Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a9sMlwZRJ1TFI4cLTyAgxEeywC4.roa
File: a9sMlwZRJ1TFI4cLTyAgxEeywC4.roa (raw, json)
Hash identifier: +EE3YZvFisGkjCIoOB1hqRow3LmXYeVD9RMNIB/f+9A=
Subject key identifier: 6B:DB:0C:97:06:51:27:54:C5:23:87:0B:4F:20:20:C4:47:B2:C0:2E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B36CC3AFB073A0B392C0069775FCFD0E3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a9sMlwZRJ1TFI4cLTyAgxEeywC4.roa
Signing time: Mon 16 Oct 2023 04:43:55 +0000
ROA not before: Mon 16 Oct 2023 04:43:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.135.105.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.8.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
195.133.62.0/24 maxlen: 24
195.133.60.0/24 maxlen: 24
194.87.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:cc:3a:fb:07:3a:0b:39:2c:00:69:77:5f:cf:d0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 16 04:43:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bdb0c9706512754c523870b4f2020c447b2c02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6d:4c:52:22:8e:d3:66:de:4c:93:eb:73:d6:
81:89:1e:bd:79:f9:28:3e:a3:64:42:a3:11:cf:bb:
de:fc:67:87:6a:ac:97:c1:41:2c:1c:04:d4:0d:96:
94:f1:c6:0b:bf:84:b6:cb:1c:70:6e:a5:8b:f2:a4:
83:14:92:a5:9f:87:d0:96:7b:a5:1a:52:6a:fd:81:
6d:a1:49:80:38:52:7c:93:38:58:78:4f:05:9c:44:
3c:29:99:73:8c:15:ba:61:ab:0f:79:a5:cf:47:37:
41:67:1f:1c:86:5a:29:be:ea:5a:00:4b:69:4b:88:
1b:fb:1a:11:47:66:67:b8:15:0e:0c:fc:9b:77:12:
ca:c0:37:32:71:a9:36:f5:6a:bb:43:2d:d1:99:a7:
41:31:27:d3:ca:49:60:a5:ee:e4:b8:ba:29:b3:f7:
45:03:eb:4a:63:75:0c:ce:33:0a:e3:dc:c2:4d:4b:
47:d8:81:f6:a0:45:77:1a:95:b6:72:76:36:5c:40:
7b:29:1a:da:4c:83:85:65:ef:78:30:89:3a:9a:7f:
ed:32:6d:83:43:2a:2b:4c:0e:32:cf:92:6b:dc:bd:
e3:ea:bd:f3:cd:60:29:0f:8b:83:ae:e1:dc:9c:72:
89:df:13:6a:53:a6:d5:b9:5a:df:46:4b:32:ae:0f:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DB:0C:97:06:51:27:54:C5:23:87:0B:4F:20:20:C4:47:B2:C0:2E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a9sMlwZRJ1TFI4cLTyAgxEeywC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.52.0/24
194.87.84.0/24
194.87.87.0/24
194.135.105.0/24
195.133.8.0/23
195.133.41.0/24
195.133.60.0/24
195.133.62.0/24
Signature Algorithm: sha256WithRSAEncryption
42:23:38:63:76:16:57:c6:14:a4:b0:af:fb:06:c8:cb:cb:b0:
1f:aa:d9:04:14:12:1d:86:7c:ef:82:47:8f:a0:4a:55:27:dd:
68:e1:7d:15:5f:ad:35:e3:62:10:81:5b:b3:0a:e1:82:9f:57:
9b:38:7c:3d:f8:b8:fd:14:ed:69:3f:4a:62:06:73:f6:77:bc:
6f:f1:ba:d4:e9:2e:0a:df:5a:e0:7c:1b:b4:44:2c:cc:52:46:
65:51:6e:5c:0d:45:f4:83:e7:cc:75:66:03:3b:3d:01:36:27:
b0:1d:d7:5d:a5:c9:9b:08:b9:58:c5:d8:1e:47:8d:a6:b5:0b:
71:64:09:14:de:fb:94:10:a7:87:67:82:03:a5:d4:d6:2e:c9:
ce:41:de:c0:b0:c7:1a:92:2e:b2:84:08:3a:e4:d1:18:d0:cf:
2e:4b:9d:03:97:53:b6:61:d0:3c:e4:0a:85:8f:c6:f1:df:d0:
21:4a:2d:65:2a:84:b5:74:9a:f6:1a:48:59:61:02:e5:a6:70:
99:6d:2b:20:37:2c:e4:b2:c9:b6:34:8d:07:f6:0d:e5:99:bd:
fc:f0:a8:5a:a1:bb:b5:78:6d:5f:56:9a:fa:e9:a3:0e:00:7d:
44:18:81:47:92:76:7f:ab:76:6e:92:d6:eb:92:f2:ce:66:2b:
84:71:21:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 08:31:45 2023 by rpki-client on console-ams.rpki-client.org