Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dt65GvsNQKzb5bqoi7cnsJf-NX4.roa
File: dt65GvsNQKzb5bqoi7cnsJf-NX4.roa (raw, json)
Hash identifier: EnmxNH2RL0S1a11Xoi+OpRL3P1LMdA2BJ+fxvu2QFeE=
Subject key identifier: 76:DE:B9:1A:FB:0D:40:AC:DB:E5:BA:A8:8B:B7:27:B0:97:FE:35:7E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187C2802338BAF97A634C82A41D5F9CF4FF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dt65GvsNQKzb5bqoi7cnsJf-NX4.roa
Signing time: Thu 27 Apr 2023 11:36:30 +0000
ROA not before: Thu 27 Apr 2023 11:36:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.27.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.165.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
194.87.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:80:23:38:ba:f9:7a:63:4c:82:a4:1d:5f:9c:f4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 27 11:36:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76deb91afb0d40acdbe5baa88bb727b097fe357e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:d4:81:5a:bb:f9:e0:72:37:99:b8:54:41:
c2:b8:db:44:87:8d:9c:79:be:24:6a:3e:5b:61:08:
7f:a1:53:3a:ee:0f:14:9d:b0:0e:37:f9:e0:43:cb:
c8:59:a2:68:67:3c:ff:fe:40:3f:08:58:17:58:1c:
0d:18:24:c9:a1:16:33:d2:03:20:e6:0e:81:f6:50:
d1:d7:58:a9:da:25:55:ce:02:d6:bd:1a:3a:21:30:
d5:80:6e:59:c1:92:d2:95:8e:5d:6f:b9:53:ef:15:
c3:da:74:c8:e9:45:8b:9c:82:ec:b0:dc:14:01:f2:
d5:3b:90:52:e9:9c:10:36:bd:bc:26:07:54:d8:a4:
85:db:14:54:5c:6c:1a:e7:9d:a0:4a:f8:c7:23:c7:
b1:7a:dd:4e:71:c0:64:73:59:d9:14:26:5d:5b:c6:
15:f4:ad:71:8b:79:a9:03:b2:94:fc:7d:bb:54:d9:
1f:bd:d7:e2:8a:a9:82:8c:5b:1d:58:3d:78:b0:31:
7a:30:90:05:2b:da:a7:f2:5a:42:56:d2:5c:03:bf:
1c:92:f1:9d:9f:c7:ae:30:5f:a1:11:7c:fc:27:cc:
d9:e6:f0:b7:fa:17:4c:55:de:e1:1f:2f:5c:d3:e1:
6c:fd:e5:a9:b6:43:3d:29:f4:d0:47:ac:85:f3:db:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:DE:B9:1A:FB:0D:40:AC:DB:E5:BA:A8:8B:B7:27:B0:97:FE:35:7E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dt65GvsNQKzb5bqoi7cnsJf-NX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.82.0/24
194.87.118.0/24
194.87.136.0/24
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.56.0/21
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0f:e1:ab:1e:6c:81:ae:85:dc:44:2b:60:57:82:68:dd:85:
b0:cb:ed:39:f8:4c:8b:1b:7c:57:ef:d5:d4:69:8e:d4:7b:66:
18:12:63:98:fa:35:e8:f7:ef:36:75:c4:ac:c5:55:83:cf:a2:
5b:46:b6:9e:d7:79:b2:1b:cd:20:84:08:94:da:bc:6f:5d:fa:
03:d9:3d:a9:7c:01:db:85:3f:57:8d:10:db:47:f7:4a:21:73:
5e:22:79:f8:8f:56:42:17:42:88:d5:5a:05:65:0c:67:74:03:
f6:e1:13:1f:e5:fc:b0:e4:5d:8e:36:85:90:87:b0:68:2d:3e:
88:03:16:42:9b:3a:67:ff:3d:1b:9c:b3:0a:c5:09:c2:8e:4d:
55:e3:1d:94:2d:d2:2c:50:f1:f5:da:ea:12:15:a9:b9:5a:b2:
8c:19:7f:5c:e2:b4:86:fd:0d:c5:91:b3:3b:49:c2:80:7d:39:
c9:37:95:4c:07:1b:5d:d2:06:a1:b5:ae:97:c7:f0:c8:24:13:
eb:72:29:3a:8e:e8:d6:c4:f9:4b:da:78:6e:c8:1c:11:53:ec:
74:97:99:05:f6:31:f4:fe:23:1e:6c:f6:df:f2:f3:6b:9b:e2:
57:1e:cd:d4:04:ba:e4:51:60:52:dd:1e:fa:fd:11:bc:b8:62:
76:f5:4a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org