Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bzMnWPPXli94FPpbIKXqDaTUpa0.roa
File: bzMnWPPXli94FPpbIKXqDaTUpa0.roa (raw, json)
Hash identifier: +jeYKwvAFHU6TR0amvLTuj/78n9bUMLjf9QcdK4fyHw=
Subject key identifier: 6F:33:27:58:F3:D7:96:2F:78:14:FA:5B:20:A5:EA:0D:A4:D4:A5:AD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01893EF23F14D158F98E979B62A4780441FF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bzMnWPPXli94FPpbIKXqDaTUpa0.roa
Signing time: Mon 10 Jul 2023 08:36:50 +0000
ROA not before: Mon 10 Jul 2023 08:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 212.193.30.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
212.192.242.0/24 maxlen: 24
194.87.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:f2:3f:14:d1:58:f9:8e:97:9b:62:a4:78:04:41:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 10 08:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f332758f3d7962f7814fa5b20a5ea0da4d4a5ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:84:9e:ad:2c:56:2f:5b:c6:be:4e:a5:8a:ac:
e0:b8:00:9b:ee:28:91:36:d8:ae:2a:80:e9:d7:fc:
5a:dc:39:53:b3:a6:4c:87:7a:5c:5a:2b:18:bc:17:
f7:23:0f:e2:cb:77:cc:60:22:d3:fc:aa:91:e5:96:
26:6a:8f:f0:69:20:d3:22:86:b8:e9:26:9a:e5:27:
57:f1:11:fc:b9:62:f6:8a:1c:55:d4:b2:f5:69:a1:
03:5e:30:73:63:c4:cb:72:b1:9a:b7:6d:7d:65:60:
1b:1a:9e:74:ce:f4:04:e0:8e:ca:0b:61:c8:dd:cb:
42:9c:13:4d:70:da:85:2a:e4:6a:49:7d:dc:0a:ca:
15:10:19:aa:9c:ee:77:3e:bf:12:d4:8c:01:ef:7e:
90:0f:ab:5e:da:38:2c:3c:a1:9c:b3:f6:5f:df:28:
ff:9a:20:f5:6e:57:83:b5:e7:e2:47:7d:45:cf:91:
47:56:89:a5:d0:0d:90:2b:b9:f3:ed:86:85:f2:48:
d0:c1:07:94:df:da:f5:86:9b:8b:82:f5:4d:20:04:
32:9d:7e:71:06:7b:d8:ad:ea:58:c4:c3:8c:da:c6:
49:a1:67:c8:03:bc:5a:36:ff:3b:12:03:40:db:0e:
da:4b:0a:3e:31:f9:92:96:01:76:58:45:fc:68:66:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:33:27:58:F3:D7:96:2F:78:14:FA:5B:20:A5:EA:0D:A4:D4:A5:AD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bzMnWPPXli94FPpbIKXqDaTUpa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.87.0/24
195.133.38.0/24
212.192.242.0/24
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:4b:0d:4c:af:a6:43:9c:78:99:ed:0a:a3:d1:42:0a:98:c5:
9d:01:e1:59:1d:c4:dc:7e:c6:f0:f4:b2:64:46:8d:7a:80:10:
2b:99:d1:70:3f:d0:79:67:05:28:7e:de:23:61:08:bd:72:76:
b5:28:38:70:c3:21:ed:a1:6a:a9:9a:b5:1a:ff:69:0c:e2:fb:
40:c6:32:51:30:c4:a8:3a:d9:4b:94:6e:be:d5:fa:06:23:a0:
e6:11:99:fe:b7:8d:69:bd:83:16:db:53:0e:97:86:4e:c5:61:
47:de:57:16:9d:32:0d:44:60:bd:34:39:cd:21:34:73:09:e8:
aa:6f:bd:85:c2:a1:99:6f:df:a9:e0:bb:7c:5f:f7:48:2b:05:
0b:c1:a5:f9:e0:f7:6d:7d:ed:7c:7b:c3:da:31:1d:5f:1e:0a:
81:eb:52:8f:16:83:0e:27:4e:a1:57:eb:84:d1:f1:47:f7:8d:
ce:c9:6a:f3:3f:75:eb:e7:6f:61:87:e4:aa:ff:ce:d1:02:80:
29:3b:59:3a:6c:1f:91:3e:e5:82:e2:84:db:f4:41:f2:b4:21:
e8:40:87:d3:8b:af:21:2d:d7:81:34:bf:c5:ad:ba:48:ef:2a:
98:a5:e6:88:d2:81:ba:b0:88:b5:2f:ce:1e:ba:89:ef:40:a1:
39:e7:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 6 15:23:35 2023 by rpki-client on console-fra.rpki-client.org