Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cCNg41alJpnxcgCNcIewAkijTRk.roa
File: cCNg41alJpnxcgCNcIewAkijTRk.roa (raw, json)
Hash identifier: t48i3rTWHIlHoUKH+3EuPsRfeVZ2JbTFsFHba7/WrO0=
Subject key identifier: 70:23:60:E3:56:A5:26:99:F1:72:00:8D:70:87:B0:02:48:A3:4D:19
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185C968C34BB98AFB21E0117BFC3092851B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cCNg41alJpnxcgCNcIewAkijTRk.roa
Signing time: Thu 19 Jan 2023 09:42:44 +0000
ROA not before: Thu 19 Jan 2023 09:42:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.205.0/24 maxlen: 24
195.133.76.0/24 maxlen: 24
62.76.226.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.252.0/24 maxlen: 24
193.124.46.0/24 maxlen: 24
212.192.9.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
195.58.51.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
194.87.125.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
194.87.122.0/24 maxlen: 24
194.87.139.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c9:68:c3:4b:b9:8a:fb:21:e0:11:7b:fc:30:92:85:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 19 09:42:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=702360e356a52699f172008d7087b00248a34d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9d:26:0a:54:f5:07:c3:ec:80:83:09:6a:cd:
0a:c8:a3:fa:12:00:ed:d6:31:46:9c:29:c2:a7:04:
85:21:6c:e7:13:99:5a:77:65:e5:17:a6:6b:e7:14:
33:53:8c:34:1d:86:e7:57:40:5f:40:67:f0:42:18:
88:40:75:2f:a7:39:6f:23:e3:f5:67:8d:ec:f1:ac:
a3:42:7b:8f:97:04:58:1e:b4:7f:8c:fe:73:ef:9f:
16:d8:48:c9:43:c6:66:10:94:94:85:77:31:8c:f5:
ed:32:fc:ba:3e:15:27:74:98:4b:2c:ef:7d:a1:36:
50:32:41:9d:df:70:33:a7:96:91:e3:16:dd:db:24:
40:7e:d9:f6:d5:98:31:54:95:b4:c5:b9:33:79:54:
7a:a0:aa:d3:31:6c:af:8a:b4:6c:4d:89:14:bd:67:
4d:ef:07:a6:be:e7:42:0e:ea:5f:e8:07:81:c5:70:
84:92:58:f0:52:aa:5e:83:a5:20:8d:c8:44:84:d0:
18:9b:66:c3:b5:65:a5:8d:0a:21:8f:ea:88:69:65:
2e:8c:9b:c8:b9:e9:51:a9:be:12:e3:05:08:04:9c:
2c:34:57:f0:1e:f2:42:0e:b2:d3:35:e8:2b:ea:72:
c7:a9:13:23:3c:ae:3a:72:e8:f7:09:c0:3b:10:23:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:23:60:E3:56:A5:26:99:F1:72:00:8D:70:87:B0:02:48:A3:4D:19
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cCNg41alJpnxcgCNcIewAkijTRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.226.0/24
192.124.183.0/24
193.124.46.0/24
193.124.90.0/24
193.124.200.0/24
194.58.40.0/24
194.87.2.0/24
194.87.10.0/24
194.87.122.0/24
194.87.124.0/23
194.87.139.0/24
194.87.205.0/24
194.87.233.0/24
194.87.252.0/24
195.58.51.0/24
195.133.76.0/24
195.133.193.0/24
212.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d6:7c:7a:ca:33:32:30:e9:5a:3b:6b:1b:66:19:2c:61:a6:
dc:4a:e5:84:af:78:a8:d2:88:a5:bb:50:d6:6c:a5:14:79:92:
15:34:21:86:a9:e6:51:91:1c:11:ef:b5:43:1f:19:7b:e7:f6:
b9:0f:94:04:29:12:2d:ae:a1:8c:f7:9a:d0:6d:fa:76:f8:34:
6a:59:3f:89:06:0f:0a:87:de:cb:9c:0a:0d:4f:05:58:12:95:
7f:d4:f3:50:c3:9d:80:ac:c4:ad:3f:40:87:f7:28:35:52:b9:
46:6d:30:da:63:8e:35:d1:a5:28:d5:30:7c:e0:ec:74:35:c4:
45:fb:24:d7:92:ac:d4:53:eb:5c:0a:bc:35:8a:17:27:df:cd:
d0:a3:97:22:72:77:97:ee:0b:49:dd:5c:44:18:f2:3e:7f:94:
41:f4:1f:1e:40:72:dc:6d:34:17:a1:b5:1d:e7:fe:f8:71:62:
21:c3:0e:0c:75:3c:9f:49:c0:5b:ea:e5:1e:fd:ff:3c:3d:7f:
45:4f:24:24:95:00:52:0e:cb:50:fd:f9:f9:5e:f1:17:37:25:
4a:ff:68:2a:7d:56:a0:84:b8:63:9f:e9:c4:84:8d:f0:d4:57:
21:46:a9:1f:0d:5f:87:22:5f:8f:8d:c9:31:b2:7a:bf:c6:c9:
de:f6:16:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org