Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f6u9j8XnkGfHLeXn56bt0Lg-1Xs.roa
File: f6u9j8XnkGfHLeXn56bt0Lg-1Xs.roa (raw, json)
Hash identifier: 9cWWqpXcr5fH0rx/fdLJQJ032vUfUXhDyMrWDDJcnVo=
Subject key identifier: 7F:AB:BD:8F:C5:E7:90:67:C7:2D:E5:E7:E7:A6:ED:D0:B8:3E:D5:7B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186D184E7AA2C8F6488A0F75A17E0998BE1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f6u9j8XnkGfHLeXn56bt0Lg-1Xs.roa
Signing time: Sat 11 Mar 2023 16:33:13 +0000
ROA not before: Sat 11 Mar 2023 16:33:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 194.135.104.0/24 maxlen: 24
212.193.24.0/22 maxlen: 24
194.87.225.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.26.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d1:84:e7:aa:2c:8f:64:88:a0:f7:5a:17:e0:99:8b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 11 16:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fabbd8fc5e79067c72de5e7e7a6edd0b83ed57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:2d:e3:5d:0e:78:59:69:ae:6b:57:67:5e:
cb:8a:7c:d7:8b:02:42:67:15:66:51:35:ed:71:56:
8b:c1:2f:66:fe:7e:6a:09:70:7a:87:2b:be:1e:11:
ae:1d:4c:c2:9d:fc:0a:2b:6a:4f:02:88:23:73:ae:
b6:74:90:9d:6b:66:73:eb:8b:ec:5d:82:92:73:a9:
5e:a8:e9:ff:1b:85:69:65:6b:90:6b:2b:1c:32:d2:
24:2c:3b:3a:73:5b:46:59:5a:5c:40:19:63:34:41:
18:e1:7c:c3:3d:61:ed:9b:9a:7e:84:58:94:47:36:
d0:74:51:8f:0a:8c:cf:41:8a:77:1d:b7:28:1f:f6:
2a:1a:5f:dc:c1:9c:f0:8a:5f:83:15:ef:17:47:3b:
9c:a6:05:b5:26:9a:82:82:54:13:b3:08:cc:dd:d9:
bb:d3:97:d5:66:e6:a1:dd:3c:a8:59:b5:40:8c:48:
26:4a:08:c4:42:8e:c1:89:da:85:9d:dd:9a:4f:44:
f0:89:6c:be:5d:be:a4:4d:48:89:dc:c7:28:03:cf:
53:76:20:60:d1:77:ce:47:d1:54:78:c5:be:34:ff:
ed:44:b3:f6:33:5f:e9:69:e1:95:2d:5b:32:ca:38:
1b:1d:78:68:75:50:98:7b:e8:08:0c:8f:33:70:b1:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:AB:BD:8F:C5:E7:90:67:C7:2D:E5:E7:E7:A6:ED:D0:B8:3E:D5:7B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f6u9j8XnkGfHLeXn56bt0Lg-1Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.225.0/24
194.135.32.0/24
194.135.38.0/24
194.135.104.0/24
195.133.9.0/24
195.133.21.0/24
195.133.26.0/23
195.133.59.0/24
212.193.24.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:ba:3b:be:99:35:bc:58:97:56:fc:11:50:3e:ef:35:78:07:
ff:40:d3:1a:7d:51:f2:dd:9b:ea:06:bf:83:7f:15:6d:43:a2:
87:b4:dd:e2:5e:ab:ec:fb:6d:22:94:83:36:e2:f0:60:81:d2:
c6:2c:d1:b1:7b:df:c3:7b:78:22:fa:83:68:1d:e6:65:fb:70:
bc:4d:76:2a:65:d3:e5:9a:7b:f0:f2:83:8d:ea:1f:aa:83:ba:
cc:57:f0:aa:76:9c:ed:5a:f2:48:b0:3e:68:52:0d:98:ad:42:
fd:33:ba:df:92:52:15:1a:7d:fe:dd:fd:bc:9c:a3:57:bf:0a:
43:8e:c6:fb:a9:98:05:46:e6:89:fe:73:13:f6:d3:96:1d:5e:
3e:d6:75:d8:d9:c9:6c:94:04:4b:2a:86:ce:cf:9e:49:af:9d:
ef:ac:9e:e5:be:82:5a:b4:7a:73:0d:b6:b2:71:25:8a:93:e6:
b1:56:0e:aa:bc:38:fc:b8:53:9a:a6:76:60:9b:10:19:15:07:
74:28:0f:40:76:b1:8f:a4:cc:8e:bc:a4:3a:51:70:b6:47:51:
5d:22:6c:f7:79:72:f9:44:9d:93:87:a9:e9:db:b8:7f:1d:77:
db:a7:d6:b3:64:08:b7:59:05:51:26:f9:22:59:f4:8d:36:cf:
f9:81:8c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org