Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YxdzqFkn2AHwl24d1wj-_vSkV3I.roa
File: YxdzqFkn2AHwl24d1wj-_vSkV3I.roa (raw, json)
Hash identifier: hNAcgkoUAsV6HVKztQQUuH6RD0V6XukjeXtaRsE6a50=
Subject key identifier: 63:17:73:A8:59:27:D8:01:F0:97:6E:1D:D7:08:FE:FE:F4:A4:57:72
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B4818F22738AA4A7C964CD90E091D6B53
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YxdzqFkn2AHwl24d1wj-_vSkV3I.roa
Signing time: Thu 19 Oct 2023 13:21:16 +0000
ROA not before: Thu 19 Oct 2023 13:21:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.63.0/24 maxlen: 24
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:18:f2:27:38:aa:4a:7c:96:4c:d9:0e:09:1d:6b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 19 13:21:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=631773a85927d801f0976e1dd708fefef4a45772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:34:06:e7:be:ed:c8:58:9b:bc:42:6a:75:
d0:b6:6a:e0:e7:bf:9e:57:65:a8:06:c5:2b:8b:7c:
e3:85:dc:2b:2f:f4:08:da:5d:d2:cf:09:d1:ca:1d:
d4:2f:01:f8:87:6c:50:68:0c:40:bf:f4:9b:c8:22:
67:17:1e:db:b2:68:f1:2e:c5:34:51:d0:09:51:85:
33:57:80:16:48:43:8d:d8:51:7c:f3:f4:2f:56:76:
76:f7:d8:cd:54:09:f8:41:13:5b:91:e2:ca:a3:91:
f3:9c:c5:b5:6b:af:b8:7d:91:a9:16:8a:10:20:c8:
ae:e0:0a:a2:fd:e0:29:d1:2f:bf:2c:02:32:43:1a:
5c:32:20:56:ca:61:ca:9a:41:f0:38:73:72:0f:d8:
a0:34:f1:fc:da:ba:32:f1:2e:ab:a2:82:ed:ad:eb:
53:a1:8c:74:6a:11:07:7c:0a:fa:e0:d3:4d:7e:15:
1e:5f:a4:a9:4b:ef:52:03:20:b6:ad:ec:5f:f9:b1:
fe:b3:78:80:34:92:24:e0:63:df:77:d6:0d:1d:5b:
c1:3b:f3:fe:a3:7c:74:1f:68:a2:3b:11:bb:09:cf:
4f:22:b5:b5:75:8a:8a:44:ff:1e:c3:b1:4d:12:93:
9d:06:cc:b8:bf:6f:c8:49:3d:da:ad:98:3a:c2:5d:
a5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:17:73:A8:59:27:D8:01:F0:97:6E:1D:D7:08:FE:FE:F4:A4:57:72
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YxdzqFkn2AHwl24d1wj-_vSkV3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.181.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.220.0/24
194.87.222.0/24
194.135.18.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
90:9e:4b:76:b6:6e:aa:09:b7:0b:67:f6:b2:33:de:95:64:eb:
5c:3f:69:4c:a7:e4:6c:1b:16:68:b4:3a:7f:32:7d:bc:c4:65:
89:96:44:a0:cb:87:00:b9:11:1d:88:8f:45:04:ca:83:9d:08:
ed:d1:26:9b:41:ac:38:55:69:7a:df:08:7b:72:7b:23:95:03:
7b:1a:a8:83:e9:d5:da:6b:52:30:4e:95:0e:db:29:0f:67:9d:
e1:af:cf:9b:9f:bd:67:77:1a:07:b5:92:3f:7b:92:15:b0:1d:
07:09:4f:7b:87:9b:98:2c:2d:60:34:46:7e:4f:cc:5d:1c:01:
ee:04:b8:22:10:2b:8b:d6:96:b3:ff:4b:ce:7d:59:ae:64:88:
15:cc:b5:cd:ca:85:5b:bd:4b:ad:e9:37:fe:82:97:43:05:68:
7a:20:46:12:73:bc:b5:9e:80:ca:21:90:3a:b4:04:a2:7b:2f:
56:bb:bd:8b:9e:0a:03:70:01:74:00:e1:8a:7c:6c:89:aa:35:
fd:5f:51:b1:a5:6f:1f:25:32:00:bc:dc:35:72:53:7e:4a:af:
c9:4b:ac:c5:61:e3:f9:f8:85:da:c6:54:f2:5e:b2:5e:08:42:
65:26:89:90:39:b1:23:dc:64:e9:b6:66:bb:bf:55:56:76:31:
9a:1a:13:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 20 07:30:46 2023 by rpki-client on console-fra.rpki-client.org