Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hrU63kN7Dv0Kyc9yPvincGNtz0w.roa
File: hrU63kN7Dv0Kyc9yPvincGNtz0w.roa (raw, json)
Hash identifier: Rittvb8FLiG96ccsP4WS0CkzrhVt9258pjGYDYFX9JA=
Subject key identifier: 86:B5:3A:DE:43:7B:0E:FD:0A:C9:CF:72:3E:F8:A7:70:63:6D:CF:4C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187FECB9C79E80C14D3BB460ADE66B76B7B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hrU63kN7Dv0Kyc9yPvincGNtz0w.roa
Signing time: Tue 09 May 2023 04:36:09 +0000
ROA not before: Tue 09 May 2023 04:36:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 195.133.82.0/24 maxlen: 24
185.72.9.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fe:cb:9c:79:e8:0c:14:d3:bb:46:0a:de:66:b7:6b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 9 04:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86b53ade437b0efd0ac9cf723ef8a770636dcf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:71:ef:ab:67:fa:73:60:47:14:65:55:b4:f9:
02:a0:7a:bf:3c:4c:a3:dd:92:09:18:0b:00:12:0a:
19:30:c6:a2:a4:e5:e8:94:7b:cc:f0:65:ff:fc:1d:
a7:48:9d:f9:a2:d8:1e:cf:c8:4e:76:76:5b:c0:e5:
2d:2b:ac:68:28:d1:bf:ef:1a:78:f2:91:42:21:82:
6d:6b:98:a6:dd:d8:39:ba:ec:5e:ed:cc:86:6f:f9:
b2:be:72:97:01:0c:e6:3d:d7:ce:21:de:b6:ab:a3:
48:7e:9c:dd:ae:f9:54:66:ae:19:60:2b:86:2d:74:
db:fd:c6:e3:63:23:46:20:03:51:34:38:c7:58:3a:
a2:6b:00:60:75:be:01:a2:e6:67:bc:79:91:16:cb:
01:54:e2:e2:14:9c:21:03:0a:21:86:d0:5e:20:5d:
d9:7b:8b:89:11:e1:c1:4f:b5:a4:d1:c9:8b:15:97:
92:68:cc:75:79:36:4f:6c:e5:b9:12:4d:37:fb:aa:
6c:e1:30:40:63:90:50:18:10:5d:32:04:e7:09:66:
d5:76:22:3e:02:fc:bd:6a:9a:46:63:7d:07:d1:4c:
04:63:3b:42:9c:13:9b:4f:ec:17:41:e5:85:c8:2b:
40:5d:13:38:15:31:e1:0d:e1:5d:10:6c:82:47:2a:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B5:3A:DE:43:7B:0E:FD:0A:C9:CF:72:3E:F8:A7:70:63:6D:CF:4C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hrU63kN7Dv0Kyc9yPvincGNtz0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.9.0/24
194.87.73.0/24
194.87.90.0/24
194.87.181.0/24
194.87.198.0/24
195.133.82.0/24
212.193.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:d5:d1:82:8d:96:31:a2:36:33:c4:5d:3b:8b:ea:7f:a8:a6:
58:87:f0:c6:f0:98:b9:9e:aa:96:eb:5e:8f:4a:46:48:b9:4f:
5d:e5:37:72:77:05:0f:df:f3:3d:fa:e9:ec:a4:0d:68:0d:2f:
22:19:94:f6:5c:17:98:bf:54:cb:d0:8a:67:0c:e2:98:9a:20:
57:46:68:9b:d5:57:c2:35:eb:8e:01:f3:51:0e:79:c8:2e:f9:
01:d5:e8:72:c0:9f:dd:31:c5:58:1b:e0:ad:62:bb:83:c6:46:
5a:16:7d:08:08:5f:40:c6:e9:3c:c7:1b:a8:22:89:28:35:02:
d2:46:91:a3:96:a2:a7:82:a4:96:a1:0d:6f:ec:d7:3d:99:d2:
a5:2b:03:26:20:48:e9:56:ae:e0:4b:d9:f3:da:69:39:c6:90:
71:8e:0e:aa:50:84:cd:f4:da:bc:73:a0:f1:ac:80:12:77:68:
d7:d3:5b:a3:86:f1:43:03:77:59:19:e7:1c:17:0f:a8:cd:2d:
5f:7a:16:3d:d0:f3:18:40:bd:6d:ea:fb:50:47:72:92:2a:e2:
03:24:97:2a:15:69:35:be:90:d0:0c:ba:c5:22:38:c6:95:00:
3e:71:5d:d4:69:69:8d:da:a0:f7:bf:c6:ee:c4:b0:17:9a:f3:
2f:94:4a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:09 2023 by rpki-client on console-fra.rpki-client.org