Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eKXRmsiHIXWLFRT__UF53YvP8JE.roa
File: eKXRmsiHIXWLFRT__UF53YvP8JE.roa (raw, json)
Hash identifier: OrYYmU0D/gaUEcZi7/f3kAOPi//emDZevta/hrSI8Ng=
Subject key identifier: 78:A5:D1:9A:C8:87:21:75:8B:15:14:FF:FD:41:79:DD:8B:CF:F0:91
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018988ED6637FC90D7750F1E4DA5B437FD0B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eKXRmsiHIXWLFRT__UF53YvP8JE.roa
Signing time: Mon 24 Jul 2023 17:23:26 +0000
ROA not before: Mon 24 Jul 2023 17:23:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 193.124.227.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
194.87.23.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
194.87.243.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.135.46.0/24 maxlen: 24
194.87.160.0/24 maxlen: 24
194.87.53.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
212.192.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:ed:66:37:fc:90:d7:75:0f:1e:4d:a5:b4:37:fd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 24 17:23:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78a5d19ac88721758b1514fffd4179dd8bcff091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7c:e1:79:72:e9:75:6e:fb:19:ac:e9:96:63:
54:7c:67:05:7c:61:3f:e3:9a:43:ec:a0:30:0d:a4:
30:f6:ab:23:e5:32:c9:6c:f0:08:43:3c:79:11:34:
f8:a7:30:45:2e:c6:10:f0:96:e7:72:86:d6:b8:74:
5e:a8:3c:ac:6c:4f:50:ba:31:a2:75:47:4f:5f:04:
ca:77:30:8d:56:6f:06:87:33:3f:ce:8e:e5:c4:30:
73:05:f2:fb:db:aa:c6:bc:90:7d:ed:63:49:01:3c:
b0:bd:63:53:df:9f:9b:b7:a9:08:02:9a:b4:7c:da:
35:fc:86:d1:1c:21:23:c4:9c:2b:ae:c4:83:28:99:
15:96:b6:47:40:ab:86:34:03:19:6e:7c:4d:15:51:
47:41:78:9b:8e:84:1e:06:29:9b:e3:e0:97:d4:7c:
24:be:17:60:34:2d:6c:f4:f3:07:96:ef:dd:c0:2c:
46:ea:9f:27:a3:69:6a:ab:ac:10:7a:94:05:72:b2:
40:ea:2e:03:fe:d7:b8:e6:9c:80:eb:2c:49:95:47:
92:0b:aa:32:74:b2:d7:ea:51:62:e5:7f:8b:a8:52:
af:39:d3:dd:08:2b:24:d8:f8:8d:24:d7:8c:4c:23:
c9:b4:db:8e:88:41:b6:97:7d:84:e6:3d:b9:a4:e9:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A5:D1:9A:C8:87:21:75:8B:15:14:FF:FD:41:79:DD:8B:CF:F0:91
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eKXRmsiHIXWLFRT__UF53YvP8JE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
193.124.18.0/24
193.124.49.0/24
193.124.227.0/24
194.87.23.0/24
194.87.53.0/24
194.87.160.0/24
194.87.243.0/24
194.135.23.0/24
194.135.46.0/24
195.133.37.0/24
212.192.249.0/24
Signature Algorithm: sha256WithRSAEncryption
70:27:b4:bf:da:1c:23:f5:1c:91:e2:d2:bf:38:1b:62:1e:64:
61:2f:50:03:63:31:54:30:f2:8a:40:db:b3:98:a1:1c:f8:7a:
e0:a9:7d:37:69:f8:3f:62:76:bf:b8:c5:6f:89:c6:dc:f4:e6:
ad:bb:11:5c:af:6d:9f:b1:e5:ff:3e:4b:ee:3e:b6:c2:06:ae:
a4:b8:f0:8f:64:ea:40:67:16:18:b2:36:01:50:54:cf:84:cd:
de:b2:f2:bf:55:db:1d:6b:14:75:50:de:87:96:39:ae:fc:e2:
30:12:ca:d9:d2:60:50:a4:86:6a:f3:4f:d5:75:a0:8d:7d:e7:
c9:69:ca:5d:38:09:2c:91:a1:3b:2f:88:78:57:9d:b1:c0:a3:
8d:b2:72:95:84:8c:46:c0:f0:f3:8c:37:b4:96:ca:de:a7:68:
73:a1:61:10:bb:7d:c0:20:b9:a4:df:fc:8a:83:a6:49:09:38:
ea:fd:ea:1c:00:ec:b1:54:47:cd:d6:3a:61:cf:9d:36:81:73:
3c:b3:1f:32:43:bb:21:f7:94:6c:32:d9:a4:c0:33:5e:bd:dc:
e8:6a:80:b1:c9:83:85:44:f9:e3:c9:f5:48:5e:fb:cb:80:9b:
69:aa:c8:d6:42:39:ac:bf:15:0e:3e:5b:83:62:8e:cb:0b:ee:
4b:91:3a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 25 16:46:52 2023 by rpki-client on console-ams.rpki-client.org