Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zp9F48SPamhfeeaJj0_ituUeOmo.roa
File: Zp9F48SPamhfeeaJj0_ituUeOmo.roa (raw, json)
Hash identifier: TaHdZCwjkquBcmRnZvko2Jj/WZ33dKv/hG7CPKbW/3w=
Subject key identifier: 66:9F:45:E3:C4:8F:6A:68:5F:79:E6:89:8F:4F:E2:B6:E5:1E:3A:6A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018912315F073461ECE46A620C8863AB348F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zp9F48SPamhfeeaJj0_ituUeOmo.roa
Signing time: Sat 01 Jul 2023 16:02:52 +0000
ROA not before: Sat 01 Jul 2023 16:02:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 193.124.226.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.254.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
212.192.13.0/24 maxlen: 24
195.133.52.0/23 maxlen: 23
195.133.56.0/22 maxlen: 22
195.133.59.0/24 maxlen: 24
194.87.118.0/23 maxlen: 24
195.133.10.0/23 maxlen: 23
195.133.6.0/23 maxlen: 23
185.72.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:12:31:5f:07:34:61:ec:e4:6a:62:0c:88:63:ab:34:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 1 16:02:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=669f45e3c48f6a685f79e6898f4fe2b6e51e3a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a6:e2:ea:d6:1d:f0:20:75:46:af:72:03:4a:
f9:bd:f4:24:e3:5f:d5:69:c5:c7:54:40:77:a2:31:
73:57:23:89:cf:b7:fe:35:3e:cf:65:8e:f0:ea:bc:
ca:c4:9d:61:f7:6f:d8:2e:1f:7d:c8:2d:51:15:6c:
04:de:24:fc:fb:9d:c7:ff:56:f9:d5:9b:ed:37:5a:
90:30:cb:45:d6:23:9e:1a:d1:d2:00:03:38:29:4f:
92:49:a0:fb:9f:9f:3c:f0:21:1c:ff:64:c6:d7:47:
d8:e8:f2:4e:45:0e:54:9d:53:4d:31:f2:4a:e3:db:
57:30:e9:b8:4d:cf:e5:bf:a8:5f:9a:5d:9e:b9:d8:
9b:99:30:08:9c:71:a3:b3:18:55:c2:85:bc:58:be:
e4:ed:3d:9d:69:ef:64:3a:62:a7:b5:02:95:30:b4:
60:56:a2:bc:d9:f7:26:b6:eb:e2:ec:b9:b1:9b:72:
b3:01:9c:26:71:7c:1e:7f:57:47:ac:8a:fb:bc:dc:
ab:cb:08:da:cc:22:9b:cd:6b:70:87:84:07:11:64:
f0:be:6f:48:e5:82:c0:c2:01:31:76:15:69:f1:3c:
35:b5:91:05:22:65:45:07:47:d3:ce:2e:26:f3:06:
f9:b6:e2:40:7f:39:fd:de:a9:67:c7:71:f4:c3:25:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9F:45:E3:C4:8F:6A:68:5F:79:E6:89:8F:4F:E2:B6:E5:1E:3A:6A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Zp9F48SPamhfeeaJj0_ituUeOmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
193.124.36.0/24
193.124.226.0/24
193.124.254.0/24
194.87.118.0/23
194.87.221.0/24
194.135.32.0/24
195.133.6.0/23
195.133.10.0/23
195.133.26.0/23
195.133.52.0/23
195.133.56.0/22
212.192.13.0/24
Signature Algorithm: sha256WithRSAEncryption
28:42:88:d7:ed:f3:ec:c6:7f:01:5d:87:03:8d:62:99:93:93:
4e:41:86:69:1e:39:d9:77:13:da:f6:88:18:64:7e:47:53:05:
9e:7b:da:2d:65:62:8c:32:73:df:3e:bf:b3:4c:ad:60:7a:3e:
47:74:d4:3d:57:76:17:a6:e2:09:69:4e:fe:ac:14:7b:62:0e:
5a:df:f5:14:9f:88:66:4f:ce:d5:f2:d1:d7:e4:66:38:b2:b0:
d9:09:47:e0:d3:b7:85:ae:92:bc:09:44:bb:c7:8a:14:fe:74:
31:00:8e:0b:57:d4:05:16:4b:f7:45:33:85:43:e1:09:e1:4c:
ae:2d:bd:a6:97:e1:d9:39:c4:ef:95:e1:6f:25:85:fe:c7:31:
1e:72:a7:9c:8f:a5:2c:4c:de:73:eb:95:e9:31:1f:2d:64:d3:
31:2a:a6:38:34:30:f5:c1:b9:e7:4c:85:1b:82:22:e6:89:f7:
c4:f6:70:25:b3:91:a8:40:c3:e5:84:9b:35:ed:d6:f1:69:81:
7b:ec:d8:fa:48:37:05:a3:78:33:71:cb:0b:66:47:68:41:35:
be:f8:a0:f1:f0:fa:08:3c:d7:a7:5e:be:c3:d4:4e:c1:c7:04:
fc:39:a0:7d:d4:07:ba:9b:3f:98:61:ad:3e:5d:bf:35:d7:d0:
eb:42:f6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org