Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hdThkSEn7iDWr5rLh9qwh2ineps.roa
File: hdThkSEn7iDWr5rLh9qwh2ineps.roa (raw, json)
Hash identifier: +ZiemQsUwSgWb7L5w9VZ7cUDYeGNYmtZcdRPRFexsNI=
Subject key identifier: 85:D4:E1:91:21:27:EE:20:D6:AF:9A:CB:87:DA:B0:87:68:A7:7A:9B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AE154470FA8A66D8AE16FF4150D146CA4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hdThkSEn7iDWr5rLh9qwh2ineps.roa
Signing time: Fri 29 Sep 2023 14:25:11 +0000
ROA not before: Fri 29 Sep 2023 14:25:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Sep 2023 15:14:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e1:54:47:0f:a8:a6:6d:8a:e1:6f:f4:15:0d:14:6c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 29 14:25:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=85d4e1912127ee20d6af9acb87dab08768a77a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:de:aa:90:75:e8:f5:12:3c:ba:14:b5:60:f7:
72:79:b0:2d:eb:5c:45:85:60:20:39:d6:5a:c4:60:
0e:36:16:14:28:1f:72:7e:ee:29:ae:03:3d:76:a9:
69:c6:1c:4a:c4:8c:bc:95:f7:4a:1c:db:de:3c:a8:
dd:08:5f:74:d7:76:b4:83:ba:fe:a3:c9:39:7f:09:
12:7b:b5:5b:38:05:88:16:52:c5:92:4e:43:c0:60:
b8:b3:a1:72:32:8d:71:58:5f:bf:2f:bf:cf:84:9d:
c1:20:e8:2e:5a:77:d2:73:17:64:c8:dc:27:e2:58:
64:4d:bc:fb:dd:09:25:8d:59:ce:77:c8:0a:57:ff:
53:ed:05:db:8b:33:9a:71:ef:f9:4f:cc:bb:b0:c9:
bb:39:87:cf:61:5d:cd:fd:e9:1e:1e:12:cc:b0:bc:
08:7d:fe:cd:1c:72:03:77:ae:87:ed:d3:06:96:05:
e1:f3:85:d2:83:14:d3:93:e5:ad:8f:79:13:74:ce:
d8:8a:98:78:81:3b:c3:21:dd:2d:be:51:c8:8f:ef:
cd:d4:37:a2:21:50:a0:ae:7e:3b:53:83:1d:05:84:
b3:9d:c3:d7:e3:5e:08:d7:5a:20:0d:5c:7d:01:69:
7d:19:85:6e:06:23:6d:a3:45:71:85:29:ab:3c:e4:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D4:E1:91:21:27:EE:20:D6:AF:9A:CB:87:DA:B0:87:68:A7:7A:9B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hdThkSEn7iDWr5rLh9qwh2ineps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:7b:f4:75:5d:95:61:67:8d:4c:91:e3:12:14:9d:f8:53:cb:
14:52:b4:3c:b7:aa:65:43:1d:2e:b7:09:44:58:f9:db:3e:e9:
2e:29:ba:1e:8d:3d:64:b1:b3:88:7e:fc:c7:e5:85:46:11:1e:
1b:02:e0:71:6b:85:ea:bf:cf:46:40:9e:b4:32:f5:0d:03:f9:
fe:c3:38:66:3d:a4:99:7b:bc:db:fe:d2:a5:5d:ec:de:bb:ff:
ac:e3:49:c2:92:e7:bd:1f:26:1c:c2:0f:46:8c:47:c9:c4:f9:
98:06:f6:1f:cd:c4:08:c2:03:8b:0e:6c:b5:17:91:45:67:ce:
63:13:1a:94:92:c0:a7:78:81:93:af:9d:ce:2d:c4:7c:95:0c:
56:41:64:ee:56:4f:ec:cc:ba:71:f5:9f:a5:31:04:75:d0:c4:
31:e2:f4:c7:54:61:52:f8:64:0d:8b:c2:0b:1e:8a:bd:f3:7c:
b5:fa:58:10:b0:3a:46:f1:0e:a3:a1:61:cb:ab:a5:98:7e:47:
93:1a:b6:81:d1:4c:8d:54:6e:2a:bc:43:72:e8:ad:7d:2f:c1:
cb:87:e4:f8:43:90:0b:19:cf:5f:ca:36:7f:c4:c3:de:5b:cc:
25:92:9d:65:83:20:4e:fd:21:d9:0b:37:fb:ed:3f:b2:d0:87:
d2:81:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:23 2024 by rpki-client on console-fra.rpki-client.org