Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j-r9GklYE4KdDD6FITAvXrBcehg.roa
File: j-r9GklYE4KdDD6FITAvXrBcehg.roa (raw, json)
Hash identifier: X/PqfQALx6zU9zXdG18qIxn2I8JxPRfr8lSEVAvRwcE=
Subject key identifier: 8F:EA:FD:1A:49:58:13:82:9D:0C:3E:85:21:30:2F:5E:B0:5C:7A:18
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189632368CEEDAAE0AAE434335832336E2D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j-r9GklYE4KdDD6FITAvXrBcehg.roa
Signing time: Mon 17 Jul 2023 09:16:52 +0000
ROA not before: Mon 17 Jul 2023 09:16:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 212.193.14.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:23:68:ce:ed:aa:e0:aa:e4:34:33:58:32:33:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 17 09:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8feafd1a495813829d0c3e8521302f5eb05c7a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:44:6b:93:e3:3d:a4:e2:d8:9e:6b:1e:6b:3d:
3f:c6:f3:8c:71:cd:29:a6:05:bd:d0:23:9f:e9:e9:
5c:26:96:a4:36:2e:75:e2:b4:95:32:0f:54:ab:f1:
6a:dd:eb:7c:9b:44:a2:8c:dd:5c:97:bd:72:b4:66:
7d:8b:68:b8:a5:ac:46:42:39:c4:a0:a5:14:12:ce:
3c:40:b6:e1:b5:96:12:bc:64:ca:90:1a:58:28:5d:
07:e6:6b:f0:17:f2:e9:40:57:32:45:fe:8b:92:6e:
60:47:4c:28:20:a2:ec:a6:da:47:4b:3c:ed:f7:f2:
8c:eb:55:f1:2c:63:b3:86:1f:bc:18:f1:c3:04:e5:
cd:a1:d6:27:a5:e1:a6:30:2a:fa:79:bb:fc:0e:37:
f5:d0:5d:fc:6d:98:bd:68:48:47:72:a3:3d:15:cb:
e0:27:9d:4a:c0:0f:cc:76:ed:be:31:7d:42:ca:de:
2c:50:55:d2:c0:16:63:89:c0:6b:d4:46:8e:c8:78:
e2:e0:d4:15:e1:4a:45:be:3a:bd:1c:36:26:18:9d:
c7:1b:0c:ea:3a:2c:47:94:26:0e:be:ca:8a:61:d0:
f7:f4:98:1c:13:42:9a:81:56:1b:1d:85:c8:57:70:
24:c2:8a:9e:74:1c:3d:4e:73:61:6a:7a:8b:c6:c6:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EA:FD:1A:49:58:13:82:9D:0C:3E:85:21:30:2F:5E:B0:5C:7A:18
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j-r9GklYE4KdDD6FITAvXrBcehg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
193.124.90.0/24
194.87.76.0/24
194.87.172.0/24
194.87.208.0/24
194.87.226.0/24
194.87.231.0/24
195.133.15.0/24
195.133.25.0/24
195.133.27.0/24
212.192.4.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cc:65:39:8b:e8:33:62:7a:a2:0e:ea:23:8a:f2:ac:10:ce:
cb:f4:f7:0d:df:dd:80:91:05:17:f1:30:51:c9:bd:bb:09:62:
42:7d:60:21:09:48:67:b7:ff:66:c2:a2:09:e2:b2:22:1c:c1:
c5:84:77:55:4c:01:85:7f:0a:60:9a:f7:ec:0c:d8:57:16:1b:
13:c6:23:d4:18:28:5b:46:53:f3:ff:4a:d9:f5:43:c7:d6:1d:
2e:ae:45:c9:b5:9d:d4:cd:06:55:d2:ea:54:9b:38:01:42:67:
bc:fc:14:b0:fc:5d:6e:c9:b0:43:2b:a5:00:ff:65:a5:0f:a7:
3b:a1:7a:19:9a:e2:c1:26:2a:14:56:9d:9a:2f:8a:7c:d9:fc:
0b:1c:84:53:cf:5d:13:4d:82:41:f6:06:a4:e0:06:1c:0a:47:
2f:ef:97:59:39:ad:cd:ad:03:ad:dd:4b:ec:b7:12:27:e0:bc:
c8:03:20:d6:e9:30:08:03:6a:07:b0:d8:9f:09:ca:35:41:e5:
55:ed:b4:3b:ee:f5:6a:2e:5d:82:25:c8:8d:bd:cb:ba:b5:88:
9d:aa:f2:40:89:43:83:fb:32:9f:f1:88:c8:dc:73:6d:60:60:
a4:0f:9e:09:27:aa:92:18:eb:f1:78:c4:56:74:3c:34:2b:bb:
3b:0a:c2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org