Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/acZUjpcio4NC-3Qrt09Fg6F5EIs.roa
File: acZUjpcio4NC-3Qrt09Fg6F5EIs.roa (raw, json)
Hash identifier: HUlTMlBHiXS0fzzQWiGMWfyMIN1D60g3zsygwkFfbZw=
Subject key identifier: 69:C6:54:8E:97:22:A3:83:42:FB:74:2B:B7:4F:45:83:A1:79:10:8B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01887ACD90233CAC373ED280BA5A66D286FA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/acZUjpcio4NC-3Qrt09Fg6F5EIs.roa
Signing time: Fri 02 Jun 2023 06:31:12 +0000
ROA not before: Fri 02 Jun 2023 06:31:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 212.193.12.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
194.87.129.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:cd:90:23:3c:ac:37:3e:d2:80:ba:5a:66:d2:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 2 06:31:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69c6548e9722a38342fb742bb74f4583a179108b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8f:c8:3f:04:76:33:a7:4f:f2:ee:1d:66:0a:
ce:51:a9:ef:b4:1c:f8:a8:6e:fd:57:51:2c:29:9e:
8c:ce:79:32:84:2e:f2:9b:b7:d7:8e:a5:a7:42:27:
5f:e2:92:87:dc:f5:ae:0e:bf:0d:82:bf:2b:a1:87:
5d:57:b4:2f:fe:dd:b2:de:99:38:6f:d7:d2:7d:27:
05:5c:4c:6b:a1:05:e1:7b:cb:62:30:ef:45:ce:07:
43:16:4a:bf:c7:5a:f5:b7:21:d5:c8:eb:b9:d6:98:
1f:52:70:ac:c2:ce:2f:69:18:50:20:61:07:28:f8:
8a:bb:52:07:a5:84:2f:e2:f0:82:d8:17:ed:39:a5:
4b:0b:6f:25:c9:f3:8b:3c:b6:21:63:56:78:0e:0c:
af:15:bf:b4:bb:88:27:f2:02:db:a1:cf:40:5e:35:
fd:b7:03:37:71:e2:62:2a:fd:e7:63:41:41:7d:f0:
de:25:c1:63:c7:8f:6e:cd:d9:99:3d:49:91:28:82:
1e:c9:73:e3:f0:88:f4:e7:82:97:8c:7c:d2:c5:67:
b2:0a:d3:eb:3c:ff:d4:78:7e:ed:f3:10:4b:f9:69:
12:07:2c:7f:07:c6:67:3d:b1:25:31:f5:b5:72:24:
a5:03:09:a5:78:24:80:7d:40:b7:bf:7f:cd:d4:f7:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C6:54:8E:97:22:A3:83:42:FB:74:2B:B7:4F:45:83:A1:79:10:8B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/acZUjpcio4NC-3Qrt09Fg6F5EIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.81.0/24
194.87.129.0/24
195.133.79.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:79:5e:9a:87:c5:df:e9:e6:ab:98:33:c5:03:66:a7:3f:7e:
39:66:c5:d2:90:61:c1:31:31:ea:60:87:17:2c:e1:67:ae:83:
32:d6:82:37:ed:c1:e0:f9:2e:b8:07:f5:0a:30:9d:b2:10:8f:
01:5f:f1:b2:67:96:a7:93:57:a9:c8:b5:0c:91:63:e9:00:19:
b4:82:33:e5:9b:69:47:48:47:03:d8:36:af:6e:f2:6b:ee:5c:
c0:eb:e3:c4:31:1b:73:e8:51:73:78:0e:6e:6a:d3:92:cb:b3:
45:90:1b:f5:99:26:b2:d2:07:f6:b4:d6:ef:37:60:55:3e:ef:
c4:2c:15:84:8a:e8:54:4c:2c:cb:43:08:7d:9d:30:b8:8d:86:
4b:b5:1c:a8:73:d2:69:16:05:d7:ef:0e:7c:07:1e:5b:2a:46:
12:3f:87:b8:0e:7b:f4:c8:24:4b:15:c7:b7:3f:95:e8:f2:e7:
82:10:64:ac:36:c2:6d:ed:c2:00:3d:fd:0c:21:b4:53:21:82:
1e:b6:15:34:f0:73:73:05:4c:9f:af:21:8d:ed:0d:54:17:0e:
c9:ac:29:7b:38:c5:76:b0:1f:be:b2:68:e0:3e:5f:6b:a5:75:
38:4f:5a:8a:b6:2b:70:26:d0:b5:18:0d:4e:b1:ee:f4:7c:2c:
63:04:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org