Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aF-l-cRgQzzNPyoTgGFG5g5Ates.roa
File: aF-l-cRgQzzNPyoTgGFG5g5Ates.roa (raw, json)
Hash identifier: XOEj6/Tow3fpM+OWEnUTtn62GtOcIVfFzwBLC8xVddg=
Subject key identifier: 68:5F:A5:F9:C4:60:43:3C:CD:3F:2A:13:80:61:46:E6:0E:40:B5:EB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A03275903A46ED947A9B7820F7E27EE4E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aF-l-cRgQzzNPyoTgGFG5g5Ates.roa
Signing time: Thu 17 Aug 2023 11:00:24 +0000
ROA not before: Thu 17 Aug 2023 11:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 194.87.7.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:27:59:03:a4:6e:d9:47:a9:b7:82:0f:7e:27:ee:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 17 11:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=685fa5f9c460433ccd3f2a13806146e60e40b5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:51:2e:d7:8e:2a:ea:81:ff:08:94:51:a8:9f:
07:dc:c4:52:47:52:79:d6:48:ed:c3:db:7e:bc:12:
65:c7:7e:e3:3b:df:1d:ef:a5:c7:41:76:e4:9a:a8:
9f:c4:c1:d8:fe:a0:0c:04:e7:a2:40:19:cd:57:d7:
8a:93:2f:aa:90:95:c1:53:94:d8:1b:b5:13:e8:86:
86:9d:af:5d:b0:da:4f:6c:be:46:bd:90:18:7a:15:
27:20:01:f7:8f:ca:28:9b:6a:8b:d0:3e:d0:3d:c0:
a3:79:9f:9f:2b:c9:31:26:49:6d:07:59:df:51:3e:
de:e3:48:77:c5:63:f3:e6:c8:08:de:8b:6d:aa:7a:
ff:fc:70:54:42:84:70:7e:ef:75:7c:a1:9d:1f:6f:
1d:c0:a1:cd:b5:9a:68:89:a5:47:d7:00:37:1b:37:
92:da:43:d2:ee:33:f8:68:48:53:17:99:9a:f5:57:
fc:0d:39:65:be:c5:a7:1d:29:e7:7a:68:0b:6f:d1:
f4:26:f8:d2:e0:24:a0:97:3f:2f:be:2d:ca:ce:fb:
70:a3:c8:46:e4:97:9d:c0:f0:a4:4b:b0:d3:fe:38:
0a:27:99:c4:ba:9c:8a:32:cf:66:47:6c:c5:5d:a9:
26:e3:15:5f:a6:01:69:bc:66:1b:35:55:36:81:41:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5F:A5:F9:C4:60:43:3C:CD:3F:2A:13:80:61:46:E6:0E:40:B5:EB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aF-l-cRgQzzNPyoTgGFG5g5Ates.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.181.0/24
194.58.44.0/24
194.87.7.0/24
194.87.25.0/24
194.87.51.0/24
194.87.54.0/23
194.87.163.0/24
195.58.35.0/24
195.58.38.0/24
195.133.14.0/24
195.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
90:56:ac:e7:89:1e:88:1e:cb:d3:ea:65:14:86:ac:4f:0b:f4:
ae:52:0f:9b:4c:fe:26:30:f6:fa:ce:70:71:9c:9b:dc:08:55:
b7:a9:d9:52:51:68:d5:f3:19:6e:8d:67:10:52:e0:e6:96:17:
a4:e1:74:68:ff:9c:02:3a:91:95:d6:38:fd:fb:fd:d1:a4:26:
98:12:ba:6b:a1:42:86:b2:09:d0:05:c7:e3:02:c6:aa:0f:1d:
07:2d:01:41:b2:c7:08:4a:a2:02:85:5c:f7:54:81:6c:bd:98:
1e:8c:d9:fe:70:2f:f2:b2:f5:07:1e:3e:89:b9:6b:c6:18:fb:
c3:12:81:c2:dc:25:49:fe:1c:7d:97:a7:e6:50:a4:cc:8a:8f:
d3:17:ea:de:e1:33:ea:f9:26:da:6b:31:c6:4b:f6:1e:27:4d:
2f:f8:e1:62:32:41:f7:30:4d:22:aa:5b:74:01:73:5f:63:6f:
f3:38:a1:8b:f3:88:a4:0e:d3:24:06:cc:0e:4b:80:92:c5:0a:
fc:9c:49:91:81:04:09:8a:e9:52:37:98:b4:c7:20:f7:02:46:
44:b1:6e:12:10:e3:20:4e:bc:d0:bf:a2:2b:fd:16:8f:99:e7:
58:72:ce:6c:c7:1f:79:7e:bd:7a:6c:69:19:fd:28:6e:d3:5d:
d9:ad:04:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 1 12:41:24 2023 by rpki-client on console-ams.rpki-client.org