Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/i1hEW_JDAOV3A5vSsQ18Kkmeg4U.roa
File: i1hEW_JDAOV3A5vSsQ18Kkmeg4U.roa (raw, json)
Hash identifier: 1xuXAWIVlW78P36P5C0xoBxUe1tQnTiqoErJd6tGzII=
Subject key identifier: 8B:58:44:5B:F2:43:00:E5:77:03:9B:D2:B1:0D:7C:2A:49:9E:83:85
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A4A3114085BC8E95DE82EBBE1775BB51D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/i1hEW_JDAOV3A5vSsQ18Kkmeg4U.roa
Signing time: Thu 31 Aug 2023 06:04:04 +0000
ROA not before: Thu 31 Aug 2023 06:04:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.20.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:31:14:08:5b:c8:e9:5d:e8:2e:bb:e1:77:5b:b5:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 31 06:04:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b58445bf24300e577039bd2b10d7c2a499e8385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:35:02:f1:7a:94:f7:43:16:ca:f0:11:d8:f2:
71:7b:7e:3d:0a:12:09:23:76:8f:5a:1e:0f:7b:a8:
74:16:a0:2c:b2:c6:d8:17:36:3c:4f:eb:6b:c6:65:
fd:6c:a4:31:78:3a:f5:77:d1:0a:bf:ff:c5:a2:69:
08:a0:3e:15:b4:0d:99:e0:de:6f:dc:18:94:c3:ad:
19:fd:73:d8:6c:b0:95:8b:2a:a2:41:5f:f7:3a:6d:
bb:dd:b1:c0:69:6d:37:69:94:af:05:67:d1:3c:ee:
15:96:8d:c1:29:c6:6c:7a:64:38:01:7e:ca:d2:91:
70:9c:66:85:ac:15:90:45:22:0e:87:c6:54:3a:7b:
53:21:d7:8e:c4:8e:bb:28:bf:15:e2:9a:d2:11:f5:
90:76:88:15:ad:78:0d:01:da:ac:04:95:e8:62:c8:
43:db:c1:81:2e:74:1d:b9:ec:7e:ff:f5:24:f0:f4:
7f:86:66:00:ab:14:da:b1:12:52:2c:aa:0f:09:04:
4c:48:3b:7b:cd:49:0d:c7:59:ec:8b:7a:1c:54:2d:
93:81:bb:ab:bc:9f:41:10:92:34:6e:db:fb:bb:45:
df:ff:ef:43:c6:40:63:45:81:bb:91:95:9c:75:dd:
75:4d:73:51:68:cd:b8:4d:04:ca:6e:7b:7d:b9:68:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:58:44:5B:F2:43:00:E5:77:03:9B:D2:B1:0D:7C:2A:49:9E:83:85
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/i1hEW_JDAOV3A5vSsQ18Kkmeg4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
193.124.4.0/24
194.87.2.0/24
194.87.20.0/24
194.87.30.0/24
194.87.44.0/24
194.87.221.0/24
194.135.105.0/24
195.58.34.0/24
195.58.58.0/24
195.133.35.0/24
195.133.78.0/23
212.192.8.0/24
212.192.248.0/24
Signature Algorithm: sha256WithRSAEncryption
33:60:73:8d:de:ba:4b:26:67:c4:b9:27:be:02:09:2f:5c:b0:
f9:ff:19:f0:8b:5d:76:ad:54:1b:68:fa:83:b4:e8:6f:4c:eb:
5e:20:33:fe:34:f6:49:f6:30:68:13:f0:8a:6b:16:a0:1a:4c:
8a:db:b1:f5:0b:88:c5:dc:c4:18:8a:a7:21:a5:45:4c:7a:32:
e7:33:87:b7:76:90:fa:ce:a7:33:45:63:2e:61:b2:de:f5:ae:
20:a1:f5:17:58:ac:24:a1:6d:7f:a5:5c:ca:48:39:f9:ba:c5:
58:d7:c5:87:0e:9c:f1:34:ff:db:ca:80:c2:18:dd:d7:0a:05:
a4:25:5f:72:61:cd:4c:97:64:b2:d4:c6:ba:89:14:13:01:13:
c3:56:dc:a9:67:55:38:07:47:66:bd:f7:18:76:42:fb:2b:54:
05:0c:20:28:d1:3c:99:84:f7:95:b9:51:ba:8d:9e:b8:8d:b8:
3f:87:5e:fd:18:0a:5d:0a:1c:07:bb:5a:cb:e8:0e:15:04:32:
46:6b:64:17:b7:f5:65:9c:c8:ce:a6:9f:b4:6f:7b:5a:62:9e:
b3:a8:7c:1c:dc:64:14:fd:6f:9c:9f:02:d2:53:6c:06:0f:c1:
b8:7b:bd:1b:1f:bd:31:02:69:12:7a:66:e9:6b:13:8f:b5:f7:
5a:f8:bd:a8
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 3 10:17:14 2023 by rpki-client on console-ams.rpki-client.org