Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WZJVNH1Uk5pTaLt_Ejj5klVSgvU.roa
File: WZJVNH1Uk5pTaLt_Ejj5klVSgvU.roa (raw, json)
Hash identifier: 2EiS7mQ/TMtxra0sOkOMZRMmCd4YEvnC71myXBx9Q28=
Subject key identifier: 59:92:55:34:7D:54:93:9A:53:68:BB:7F:12:38:F9:92:55:52:82:F5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AE6F8CE690B06E343548E58A1A7A611E8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WZJVNH1Uk5pTaLt_Ejj5klVSgvU.roa
Signing time: Sat 30 Sep 2023 16:43:00 +0000
ROA not before: Sat 30 Sep 2023 16:43:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e6:f8:ce:69:0b:06:e3:43:54:8e:58:a1:a7:a6:11:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 30 16:43:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=599255347d54939a5368bb7f1238f992555282f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:3e:a5:ac:9f:8a:c3:ae:41:56:50:1b:e0:
dd:17:f0:0b:63:7a:8e:54:bd:a6:fb:9d:92:f7:c1:
08:42:1b:92:b1:8f:10:d0:9e:06:8b:94:de:2c:0e:
a1:92:5a:21:d4:cc:39:f3:0d:10:92:52:3e:19:44:
78:57:04:48:d1:be:4c:5b:b4:87:49:33:d7:bb:62:
c3:70:9a:c0:d9:89:3b:de:92:f2:73:30:1e:b9:42:
8f:08:14:89:ba:fe:c6:06:d7:a9:45:34:7e:aa:cc:
1e:b3:b6:40:44:f4:0b:3a:07:8c:76:6e:34:59:4c:
91:04:25:d6:ed:bb:5f:4c:79:a5:34:41:d3:cf:a6:
11:d6:0c:6a:89:53:16:ae:e2:6b:d2:23:53:53:4c:
e7:84:90:7d:bc:0f:d6:85:25:4a:9d:df:30:c6:ed:
cc:89:31:51:18:c2:80:8c:ba:14:2b:b9:ae:f2:1e:
42:97:7e:a6:25:65:ff:2d:f4:cf:ef:63:24:de:21:
e6:d8:4c:6c:0f:39:5d:02:63:6e:5a:98:b3:6a:bf:
04:1c:63:bd:36:05:21:ae:a9:9d:a9:ed:56:cd:6c:
26:61:cf:f4:30:8e:25:0b:0e:da:25:8e:96:1f:97:
ff:af:cc:df:96:36:71:fc:5d:19:2e:f5:71:04:43:
f3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:92:55:34:7D:54:93:9A:53:68:BB:7F:12:38:F9:92:55:52:82:F5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WZJVNH1Uk5pTaLt_Ejj5klVSgvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
194.135.18.0/24
195.58.36.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.37.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ef:2b:e8:d9:f3:fe:9c:df:2b:e8:e6:15:28:ab:9b:08:4e:
2e:88:7f:ba:92:7e:9e:7c:ff:a2:e8:21:5d:6c:67:9f:e5:36:
ff:c1:a5:55:23:c8:37:a7:f2:8b:3c:81:34:81:ff:0f:41:de:
e4:5e:fa:21:a1:0b:b7:f0:1d:cb:7e:fe:44:d6:3c:20:51:34:
ca:97:26:4b:5d:06:01:80:56:f4:88:56:c6:aa:5f:49:e8:ce:
99:79:c3:2b:d4:16:45:f0:df:e0:59:00:cb:42:bd:69:7f:9c:
35:92:55:c0:3a:b7:cd:11:fd:5b:2d:72:e9:1a:38:ed:e7:5d:
dc:fe:b6:a1:43:fd:57:48:a7:89:6c:48:70:ab:bc:47:2b:51:
b1:51:40:f2:4f:36:df:44:70:1f:c3:33:8c:71:6a:5f:fa:32:
db:64:d2:cf:74:c5:09:fa:d7:30:5d:40:a9:40:f5:14:02:2a:
99:ba:7b:1a:9f:09:5b:e3:24:22:56:49:c1:54:f4:f8:f7:41:
cf:01:35:b9:22:8e:77:df:c8:f2:16:4a:d4:73:78:60:80:ae:
ed:c9:14:db:2d:f0:0c:32:9e:38:9b:b2:f0:ea:46:ad:6c:95:
dd:e0:23:04:21:9e:28:ef:b7:8d:0d:a3:0c:d5:81:c8:e0:c8:
6f:0b:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 16:21:09 2023 by rpki-client on console-fra.rpki-client.org