:b9:79:f8:56:75:a4:f7:ec:04:96:d9:24:b5:
10:2c:5d:8c:b1:37:34:51:ad:19:be:d2:d1:da:25:77:4f:ff:
02:32:f6:00:f5:05:89:71:e4:38:88:71:3a:51:a1:e5:9c:f3:
e1:b2:ed:88:24:31:be:e6:99:3a:31:d9:a2:c5:1a:85:69:f2:
8d:88:74:6a:c9:b7:8e:1c:1b:04:7e:4e:85:c1:69:0b:7b:69:
57:12:29:7c:2e:b9:16:c3:40:68:06:3a:11:2a:86:a5:b8:5e:
0c:b6:64:0d:f4:41:47:c5:c6:65:d2:d1:da:da:49:4c:36:02:
7b:3c:70:d1:28:81:11:a3:71:bb:64:8d:40:4a:13:f1:09:71:
fe:0f:7f:4f:db:94:c9:23:11:0b:d8:d7:67:e8:7e:3b:39:2f:
b1:9d:12:b0:b4:6a:d4:58:c0:09:f2:fe:bc:1f:ce:6e:72:b9:
30:47:ff:a0:97:de:a3:b7:fb:99:be:6e:28:80:61:52:e7:92:
1b:f7:d3:be:7d:83:b7:4d:5e:9e:08:50:07:8e:21:04:da:1b:
78:46:22:60:72:1f:b5:b1:cf:c6:da:ec:35:cc:cd:a9:52:95:
6a:74:e2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 1 11:19:28 2023 by rpki-client on console-fra.rpki-client.org