Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gQM7ql2wU0dgXn8afEwlF8JmMyQ.roa
File: gQM7ql2wU0dgXn8afEwlF8JmMyQ.roa (raw, json)
Hash identifier: tPRJ62WxD36UDiHAnIkU/jI2y09bsBr+Pg9TDrsFy1M=
Subject key identifier: 81:03:3B:AA:5D:B0:53:47:60:5E:7F:1A:7C:4C:25:17:C2:66:33:24
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185B6C039FE8F749FDD9B7AF7278917B0DD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gQM7ql2wU0dgXn8afEwlF8JmMyQ.roa
Signing time: Sun 15 Jan 2023 18:45:29 +0000
ROA not before: Sun 15 Jan 2023 18:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b6:c0:39:fe:8f:74:9f:dd:9b:7a:f7:27:89:17:b0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 15 18:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81033baa5db05347605e7f1a7c4c2517c2663324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:d3:2e:71:8f:cf:b1:80:08:10:78:9d:f0:
57:08:98:f6:b0:7a:8d:f0:be:5d:73:21:bc:4f:7a:
1e:6b:14:6b:4c:7e:1e:2a:c1:cd:33:70:8d:e3:61:
1b:77:7b:fa:03:4d:31:dc:be:57:29:24:0b:45:c6:
de:e0:d4:19:4e:4b:12:6d:1d:f1:80:4c:ed:cc:3b:
d9:d5:ed:52:60:ae:ae:c5:2e:c8:71:74:c3:98:ed:
ca:d4:54:8f:a9:ce:10:f4:3e:46:e5:48:43:e0:f1:
ba:93:10:83:52:32:c6:5d:c9:f4:ee:90:3f:bd:00:
75:f5:fa:0e:05:ff:60:35:0d:0f:fb:c2:79:63:d0:
b4:d3:33:30:4e:ed:f1:40:e5:7c:44:f9:09:e9:4a:
39:ce:fc:2b:68:45:cc:16:5b:f3:01:84:da:d9:57:
e9:2f:d3:b0:95:24:03:00:01:ac:c2:ab:80:ae:88:
37:de:63:93:13:ac:ae:3f:cf:b1:8d:44:36:c9:5e:
ea:8f:96:9b:31:7e:35:4b:29:5f:14:8c:4f:04:4b:
c5:3e:08:80:bc:33:d3:5c:5c:87:c2:4c:c3:fa:25:
41:61:13:84:58:b5:52:cf:d8:92:43:11:20:2c:57:
01:81:23:b3:40:68:64:60:0c:68:83:82:75:ae:03:
31:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:03:3B:AA:5D:B0:53:47:60:5E:7F:1A:7C:4C:25:17:C2:66:33:24
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gQM7ql2wU0dgXn8afEwlF8JmMyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.18.0/24
193.124.41.0/24
193.124.47.0/24
193.124.205.0/24
194.58.43.0/24
194.58.46.0/24
194.87.30.0/24
194.87.64.0/24
194.87.108.0/24
194.87.161.0/24
194.87.207.0/24
195.133.94.0/24
212.192.7.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e6:33:bd:17:ac:28:4c:81:1f:5e:00:84:56:9b:e8:ef:80:
c9:38:d0:56:a2:3d:4c:74:cd:91:6b:8e:1a:22:b8:79:1e:2b:
78:56:66:9d:c8:05:8c:84:62:e4:c8:2b:33:f5:04:ae:2c:34:
71:76:79:fa:59:9c:08:64:ac:6b:be:2d:58:74:e2:56:90:a2:
0d:64:23:29:21:76:b1:fc:26:44:44:7a:44:51:3f:f4:bb:94:
bc:74:37:21:b9:cf:19:87:96:c5:60:a9:97:cc:e3:04:18:48:
4a:0b:03:dc:85:96:c9:2e:10:42:b9:20:51:02:b0:47:dc:d1:
83:36:cb:bd:9c:66:fb:35:ed:b9:2a:12:70:20:ed:ce:fc:44:
ea:94:51:33:20:63:77:fa:35:a6:55:32:79:b7:29:71:0d:9a:
9e:0a:07:4c:23:75:d3:b7:8b:2c:f1:05:a3:f7:4a:27:a4:41:
78:4d:3b:8c:97:15:e8:3d:d0:5e:09:cf:40:70:63:94:91:d1:
11:27:09:b2:fc:e8:9c:f5:23:76:d3:38:ec:84:2b:8c:11:10:
c9:1d:a9:f8:94:b7:96:5e:35:d9:42:99:8b:de:de:2d:3a:15:
42:ad:66:cf:a1:09:88:ab:d5:10:39:4a:55:ff:69:00:3b:54:
83:cf:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:09 2023 by rpki-client on console-fra.rpki-client.org