Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bIdzeMfO4sQCExNu1Rki4nrVarY.roa
File: bIdzeMfO4sQCExNu1Rki4nrVarY.roa (raw, json)
Hash identifier: FD4YEG+lSdIANaZNqUPLhRTi1qAVwWgcJRuUFVQxnJ4=
Subject key identifier: 6C:87:73:78:C7:CE:E2:C4:02:13:13:6E:D5:19:22:E2:7A:D5:6A:B6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BF6260DC3D94B9EF4F9DE05A4948BAA0A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bIdzeMfO4sQCExNu1Rki4nrVarY.roa
Signing time: Wed 22 Nov 2023 08:29:30 +0000
ROA not before: Wed 22 Nov 2023 08:29:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
192.124.178.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f6:26:0d:c3:d9:4b:9e:f4:f9:de:05:a4:94:8b:aa:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 22 08:29:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c877378c7cee2c40213136ed51922e27ad56ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e3:c2:b1:c1:72:5e:8a:55:25:33:69:25:ef:
a0:23:5b:f4:c8:bb:9a:b4:32:e0:66:62:f6:31:3b:
69:85:09:47:16:06:52:8a:41:de:17:a6:87:bf:67:
c6:2e:c0:20:bd:b6:d4:58:75:e0:5c:f5:22:32:cd:
c3:74:fc:73:dd:ca:a9:9a:9d:49:69:f6:ba:20:3c:
a7:64:60:e4:c3:21:fa:37:51:2b:13:3a:4c:dc:13:
37:ed:a8:24:9b:1c:e5:ca:e4:50:15:43:4d:de:94:
23:6f:ca:ab:16:e7:69:74:ef:a8:40:df:f0:dd:74:
3c:cc:38:2e:f4:16:93:1f:a5:0e:21:43:e7:00:a4:
b0:10:8d:7d:b7:cf:16:50:8c:dc:57:cc:00:56:fd:
fc:5e:be:9f:22:5f:23:a0:7a:54:1b:79:01:c3:6e:
67:8e:be:40:3a:c7:09:18:af:69:1f:7d:12:83:53:
5e:8d:63:d4:d5:2c:94:a7:fa:ff:56:62:74:8b:40:
f2:5d:6e:1a:04:c8:b0:b6:aa:53:20:f0:c0:c2:33:
ec:72:76:cd:5c:f8:63:15:40:e9:a8:71:35:fb:9a:
1a:11:60:10:a9:9a:70:de:ec:7d:9e:aa:16:87:94:
62:e5:64:e5:a9:50:ea:73:a7:6e:d3:80:e7:a6:b0:
90:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:73:78:C7:CE:E2:C4:02:13:13:6E:D5:19:22:E2:7A:D5:6A:B6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bIdzeMfO4sQCExNu1Rki4nrVarY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.168.0/24
194.87.179.0/24
194.87.200.0/24
195.58.35.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
83:23:ae:d0:7f:91:c3:c7:64:7d:4f:87:ee:dc:5a:b3:6a:bd:
73:8a:2d:8b:e3:8b:45:29:0c:53:3e:f3:71:4c:62:0b:d1:65:
f7:df:24:79:f9:6a:1e:b5:64:ed:fe:fe:c0:16:f6:57:f7:47:
25:05:49:ae:fd:c7:56:ce:d7:20:72:3e:28:c8:19:83:13:c7:
07:a9:ef:b1:9d:46:70:55:0a:91:e3:de:e6:58:11:97:1d:35:
06:5c:31:53:87:d3:48:94:94:e6:bb:6c:14:b1:22:45:ac:15:
b7:22:68:4d:f8:ba:2c:e6:12:9a:21:7f:f4:5c:e6:36:54:2f:
f7:53:f6:b3:d5:2e:c3:8f:44:b2:f2:14:52:03:aa:56:58:24:
d5:6c:dd:a4:3d:29:a2:c8:84:a4:16:64:68:a7:bd:fb:94:a5:
79:17:1d:b9:d1:6c:79:13:c0:48:66:e7:66:a3:81:37:e9:60:
7c:05:52:da:bd:73:26:4e:18:7a:d3:ca:5b:c5:fd:d2:28:f9:
0d:3c:d9:6d:13:00:d4:5b:48:be:c4:b6:26:b6:09:6f:63:36:
a0:17:ac:49:9b:a6:04:f5:8d:b9:3a:72:6f:d7:c9:66:fb:1d:
d0:a5:15:05:3f:7a:5d:7c:62:d2:89:fd:ab:84:30:82:b1:fc:
0b:a5:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 22 09:59:25 2023 by rpki-client on console-fra.rpki-client.org