Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aA-971mOEkNZkTubxZr6XAVr2pU.roa
File: aA-971mOEkNZkTubxZr6XAVr2pU.roa (raw, json)
Hash identifier: IV9aYHaaEo5ZEe9rd8HYwN7IgLfbOJxS3icK+7XPp0A=
Subject key identifier: 68:0F:BD:EF:59:8E:12:43:59:91:3B:9B:C5:9A:FA:5C:05:6B:DA:95
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C8FAC3B34C48D71D35E9C04B853DCE416
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aA-971mOEkNZkTubxZr6XAVr2pU.roa
Signing time: Fri 22 Dec 2023 03:57:58 +0000
ROA not before: Fri 22 Dec 2023 03:57:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
212.193.5.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
192.124.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:ac:3b:34:c4:8d:71:d3:5e:9c:04:b8:53:dc:e4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 22 03:57:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=680fbdef598e124359913b9bc59afa5c056bda95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b5:a0:c8:21:a9:f6:36:6b:ab:84:5f:d2:24:
8c:98:81:93:95:46:30:aa:45:c1:e5:ba:4b:c5:7b:
fa:0f:90:72:84:d3:20:0c:aa:10:08:f6:6a:5a:64:
f6:87:fd:a2:bc:e9:9b:e6:33:40:74:f0:7d:ec:63:
41:2f:d9:8a:61:04:9f:57:f0:32:8e:50:75:eb:98:
a6:69:9b:89:3b:21:6d:b0:c6:0c:71:bb:37:b8:2f:
25:d7:95:d1:97:3a:04:cd:49:07:8b:ca:fb:2c:6f:
7b:65:12:84:e5:f9:c7:50:bf:62:be:38:31:48:8a:
17:fa:9a:9e:b3:9b:b1:f0:c2:7f:da:4a:0a:cf:19:
ae:04:a3:36:1d:ab:d9:bf:0b:10:4d:7b:61:76:90:
99:9f:86:24:65:be:b0:22:bd:4b:8b:df:8a:d7:fc:
62:8d:71:3c:41:61:5e:a9:b6:3b:0d:b9:c8:56:57:
17:1d:f8:4f:6b:e3:5c:89:45:01:99:f1:56:85:77:
1c:db:45:bc:45:93:13:80:74:b2:8b:db:38:74:bc:
f9:4d:9f:6a:91:00:2a:7a:b6:54:1e:75:f2:44:e1:
18:e1:80:74:60:0c:aa:99:40:9a:de:24:86:f8:a1:
42:7f:4f:df:63:10:0a:8f:a7:97:a4:01:7a:3c:70:
98:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0F:BD:EF:59:8E:12:43:59:91:3B:9B:C5:9A:FA:5C:05:6B:DA:95
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aA-971mOEkNZkTubxZr6XAVr2pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
194.87.200.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
195.133.194.0/24
212.193.5.0/24
Signature Algorithm: sha256WithRSAEncryption
39:35:66:72:28:f5:c2:4f:a0:23:46:e7:11:e9:9c:6b:b6:3e:
32:02:f3:f5:84:bd:cb:ce:e4:1b:8d:26:eb:4b:0c:db:8b:44:
ee:b4:11:12:f5:e7:cd:bd:26:39:a4:09:8d:87:1b:00:e6:a5:
fb:75:48:de:1f:8b:d1:2a:51:ee:07:d0:63:3d:a7:30:4f:57:
d6:00:3d:87:9b:60:91:b8:2d:e3:66:a4:ca:2e:65:85:47:77:
bb:de:14:31:f5:8e:91:64:08:b3:14:ff:06:b7:51:01:d6:20:
b2:2d:45:66:cb:c2:b2:22:f9:9a:ff:51:ca:84:ba:4b:de:7f:
ed:b4:81:80:ad:b8:9e:de:09:59:17:7d:13:09:74:ed:ea:56:
d2:6b:7d:d2:34:71:82:59:d3:1b:70:0d:a8:24:04:0e:5a:e4:
23:98:5b:b0:45:04:8b:c3:8d:9a:60:c1:a2:3f:0b:8b:3a:0c:
b6:63:bd:45:2a:e4:2c:89:b0:5a:30:fc:29:9f:db:31:3d:b0:
ec:10:5b:35:15:22:f4:ba:8e:47:47:56:33:ea:86:69:87:e2:
34:15:9d:36:00:84:29:cf:bb:a0:01:b6:1a:ab:7d:a6:61:38:
8a:3d:55:12:fd:ac:d7:e1:d5:a1:d4:17:41:dc:65:4f:c3:7c:
ed:ab:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org