Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gyXah7tc_jI7QvNFom4FdINebko.roa
File: gyXah7tc_jI7QvNFom4FdINebko.roa (raw, json)
Hash identifier: Yeo/CEds1IyaLAl7ItcNnDXmeQD6oZOoBbFtYJetJMU=
Subject key identifier: 83:25:DA:87:BB:5C:FE:32:3B:42:F3:45:A2:6E:05:74:83:5E:6E:4A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018ACCD88899DF7AF4CA747D27D8B6284799
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gyXah7tc_jI7QvNFom4FdINebko.roa
Signing time: Mon 25 Sep 2023 14:57:37 +0000
ROA not before: Mon 25 Sep 2023 14:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
212.192.223.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
195.133.0.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.170.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:d8:88:99:df:7a:f4:ca:74:7d:27:d8:b6:28:47:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 25 14:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8325da87bb5cfe323b42f345a26e0574835e6e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ed:aa:a6:00:9e:7a:5e:1f:7b:fb:00:04:81:
8e:73:7b:c6:4c:14:7b:c7:1b:6d:8f:fa:c4:e7:98:
bd:84:79:cb:0a:81:bd:78:81:07:a7:f6:f5:08:6c:
54:03:f4:c1:52:61:15:8f:17:b0:fe:3f:66:54:6a:
3f:1b:27:99:bd:ed:b9:01:71:3e:a4:0c:e4:e2:52:
1a:68:1e:a0:d2:7c:7f:26:a0:c3:3e:2d:a0:27:f8:
48:20:57:3f:cf:59:12:bc:d9:f7:b2:d9:ec:77:d9:
9e:d8:7f:c7:77:e9:a5:45:bc:06:9f:33:6b:c5:82:
5c:d9:e2:0d:1d:b2:88:5c:ef:41:94:bc:fe:45:d1:
de:f2:49:33:89:2f:5a:8f:6c:86:38:3c:2d:0f:90:
1b:a2:bc:cf:6f:1a:91:e5:30:22:93:9c:93:ef:87:
69:c3:09:a9:4f:9b:dc:a5:01:36:0b:0e:8c:3f:77:
b4:3e:b3:36:70:c4:7e:ba:22:e6:57:6c:4d:42:d7:
99:01:0e:58:f9:c6:92:25:a0:29:8e:a4:ad:41:85:
e3:27:3b:a2:bd:b1:53:ec:c8:8e:e6:4e:76:c3:92:
1e:c0:23:dc:2f:96:4f:92:d6:6c:b6:f9:e8:05:50:
e3:24:65:cd:1a:be:da:fe:53:db:0d:2d:36:d0:84:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:25:DA:87:BB:5C:FE:32:3B:42:F3:45:A2:6E:05:74:83:5E:6E:4A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gyXah7tc_jI7QvNFom4FdINebko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.170.0/24
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.223.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b3:dc:ae:df:d9:07:e7:a0:cb:ef:a3:c7:82:db:ae:c8:3f:
76:13:99:e1:c1:f5:58:1e:cc:8f:04:fe:cb:a9:fc:e0:bc:06:
f1:0f:8d:65:37:dd:bd:41:33:c6:87:90:23:95:9c:90:5f:0f:
40:77:92:d1:6e:08:1b:6f:a7:cb:24:12:89:7d:18:24:bf:48:
18:64:70:2a:fc:5a:48:87:2c:9b:d5:a3:55:63:36:a9:67:02:
2b:e3:9e:83:57:45:14:ca:1e:b0:33:26:3f:8d:1c:b0:54:cf:
e1:29:6b:7d:a0:fd:1b:e4:7f:0b:fe:f2:21:b1:39:2a:5e:3d:
1b:16:d9:37:7e:3b:6c:3b:92:5a:ac:cf:96:7c:85:de:3c:0e:
62:68:71:73:21:8c:a6:f9:d0:46:f7:0a:ec:35:cf:8f:1b:09:
45:32:70:5f:c4:da:a6:6e:33:65:21:c8:38:fc:6e:0b:c8:96:
72:d8:db:14:30:8f:38:a7:02:2b:56:08:a5:f3:b4:2d:8e:b3:
de:4d:04:b2:d1:3b:51:fa:23:e6:43:ed:a5:91:8e:71:b8:dc:
5b:db:70:d8:ae:e3:62:af:ff:6e:33:fd:40:48:1e:66:6a:4d:
5b:58:09:af:95:6b:96:9a:e1:b1:c4:14:9b:48:28:34:5b:d4:
eb:bc:1b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 28 06:14:05 2023 by rpki-client on console-ams.rpki-client.org