Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVibp8NG54Bz7ySymxINZRdTwo0.roa
File: gVibp8NG54Bz7ySymxINZRdTwo0.roa (raw, json)
Hash identifier: QGjPFjjire6m35MQKgAqPQRPqyAl9FHfO2QyixHymrk=
Subject key identifier: 81:58:9B:A7:C3:46:E7:80:73:EF:24:B2:9B:12:0D:65:17:53:C2:8D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018949E59C0203B42D94F625978804390460
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVibp8NG54Bz7ySymxINZRdTwo0.roa
Signing time: Wed 12 Jul 2023 11:38:51 +0000
ROA not before: Wed 12 Jul 2023 11:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 194.87.202.0/24 maxlen: 24
195.133.80.0/24 maxlen: 24
193.124.17.0/24 maxlen: 24
194.87.6.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.25.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
195.133.19.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:e5:9c:02:03:b4:2d:94:f6:25:97:88:04:39:04:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 12 11:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81589ba7c346e78073ef24b29b120d651753c28d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:31:70:b4:9f:91:31:ff:df:2c:28:95:c4:b8:
28:09:21:1f:86:82:f4:ef:c1:7b:92:a7:04:ea:f5:
cd:c4:fd:d6:60:5f:9a:42:6d:be:64:6d:c9:c9:c2:
23:b2:50:49:c0:7f:38:6a:93:3a:75:61:49:81:08:
37:32:88:44:06:0e:cf:36:3d:60:bf:2d:a6:d2:af:
d5:4a:6f:fe:25:b5:a4:ba:e7:cd:df:6d:c5:3a:ea:
bb:29:85:96:15:15:6c:d8:45:f7:8f:36:e5:ed:d9:
80:02:08:84:12:42:31:00:8b:f2:da:e2:ec:36:9b:
65:d8:8b:3b:74:04:dd:a1:3c:6d:0a:65:7a:48:e9:
c5:d3:62:8a:1c:3f:f2:78:8b:82:e6:2c:8c:2d:fc:
8e:98:4e:19:53:92:ab:37:70:82:e4:ee:98:55:14:
e3:7a:fb:1a:e3:2e:4a:50:42:57:89:ac:10:34:98:
6b:91:2a:83:9b:1a:d5:f6:14:8b:f6:e5:77:c4:ab:
97:e5:a5:50:ce:92:3d:b1:e4:80:e0:c2:4f:0d:7b:
53:2b:32:90:6f:dc:30:e7:79:8d:2e:d0:72:e1:82:
91:d3:8d:8e:33:d6:88:8e:9e:ac:9c:cb:ba:42:d5:
04:8a:7f:f7:63:92:83:1a:4d:0e:36:b3:27:fd:9e:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:58:9B:A7:C3:46:E7:80:73:EF:24:B2:9B:12:0D:65:17:53:C2:8D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gVibp8NG54Bz7ySymxINZRdTwo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.17.0/24
194.87.6.0/24
194.87.25.0/24
194.87.33.0/24
194.87.138.0/24
194.87.182.0/24
194.87.202.0/24
195.133.19.0/24
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:7e:2f:ac:98:1f:3b:6f:be:51:67:9a:18:17:3f:8e:36:8a:
07:0a:80:8e:61:c1:14:39:7f:2c:eb:95:e2:a9:2b:d1:69:55:
6f:90:5f:74:26:c7:01:26:73:da:c3:23:b2:cc:be:5e:d7:60:
db:d1:23:fa:98:f6:50:e8:1d:40:70:57:f8:ad:e0:6a:67:8e:
35:10:43:e6:31:0a:c0:63:3d:4a:f0:29:43:3f:81:d4:9b:ab:
64:47:70:15:58:c6:e0:2e:a2:e9:46:8f:97:0a:24:a3:06:63:
27:94:0c:e4:b5:ff:ce:3b:58:ad:e9:f0:7b:7e:67:32:a9:90:
90:30:08:f2:98:63:15:c8:e0:fc:6d:a9:fc:b6:1c:3c:58:ce:
1e:5a:9d:c7:1b:1b:d8:0f:a3:d1:d8:42:bd:51:e4:36:e9:2b:
a7:03:00:e4:af:b3:00:6f:e7:4b:f2:89:1d:60:a9:d8:cd:83:
40:eb:38:21:4e:60:13:42:7f:ab:07:12:70:6c:34:a0:aa:20:
7a:18:4f:db:bb:00:a0:d3:bc:1e:e7:1f:e0:b6:e2:b6:32:90:
12:76:12:ba:76:1f:1c:75:0a:68:b2:b8:e1:59:dd:d2:ee:27:
9b:78:b7:48:48:00:af:50:4b:66:90:cd:9b:cd:0d:66:e1:54:
c9:7b:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 16:18:55 2023 by rpki-client on console-fra.rpki-client.org