Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_i_5-0N5k2rh7AwNCzaQi1fB9qs.roa
File: _i_5-0N5k2rh7AwNCzaQi1fB9qs.roa (raw, json)
Hash identifier: 5iDOAf5J5TWJWF1fE365jX+4j/ZHH6aLv6BjD7bCHf4=
Subject key identifier: FE:2F:F9:FB:43:79:93:6A:E1:EC:0C:0D:0B:36:90:8B:57:C1:F6:AB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B94F39FF0E96DDA612A7CC14376E96FD3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_i_5-0N5k2rh7AwNCzaQi1fB9qs.roa
Signing time: Fri 03 Nov 2023 11:31:16 +0000
ROA not before: Fri 03 Nov 2023 11:31:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:f3:9f:f0:e9:6d:da:61:2a:7c:c1:43:76:e9:6f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 11:31:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe2ff9fb4379936ae1ec0c0d0b36908b57c1f6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:46:3c:a1:3a:1a:ef:94:b0:41:78:a5:53:50:
98:b5:2c:ba:b2:f6:5b:88:db:b3:a8:15:c2:29:59:
a6:20:12:e7:93:62:e9:5e:1f:22:de:76:77:3d:31:
eb:c8:8c:c9:79:77:db:18:35:4a:9b:5c:8f:85:da:
92:ea:53:ad:eb:21:2e:65:8a:e7:f0:58:55:a4:d2:
2f:79:43:1d:1e:01:ef:1f:85:d0:f9:48:04:bc:11:
ce:03:49:5e:a6:b3:f2:b7:39:85:10:35:a4:69:4a:
1c:5b:e6:c8:28:dd:a8:87:fd:31:d2:17:56:e8:72:
14:27:8d:fa:dc:d7:aa:51:ca:13:5c:cd:7e:b8:3d:
34:70:16:7c:45:90:a2:38:50:b2:4f:3c:7c:91:3d:
bc:38:ea:61:cb:9c:c2:43:28:e4:07:dd:aa:71:01:
a2:67:4d:9e:eb:ab:e1:b4:25:78:a3:51:29:6d:0f:
84:02:4a:57:96:9d:0d:c3:61:dd:38:eb:3e:02:e9:
05:cd:25:ca:8e:37:44:c5:b9:53:38:40:3a:db:69:
49:9a:09:52:3f:ef:94:41:dd:ef:de:a5:e9:ff:a2:
51:fb:7c:59:be:c7:ce:72:ec:19:bd:bd:ce:92:24:
04:0c:fe:36:93:5c:50:ac:1b:38:79:cc:3d:74:50:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:2F:F9:FB:43:79:93:6A:E1:EC:0C:0D:0B:36:90:8B:57:C1:F6:AB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_i_5-0N5k2rh7AwNCzaQi1fB9qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.200.0/24
195.58.35.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d6:b6:43:38:4a:dc:32:66:f4:6f:0e:9e:ad:6d:00:7e:ae:
b9:08:ad:2d:08:6b:5b:23:45:46:a7:44:8e:4c:83:1b:95:c3:
d3:e3:e6:bb:4b:8b:36:1f:45:17:4a:11:f2:8e:3c:57:2c:4f:
19:27:39:76:39:5d:4b:91:95:2d:9d:aa:c3:05:82:0a:45:8d:
84:a9:9d:46:37:18:00:e3:8c:b7:73:2c:25:f8:aa:31:f3:9f:
1a:42:1a:1a:e3:85:8d:eb:d5:0c:48:d7:dd:58:74:03:8a:ba:
90:0b:7d:83:c1:29:1a:b4:63:93:85:9e:d0:1c:0b:03:35:41:
bb:bf:0d:30:a5:55:ab:12:c3:e2:1f:01:a7:02:56:b6:00:97:
a4:3d:03:a8:ee:b9:db:ef:58:cd:09:73:da:44:6d:ef:60:37:
13:85:4c:79:eb:ed:ea:ed:89:25:84:76:d0:5d:9c:2d:6d:17:
23:a8:57:35:67:4b:67:97:46:1f:9c:83:68:32:1b:d9:0a:68:
5b:c5:53:27:ea:d1:f9:67:53:1d:7f:86:20:7d:cb:57:45:a4:
b4:ad:65:dc:b8:54:b6:c8:60:60:c0:86:66:36:c8:ae:1a:97:
bc:bb:3f:da:de:f3:c6:1f:09:60:05:5d:21:dc:b5:09:16:28:
5a:d6:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 7 11:45:50 2023 by rpki-client on console-ams.rpki-client.org