Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gmQp_bU-4cWRsS8jMbHFQBh6t5w.roa
File: gmQp_bU-4cWRsS8jMbHFQBh6t5w.roa (raw, json)
Hash identifier: zRcp3fIvKaQUPkfUEY1IS7Cy9+iLlLIDVbdB21LLkzc=
Subject key identifier: 82:64:29:FD:B5:3E:E1:C5:91:B1:2F:23:31:B1:C5:40:18:7A:B7:9C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A89A3396BBFB439821C750D3D53AB4006
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gmQp_bU-4cWRsS8jMbHFQBh6t5w.roa
Signing time: Tue 12 Sep 2023 13:44:50 +0000
ROA not before: Tue 12 Sep 2023 13:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
212.192.254.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:a3:39:6b:bf:b4:39:82:1c:75:0d:3d:53:ab:40:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 12 13:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=826429fdb53ee1c591b12f2331b1c540187ab79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d8:7b:82:28:a7:9f:33:99:68:09:2a:99:b7:
31:c7:63:02:cc:25:6a:ca:ac:68:c2:91:4d:43:8f:
c1:f9:8a:fe:f1:3f:42:fb:8f:56:8c:17:ae:25:28:
c0:44:45:75:a1:6d:00:e5:78:a2:83:03:bd:61:d7:
1f:90:2e:a8:33:af:3b:b5:2c:93:18:74:20:a4:9f:
fa:3e:52:cc:77:fc:71:a1:86:7b:51:8a:3e:a6:7d:
d2:64:6b:1b:9f:7f:e3:16:a0:4e:9c:9c:0b:2e:64:
7d:17:3b:56:de:10:7d:4c:d4:36:2c:df:97:0c:e9:
48:34:18:c2:99:3b:fd:db:e2:e7:5b:57:df:d3:d5:
85:ef:1f:cf:f9:a5:95:0f:61:42:fe:8b:55:be:74:
f0:5a:8f:ed:22:83:d1:ea:4f:83:1c:8c:6c:a3:91:
e4:2f:c3:bf:57:2f:ad:6d:7f:c7:ef:a7:7d:12:44:
bf:a5:28:8d:a9:3f:cc:a3:56:00:44:d7:09:11:9c:
ac:1d:37:81:4b:c6:fb:07:7b:dc:3a:9a:76:44:2d:
fe:d0:0e:0a:0c:7e:bd:82:f0:06:a6:f2:fc:9e:d6:
a9:e1:36:c7:c5:5f:08:ad:2f:e7:1b:bb:d6:af:0f:
99:89:9a:69:f7:d9:b9:f7:94:ef:cd:15:b6:82:72:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:29:FD:B5:3E:E1:C5:91:B1:2F:23:31:B1:C5:40:18:7A:B7:9C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gmQp_bU-4cWRsS8jMbHFQBh6t5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/24
194.87.2.0/24
194.87.30.0/24
194.87.44.0/24
194.87.142.0/23
194.87.221.0/24
195.133.94.0/24
212.192.8.0/24
212.192.212.0/24
212.192.215.0/24
212.192.248.0/24
212.192.252.0-212.192.254.255
Signature Algorithm: sha256WithRSAEncryption
5e:c3:86:f6:82:6e:8b:1f:4f:92:d9:00:43:2e:69:47:99:0d:
f0:a0:71:ad:d0:16:51:77:30:1f:fc:65:2c:f8:bf:dd:21:ff:
cb:b3:bb:c2:76:4e:5c:7d:53:f9:8f:27:25:a4:51:1c:b0:eb:
0e:a1:8f:62:ac:bc:b2:f4:95:82:e8:c7:9e:54:d4:09:04:55:
c4:5a:d1:d2:31:1e:0f:01:5e:e4:09:be:38:57:59:2b:72:cf:
0f:82:0f:61:6c:7d:85:5f:6b:7b:ec:16:06:23:c4:43:5e:f8:
34:ef:3a:bf:6f:97:27:89:a9:03:4d:2e:14:7e:7c:e4:70:d1:
c3:24:36:f5:70:2f:88:78:6b:92:49:a2:67:14:1d:44:4d:98:
1e:4a:07:20:b6:1e:f1:8c:e8:83:6d:68:97:0b:f2:06:01:8b:
4f:a0:30:69:9f:6b:57:73:d1:ea:46:8e:69:9d:05:31:73:4e:
fb:15:37:e4:aa:4b:1e:17:51:71:bc:2e:c9:9f:d1:ea:d5:03:
73:51:dc:7f:a8:b2:2e:7c:12:fe:1a:d7:0a:15:4e:a7:78:42:
46:e9:85:51:96:b9:d6:28:c0:e5:b3:be:77:94:eb:bf:ae:18:
1b:28:ff:f3:63:a8:c2:5e:f9:af:e1:cc:6d:0c:b7:34:d9:72:
6d:d6:36:1d
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 15 06:20:15 2023 by rpki-client on console-fra.rpki-client.org