Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hv32jDCG5S-mItAYDIReNNtNnDE.roa
File: hv32jDCG5S-mItAYDIReNNtNnDE.roa (raw, json)
Hash identifier: PurYS9DNhxzSmMqo0CZ80jHGMWHah61K4jTUcix7aFg=
Subject key identifier: 86:FD:F6:8C:30:86:E5:2F:A6:22:D0:18:0C:84:5E:34:DB:4D:9C:31
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185AB238247BB280205F4D8EEB29155B259
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hv32jDCG5S-mItAYDIReNNtNnDE.roa
Signing time: Fri 13 Jan 2023 12:38:29 +0000
ROA not before: Fri 13 Jan 2023 12:38:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ab:23:82:47:bb:28:02:05:f4:d8:ee:b2:91:55:b2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 13 12:38:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=86fdf68c3086e52fa622d0180c845e34db4d9c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:92:3a:72:de:06:41:21:9c:ec:a7:53:94:
6d:f3:f2:0b:ec:c1:43:c3:8f:ec:47:da:a9:e0:0c:
08:50:3b:c4:9b:5d:be:fa:32:43:85:c0:61:4d:f6:
46:04:22:2a:d1:0d:90:5b:87:27:42:24:7a:20:c4:
54:50:3a:cc:c9:c1:41:92:ea:33:ce:56:a5:1b:7b:
44:ae:30:3d:f7:17:34:3d:1b:0d:7f:a5:34:28:40:
60:f9:d9:ce:c9:df:5d:dc:08:fd:24:51:de:02:ef:
f6:26:af:b4:02:29:bc:c8:bf:99:f8:86:f6:d9:d0:
e9:da:99:3d:02:3a:21:72:8b:d4:08:b6:3f:94:db:
d1:30:06:9f:7a:f4:df:e8:68:83:a1:26:3b:ef:c5:
b7:81:a5:e6:db:cc:e0:75:ad:25:c0:ae:fa:92:df:
a4:4b:da:9b:62:43:ad:30:2c:93:01:b2:8a:a0:be:
68:1c:89:07:c0:79:94:ae:32:90:98:be:2e:f1:15:
72:0c:e9:23:ed:50:bd:23:b4:2d:2b:52:07:1b:70:
f4:d6:df:cb:53:60:a3:a1:e2:05:18:b7:7a:b0:26:
bd:77:c2:d1:7e:93:9f:79:d2:36:61:d2:60:89:50:
4e:a1:f5:6d:35:95:c4:51:e1:6d:43:1a:71:97:46:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FD:F6:8C:30:86:E5:2F:A6:22:D0:18:0C:84:5E:34:DB:4D:9C:31
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hv32jDCG5S-mItAYDIReNNtNnDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
193.124.9.0/24
193.124.44.0/24
193.124.201.0/24
194.87.1.0/24
194.87.38.0/24
194.87.42.0/24
194.87.73.0/24
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.178.0/23
194.87.182.0/24
194.87.187.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.56.0/24
195.133.0.0/24
195.133.30.0/24
195.133.35.0/24
195.133.195.0/24
212.192.10.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:43:6f:11:09:39:d3:71:62:39:51:6e:34:71:51:18:32:04:
9d:92:a0:1c:bf:0f:e9:9d:27:53:92:cb:99:24:40:62:b6:c3:
6b:fa:c8:6d:76:6a:72:84:3f:d2:93:c8:25:fe:d9:e5:c9:62:
ba:d3:2b:94:2a:28:6e:ca:54:62:00:16:3e:ce:a6:f4:74:7b:
01:08:0b:0b:38:a7:39:f7:76:66:b9:aa:c2:05:90:61:78:00:
20:e9:4a:20:9e:c6:41:eb:d8:39:c1:b3:4d:8e:33:8e:65:25:
03:ab:8c:99:e3:7f:f2:fd:83:09:ef:a7:31:91:30:f9:c3:a8:
11:bb:16:26:be:6f:09:ac:c4:6c:7e:42:ce:3a:20:ce:45:46:
fc:cd:26:3d:3e:df:e0:a0:85:f3:83:06:d6:7d:c9:0f:ae:7b:
f1:e8:ea:d6:c0:be:bf:f4:ae:ec:95:97:49:47:22:d1:1f:8c:
1b:4d:b2:21:4d:66:e6:7b:dc:27:95:f8:45:34:1a:48:c2:16:
af:05:00:85:2a:77:ef:3c:ea:3d:b1:c2:a3:09:58:3e:84:c1:
e2:58:98:1a:f5:e9:f2:f7:b8:a8:5c:14:e7:bb:1f:9c:a5:e5:
94:63:4e:04:c9:d9:18:5b:f0:ec:67:c8:cd:30:90:8c:aa:a4:
f7:32:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org