Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bCGtYGbwSBaxaZeKcGz5-6cnC50.roa
File: bCGtYGbwSBaxaZeKcGz5-6cnC50.roa (raw, json)
Hash identifier: j42SzDFJaDs5P7DHIDkkaMzl9osY/yoAvJcQpY/z0Vs=
Subject key identifier: 6C:21:AD:60:66:F0:48:16:B1:69:97:8A:70:6C:F9:FB:A7:27:0B:9D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185BA0B031BD21C35FBC94E7FF663A7781C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bCGtYGbwSBaxaZeKcGz5-6cnC50.roa
Signing time: Mon 16 Jan 2023 10:06:01 +0000
ROA not before: Mon 16 Jan 2023 10:06:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 212.193.15.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
212.193.12.0/24 maxlen: 24
195.133.82.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.2.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
185.72.9.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:0b:03:1b:d2:1c:35:fb:c9:4e:7f:f6:63:a7:78:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 16 10:06:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c21ad6066f04816b169978a706cf9fba7270b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:12:7c:bc:91:2d:5d:21:8c:fc:77:24:be:4b:
2f:b5:6e:0b:c4:2d:80:e6:19:95:a6:d7:de:02:ab:
20:20:75:be:5b:e7:af:78:d3:9d:13:1d:43:e1:86:
2f:3f:5a:7f:47:ba:dd:8d:dd:f3:99:f7:f3:19:fe:
05:51:97:16:72:8e:48:3d:29:ce:b2:8c:51:fa:76:
34:a1:30:ab:0c:75:24:bc:f4:55:70:11:c4:6b:e4:
87:a9:18:6e:ca:94:96:fc:d6:bf:48:2b:a0:83:93:
c7:96:22:d3:1a:7e:0f:a8:77:f0:8a:50:fd:30:80:
83:d5:45:ed:4f:fe:13:0e:85:d8:0f:39:1e:27:55:
00:fb:a8:aa:84:14:f2:b6:01:fe:63:13:ff:4d:de:
f6:49:22:12:25:c0:dc:4f:10:77:f5:0f:60:0c:8e:
ec:8a:28:ea:b9:b5:37:87:96:df:9c:8e:78:fe:2a:
ce:cb:c1:77:e4:b8:98:6d:d1:44:a5:f8:79:2e:cf:
5f:4d:45:7e:44:78:73:d5:94:69:8b:b3:20:8a:86:
01:15:21:55:c8:8d:cf:0d:6d:60:82:f3:67:4a:64:
c7:4c:17:33:0a:06:11:50:91:be:0e:98:d3:0b:7f:
93:8d:45:5d:93:07:9e:09:fb:4b:71:83:a0:14:ed:
79:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:21:AD:60:66:F0:48:16:B1:69:97:8A:70:6C:F9:FB:A7:27:0B:9D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bCGtYGbwSBaxaZeKcGz5-6cnC50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.9.0/24
194.87.73.0/24
194.87.90.0/24
194.87.181.0/24
194.87.198.0/24
195.133.82.0/24
212.193.0.0-212.193.2.255
212.193.12.0/22
Signature Algorithm: sha256WithRSAEncryption
02:36:0c:d9:ad:cd:c1:05:45:04:e8:8e:e3:17:d8:89:66:ae:
ea:d4:e0:d2:d4:56:dc:fa:06:99:d2:c5:53:1c:d0:1c:9d:d1:
e5:e4:ba:6d:20:45:f2:7b:7e:ed:3f:fa:d1:68:2a:e1:cb:de:
73:a4:bc:ce:a2:b2:f8:af:0a:5d:00:e9:ab:60:25:ee:2e:e3:
f9:c5:a1:ad:33:9c:61:59:2d:fc:6d:0b:f4:88:9e:08:ba:0d:
af:fc:91:d4:2f:a2:10:1f:15:19:bd:4f:05:cf:f5:45:e0:de:
f5:e8:db:e4:47:5a:5b:2a:42:d9:85:1a:91:4d:61:5a:93:37:
07:9b:46:10:83:b1:4d:89:68:6c:b1:53:c9:4a:04:bd:14:6c:
d9:29:c0:be:13:2d:b1:d6:84:2b:28:5c:63:fc:c8:1b:e0:ae:
74:32:0e:4a:7f:ec:40:e3:72:98:cb:ac:aa:99:92:e5:ec:86:
ba:95:c9:0b:6d:10:47:85:76:5e:65:28:8f:08:95:26:a6:86:
56:2c:56:38:3a:d6:d1:3b:f7:7d:c8:af:8f:69:77:9c:4b:d6:
6a:40:78:67:a6:32:c5:21:c6:03:a6:f3:09:34:b9:dd:e1:a4:
cc:31:0d:09:bc:fd:2d:a2:4e:4d:6c:42:0c:2a:81:80:75:dc:
e7:ee:60:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org