Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bJ3czTxTlVQSyNSXlpT8kQKbj10.roa
File: bJ3czTxTlVQSyNSXlpT8kQKbj10.roa (raw, json)
Hash identifier: VPPSxYrHideS8o74kL7lHdVSilVw+N3WGSVG1o+zPXQ=
Subject key identifier: 6C:9D:DC:CD:3C:53:95:54:12:C8:D4:97:96:94:FC:91:02:9B:8F:5D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B1DEAE79A9E7BA93E7E9BB5DC9E4EC15E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bJ3czTxTlVQSyNSXlpT8kQKbj10.roa
Signing time: Wed 11 Oct 2023 08:46:55 +0000
ROA not before: Wed 11 Oct 2023 08:46:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:ea:e7:9a:9e:7b:a9:3e:7e:9b:b5:dc:9e:4e:c1:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 11 08:46:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c9ddccd3c53955412c8d4979694fc91029b8f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:00:13:22:9d:0f:be:dc:eb:cb:7f:a5:18:b5:
a6:0f:18:c4:48:62:fb:75:77:77:e5:73:f9:bc:e9:
e3:fa:34:4b:e4:cb:8d:32:03:48:49:2a:f7:ab:9c:
42:55:6e:35:f8:e9:04:8b:28:30:77:b6:c8:f1:8e:
fc:77:0e:83:b5:1e:a4:e2:c6:59:2d:d9:7c:b2:a6:
28:09:6b:50:37:c0:92:3e:bc:4b:17:cb:13:7a:0b:
dc:e4:17:24:2e:63:2f:d1:4a:f2:17:43:f9:74:65:
99:c8:01:e3:07:bc:cc:cb:02:31:c0:37:93:e4:7d:
ba:e0:65:26:9f:a7:aa:d7:67:59:32:4f:54:d4:3c:
16:f4:38:03:ff:78:db:59:96:a7:fd:87:e3:b0:dc:
b9:1d:19:ac:ec:40:cb:13:82:50:b6:1e:4d:48:a1:
50:a8:65:80:b9:b2:2a:bc:16:46:8d:ab:b5:ce:27:
da:9f:c2:db:df:2b:37:a2:be:57:0a:5e:e6:1d:19:
64:f1:80:e9:e7:87:72:d6:ee:c7:74:e8:e9:e8:2b:
e2:46:47:24:4b:00:e9:6e:44:1f:cb:1a:19:0b:6f:
8d:22:02:2c:8a:0c:ca:52:b1:4f:d9:26:9e:b7:69:
e0:56:31:79:a5:f0:29:fc:4f:db:54:44:20:6b:ed:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:DC:CD:3C:53:95:54:12:C8:D4:97:96:94:FC:91:02:9B:8F:5D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bJ3czTxTlVQSyNSXlpT8kQKbj10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.181.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
194.135.18.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.37.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:a9:58:60:b8:1e:14:bb:57:81:78:1d:0f:86:03:6e:22:53:
fc:c8:1b:bb:5c:c1:e1:ef:19:8d:8a:ac:25:93:c2:c8:4d:80:
13:4d:f5:d5:9c:a3:42:3d:3a:c5:f1:30:3e:a0:23:ad:30:71:
ce:26:e0:07:17:69:9a:6e:c4:61:ed:74:98:34:c9:b2:90:a6:
df:ee:61:c3:2b:2c:9d:54:7b:bb:dc:ce:fb:78:e2:9c:a8:75:
ef:b7:8b:d1:6a:ec:9b:c2:bf:6d:4b:4b:88:4b:43:13:36:96:
79:0e:b3:70:3c:39:58:fc:e5:25:33:95:46:ad:8b:3a:80:c8:
c0:39:d3:99:a6:7b:3c:f6:b3:4d:50:46:d1:e9:88:d8:53:10:
47:d3:fb:ff:2d:e7:d3:c6:33:86:9d:8f:04:6f:b3:de:05:2e:
a0:3a:ef:38:5f:58:08:a9:46:1f:6a:23:33:c0:56:d6:1f:29:
e0:fc:8e:ee:8a:54:1c:c7:37:79:8f:0f:f2:e9:9e:50:4e:b9:
2a:c2:b8:b3:1c:bd:ff:88:59:c9:97:3e:e9:8a:d0:c4:dc:db:
ac:f7:e9:09:16:9f:df:73:8f:cd:46:80:2b:b9:d4:01:b7:c7:
48:d2:af:63:71:1a:7f:46:12:c4:5e:17:f9:50:7f:77:1f:b7:
40:31:50:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 18:50:08 2023 by rpki-client on console-ams.rpki-client.org