Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z1121H1luzs8WRfBPbE4-gBM_y0.roa
File: Z1121H1luzs8WRfBPbE4-gBM_y0.roa (raw, json)
Hash identifier: 6B9w+8EREjACh/EmOCHKvg1+15XOH0qHL1smGCYL2I0=
Subject key identifier: 67:5D:76:D4:7D:65:BB:3B:3C:59:17:C1:3D:B1:38:FA:00:4C:FF:2D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C5E480254536CAE3F90710A8590661B04
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z1121H1luzs8WRfBPbE4-gBM_y0.roa
Signing time: Tue 12 Dec 2023 13:47:06 +0000
ROA not before: Tue 12 Dec 2023 13:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.224.0/24 maxlen: 24
194.87.229.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:48:02:54:53:6c:ae:3f:90:71:0a:85:90:66:1b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 12 13:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=675d76d47d65bb3b3c5917c13db138fa004cff2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d4:5d:33:90:dd:03:18:ac:98:7c:0c:8a:8c:
39:68:fb:dc:4a:d8:1e:18:25:41:9f:84:20:2a:c5:
a1:1f:97:e2:51:2f:32:38:6e:8c:7b:df:e1:e5:95:
c0:fd:49:ff:7e:eb:d7:2b:06:ce:24:51:b6:82:92:
0d:82:96:56:c2:b6:49:e5:23:87:48:a0:e4:66:90:
17:99:9d:9b:09:bd:38:a6:cd:56:08:12:5f:27:4d:
01:f4:32:f0:98:9b:11:1d:06:36:12:66:97:7c:f4:
3b:ba:94:40:a0:cf:a2:cd:6e:d5:2b:ed:cf:b2:f7:
81:89:21:77:36:22:99:23:18:7c:ab:74:fb:b7:d0:
6e:5c:0b:49:49:74:12:cc:fe:ff:59:89:51:08:aa:
16:ae:4d:95:08:86:ca:22:a1:d0:64:88:e1:40:32:
3e:5d:3c:36:c2:0f:c3:71:b7:72:b0:d2:90:66:05:
56:4a:6c:19:ed:0f:42:02:f9:a4:d9:17:4b:e8:02:
4e:34:0b:56:db:24:d4:84:01:1d:dd:5a:3b:10:c4:
b2:bc:59:23:58:35:06:17:87:c6:65:fb:50:b2:36:
5d:d4:f0:11:9d:b1:8a:41:f8:a8:21:3f:87:77:e6:
76:8f:db:02:4c:ca:69:50:2a:d7:86:07:12:b3:0a:
4b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:76:D4:7D:65:BB:3B:3C:59:17:C1:3D:B1:38:FA:00:4C:FF:2D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z1121H1luzs8WRfBPbE4-gBM_y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.26.0/24
194.87.138.0/24
194.87.141.0/24
194.87.168.0/24
194.87.170.0/24
194.87.178.0/24
194.87.224.0/24
194.87.229.0/24
194.87.250.0/24
195.58.54.0/24
195.58.63.0/24
212.192.1.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
93:20:6a:19:7f:40:72:49:34:56:05:7a:71:5e:8d:ea:ee:d5:
52:bf:92:25:87:79:84:e9:b6:f5:08:5e:1c:2b:7b:d5:a6:49:
a8:7e:24:f0:5b:16:71:6d:e8:90:51:a1:88:b3:d6:18:81:75:
3c:49:32:fa:b8:1b:f9:4c:47:0c:c0:4e:51:63:d7:84:47:c4:
c6:c1:eb:f1:27:ab:8c:08:b6:46:5d:b6:00:fa:3e:5e:bb:ce:
bb:3a:0b:67:cd:88:93:9f:fc:1f:c3:bd:b6:d1:1a:36:b0:54:
17:bf:6a:21:a7:51:e0:1c:8e:3f:6d:81:ec:f4:7b:ba:10:c5:
9b:72:5c:4e:f6:82:dd:ac:5c:9d:48:f0:ef:67:1f:f8:ec:0d:
64:5e:1d:7d:18:1a:4f:e8:6b:e2:6c:a9:f5:e9:51:68:d0:b2:
f6:b7:ef:c5:71:61:dd:e1:69:0e:7a:14:e4:d2:ef:fc:cf:31:
6f:31:92:de:05:dc:74:d8:7f:82:14:36:57:72:b3:7e:01:85:
2a:16:ee:8c:53:8a:99:b1:a7:c3:3c:c2:06:86:8a:ad:41:0d:
52:6f:1b:81:e7:71:9d:0d:46:43:a4:1b:5d:a4:35:8c:37:79:
3e:2c:a7:a0:32:bb:c9:fb:32:4d:1d:7d:07:da:f4:23:bb:39:
f7:6e:d1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 05:55:18 2023 by rpki-client on console-ams.rpki-client.org