Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f8kNbYCqu7cZpsSNwKcJ5-TqEXw.roa
File: f8kNbYCqu7cZpsSNwKcJ5-TqEXw.roa (raw, json)
Hash identifier: UfJeaeyvw9b69B8/8DuhBrHV6C7GngIh/+5XpXIITdI=
Subject key identifier: 7F:C9:0D:6D:80:AA:BB:B7:19:A6:C4:8D:C0:A7:09:E7:E4:EA:11:7C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AF638112B5125759FFCB9ABB809E4E63A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f8kNbYCqu7cZpsSNwKcJ5-TqEXw.roa
Signing time: Tue 03 Oct 2023 15:46:24 +0000
ROA not before: Tue 03 Oct 2023 15:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f6:38:11:2b:51:25:75:9f:fc:b9:ab:b8:09:e4:e6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 3 15:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc90d6d80aabbb719a6c48dc0a709e7e4ea117c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:5e:46:b3:ee:9e:36:ee:bc:09:d2:44:e9:
9b:dd:b2:db:10:49:2f:c3:15:c1:8d:df:40:27:67:
96:f5:bc:c5:0d:47:24:ee:1f:bf:33:16:90:b6:fe:
f7:27:2f:02:06:03:4f:02:ed:3a:4a:47:f7:8c:86:
6b:40:f7:db:a0:34:7a:1c:a5:47:fd:34:93:78:2a:
69:87:77:d3:40:70:7a:72:d0:bc:99:5a:43:2c:77:
a2:3a:4f:aa:51:d6:4b:8f:d5:81:28:e5:0c:f3:38:
c2:91:f3:07:44:58:4c:60:ce:69:ac:13:b4:6a:df:
4c:2f:ca:c4:db:b2:df:fc:3a:8a:8e:6b:b4:1d:3e:
0e:a5:6b:2a:aa:e5:8e:17:26:0a:0a:e1:af:14:81:
a4:c9:8c:d8:1a:5b:b5:75:53:41:55:d0:63:37:4d:
44:d1:84:63:18:6d:1a:e3:d4:52:dd:08:24:5a:08:
62:8f:64:74:05:49:0c:3b:71:2a:fb:5a:c5:7a:15:
81:7c:b8:45:a6:8a:a8:9d:06:01:95:e6:ca:00:50:
18:bf:ad:79:e6:2b:b4:75:c2:48:82:e4:ca:67:60:
52:eb:ea:36:f8:fc:0e:5b:44:59:c2:e8:66:b2:7c:
46:fb:b8:ef:eb:fb:19:6e:45:49:6a:c9:27:21:51:
02:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C9:0D:6D:80:AA:BB:B7:19:A6:C4:8D:C0:A7:09:E7:E4:EA:11:7C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f8kNbYCqu7cZpsSNwKcJ5-TqEXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
194.135.18.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.37.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
62:56:ef:c7:e9:75:02:28:42:0b:ed:ce:5e:79:27:df:2f:e5:
38:bd:cb:0a:e0:03:b8:78:34:d6:a1:a5:56:32:7d:da:0c:56:
fc:ea:20:e8:e1:9c:73:32:83:6a:ae:7f:a7:86:09:f8:9d:34:
8a:5d:26:f5:4d:de:57:66:30:2b:53:8d:e1:bc:0a:8c:04:83:
0a:eb:84:51:45:fc:6e:a6:d1:ab:15:e9:5d:73:5c:b8:1d:c7:
2c:f7:fd:bd:fa:da:d2:69:be:13:cb:26:41:ca:d9:91:de:72:
2f:b9:fc:87:04:8e:b6:6f:59:f8:da:72:07:39:4e:b7:95:3f:
6c:77:18:71:fb:73:a6:c9:9f:c6:09:c5:f8:f0:db:78:ab:5a:
31:5a:b0:8b:f2:be:44:4f:12:a8:54:04:d3:74:b3:c2:39:db:
13:0e:1a:7b:94:45:38:12:48:ef:ed:3c:48:16:e2:bb:ca:f1:
d5:ce:4b:55:a0:6d:4d:9d:cf:2c:ce:84:93:21:e7:5f:f4:23:
81:31:a8:27:47:fd:2b:cb:54:73:4d:1c:1e:b9:10:37:42:a3:
bd:7d:b0:db:5a:be:da:78:b2:e3:38:9d:6c:98:69:cc:16:82:
b6:bf:ac:f5:b7:1f:a2:f0:89:e8:55:73:b5:ed:9a:f3:3a:21:
80:07:f6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 07:53:45 2023 by rpki-client on console-ams.rpki-client.org