Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/buxXruWjpNN7XqA6E4byJp45280.roa
File: buxXruWjpNN7XqA6E4byJp45280.roa (raw, json)
Hash identifier: eYxYpdoQCbEE5L9cjQFVSCbWfrMDSLPKJ0x0x76j4EE=
Subject key identifier: 6E:EC:57:AE:E5:A3:A4:D3:7B:5E:A0:3A:13:86:F2:26:9E:39:DB:CD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186CA558B5FA7BB381792A1DF4AD875FDFC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/buxXruWjpNN7XqA6E4byJp45280.roa
Signing time: Fri 10 Mar 2023 07:04:09 +0000
ROA not before: Fri 10 Mar 2023 07:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ca:55:8b:5f:a7:bb:38:17:92:a1:df:4a:d8:75:fd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 10 07:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6eec57aee5a3a4d37b5ea03a1386f2269e39dbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:79:de:d9:d0:f3:08:26:2e:cc:3c:09:00:50:
6a:e3:b3:a6:62:3d:1e:cc:3c:9f:57:2b:37:d3:45:
00:05:2d:3b:89:b5:21:a0:54:5d:cf:24:1c:35:0b:
cd:47:3d:c0:ad:69:3d:10:1f:be:7f:f2:77:62:17:
a8:cc:12:90:e8:90:5c:75:e6:4e:80:e8:87:53:db:
d1:f2:c3:d3:af:83:ec:21:2c:22:16:59:20:dc:9a:
b5:53:fe:23:79:cc:8f:e6:c9:ef:d4:a7:71:dd:20:
48:46:46:a7:83:ff:f0:18:33:e5:1b:d5:bd:13:f6:
35:4e:56:d5:36:d4:17:dc:84:d8:8f:07:8d:04:6e:
e6:0b:6e:9a:bd:45:df:8e:39:7b:bb:7c:df:29:07:
38:16:19:13:b7:8c:0d:1b:20:96:2c:46:ef:f1:cb:
77:1b:96:c6:46:97:06:bb:3d:ac:19:fb:b7:a8:49:
f7:0e:8c:3f:9b:6b:0e:f8:b2:1c:50:b2:0c:22:28:
85:89:27:dc:42:9d:d5:82:0c:39:e3:e9:e8:d6:d6:
b6:61:e5:24:12:12:46:04:37:04:15:85:82:5f:01:
bb:86:19:c4:b1:85:3f:a5:b7:90:14:7f:d2:3c:c9:
f6:fd:63:0e:75:92:1d:a9:b7:52:2f:d6:e9:bb:dc:
3f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EC:57:AE:E5:A3:A4:D3:7B:5E:A0:3A:13:86:F2:26:9E:39:DB:CD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/buxXruWjpNN7XqA6E4byJp45280.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.180.0/24
193.124.90.0/24
193.124.200.0/24
194.87.10.0/24
194.87.124.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
27:0b:c8:24:b0:97:a6:2d:73:37:ad:ed:16:c8:61:3c:a9:5e:
2a:c5:2a:53:db:f0:f7:23:43:26:c0:02:2c:1f:30:da:65:9c:
fc:28:c6:25:10:8b:48:8b:8e:e8:90:57:a6:ea:39:de:69:1c:
46:b5:0e:bb:d3:02:30:b5:30:e5:4d:15:f4:b6:7c:45:95:ed:
98:a4:92:e9:13:2d:ed:3b:84:8f:d5:c3:5d:6d:f5:37:5e:bc:
3d:1c:73:62:72:c1:8c:39:58:c9:ea:f7:7a:5d:ba:b6:ee:ff:
b4:4c:27:5c:d9:71:fd:b1:8b:e3:dc:72:3a:43:9a:b1:32:38:
7a:f2:cd:0e:e8:3b:20:35:12:5f:c7:bf:03:ef:2a:fd:35:71:
c1:75:03:7b:51:29:a7:5a:8e:6d:49:46:93:b0:3e:45:98:b0:
bb:7e:10:d7:7d:9c:ff:a3:4e:c5:20:bf:06:67:0b:d6:02:5c:
42:0e:61:ef:56:d8:3b:25:01:de:f4:8c:a2:cd:c9:18:d5:d7:
7d:cd:db:d9:c7:19:00:63:80:24:b9:b2:ae:c2:9b:bf:19:f8:
d4:1f:b8:5d:81:a1:1b:bc:b1:57:1c:8f:92:6a:ff:54:ac:78:
79:c9:cd:53:01:98:1b:b9:01:cb:bc:47:bb:b3:5f:26:93:b6:
0b:0e:b4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org