Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ibVio_J_UAe66bXsemVRCdDZRoY.roa
File: ibVio_J_UAe66bXsemVRCdDZRoY.roa (raw, json)
Hash identifier: +8+uLAfmZXo0YMD+v77TnuyZC/wQsp/05iFciRATSCM=
Subject key identifier: 89:B5:62:A3:F2:7F:50:07:BA:E9:B5:EC:7A:65:51:09:D0:D9:46:86
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C8B9971CB523587E1219C53F8748617D3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ibVio_J_UAe66bXsemVRCdDZRoY.roa
Signing time: Thu 21 Dec 2023 08:58:58 +0000
ROA not before: Thu 21 Dec 2023 08:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 193.124.7.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
212.192.217.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8b:99:71:cb:52:35:87:e1:21:9c:53:f8:74:86:17:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 21 08:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89b562a3f27f5007bae9b5ec7a655109d0d94686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:cf:4e:2e:2c:c9:ae:36:56:ce:dd:1f:92:
44:5b:75:d7:99:f2:e5:f7:99:a5:6a:f5:be:3c:7f:
10:fc:4c:d8:49:ef:c7:0f:97:71:ab:dd:a6:82:51:
c5:af:cd:e0:d7:c8:45:03:d4:b0:dd:51:d8:12:e0:
c4:7f:a3:b7:6d:1c:5f:f6:49:6e:aa:f2:5c:cf:46:
d2:40:7d:63:4d:99:51:ce:21:07:f9:70:69:a8:68:
49:1a:0e:de:28:3f:12:0b:df:75:ac:f7:9e:82:b3:
5a:4e:7b:a5:60:f6:d5:a4:80:d7:a8:8f:be:81:e4:
a3:50:ac:3f:82:e2:74:6e:cf:6e:15:b4:ab:54:bd:
48:e2:9c:2c:bb:f9:4b:d6:28:7f:fa:ab:b0:71:dd:
4b:c9:71:1f:62:aa:f2:bf:d3:9c:14:ca:e0:c3:15:
4a:99:cb:01:1d:b3:e5:a2:9b:d5:51:52:88:bd:b9:
ed:a4:b8:2a:20:7c:ca:b6:7d:50:ad:1d:0c:ba:9e:
34:b6:9d:72:7f:af:6e:c3:76:ba:5e:25:7f:c8:1e:
c6:6b:8c:12:a2:42:57:32:ad:2b:45:f6:cb:a4:16:
c1:a1:61:b5:77:bf:97:88:40:1e:44:59:99:8d:1a:
e8:1d:04:58:e7:e4:e1:21:1c:a9:ba:52:e9:03:2f:
2d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B5:62:A3:F2:7F:50:07:BA:E9:B5:EC:7A:65:51:09:D0:D9:46:86
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ibVio_J_UAe66bXsemVRCdDZRoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.90.0/24
193.124.200.0/24
194.58.154.0/24
194.87.190.0/24
194.87.215.0/24
195.58.34.0/24
195.133.6.0/24
195.133.85.0/24
212.192.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2e:47:e7:12:cd:79:b5:b9:e3:07:05:b7:9b:2b:9a:9f:e9:
fc:b9:ae:d2:9f:d4:c5:d9:d3:64:ab:0b:28:3b:07:aa:5a:0d:
3d:14:4e:c6:d8:c0:c1:66:f0:b3:f6:e1:5b:3b:40:aa:fd:6d:
56:bd:98:f4:ab:51:60:80:9f:f5:95:f8:70:18:8d:30:b6:64:
e9:e3:0d:84:79:5f:96:ca:6b:01:b1:de:be:d9:5b:8d:e9:13:
8c:ff:ac:65:c4:c8:f3:19:a0:5b:04:f3:e2:a0:7f:74:b6:d2:
cf:3b:ff:a9:55:5a:5b:de:49:3f:69:79:38:f1:a7:fb:16:d8:
08:ef:9d:18:24:ca:f3:62:59:4e:b1:1a:e9:5a:4a:08:dc:b7:
b4:d4:35:da:23:58:b8:a9:16:e5:43:2d:85:37:f2:e3:e4:23:
fb:a2:f9:ef:2a:6d:19:40:99:0e:6e:88:59:71:33:ee:0d:aa:
fe:e7:4d:2a:fb:6a:b8:af:49:8c:32:91:2c:f1:c9:d8:fd:27:
dc:da:48:a6:82:a2:0e:38:27:3a:77:d4:90:af:40:82:7b:39:
05:c1:cc:d8:f0:57:86:2e:b3:62:6a:87:33:a6:b9:20:d1:5d:
17:c9:c9:94:44:24:67:1b:02:37:b5:9b:7b:f9:86:50:39:53:
87:99:29:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 22 13:47:34 2023 by rpki-client on console-ams.rpki-client.org