Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jKBjiTaAB-50GXFF4lnCk0A2EEM.roa
File: jKBjiTaAB-50GXFF4lnCk0A2EEM.roa (raw, json)
Hash identifier: hDvNk8YqF3UgWFLljln3hQX7fUihoAEnqflg9RKdCKc=
Subject key identifier: 8C:A0:63:89:36:80:07:EE:74:19:71:45:E2:59:C2:93:40:36:10:43
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018ABD98B965F8BE2936AD6B577F56E31761
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jKBjiTaAB-50GXFF4lnCk0A2EEM.roa
Signing time: Fri 22 Sep 2023 15:53:37 +0000
ROA not before: Fri 22 Sep 2023 15:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.53.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bd:98:b9:65:f8:be:29:36:ad:6b:57:7f:56:e3:17:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 22 15:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ca06389368007ee74197145e259c29340361043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:bb:83:04:fc:e3:28:c4:81:9e:ae:6b:1f:
fc:53:b7:6f:d5:70:98:e0:06:9d:9a:f4:89:90:5a:
15:59:14:69:63:8b:a4:90:62:8d:f5:e2:75:b5:2f:
38:7c:c7:2b:5b:75:8b:e5:e2:33:b1:91:8a:cf:a9:
9a:bd:21:c2:a1:af:b2:75:5b:b9:ee:2e:3a:20:fd:
4b:31:6d:f5:ef:f7:7f:20:0c:61:e7:d7:ae:e3:2e:
97:74:14:b6:f5:f5:4e:b4:d5:09:c4:4c:cf:4c:25:
63:c3:93:b2:a0:48:1a:f4:a5:b3:c4:d0:d8:25:18:
7c:cb:ad:52:27:a9:37:4b:03:85:9c:ad:20:67:7e:
d6:82:2f:42:14:8d:4f:0b:70:59:54:db:83:e9:55:
27:db:55:32:79:bb:d4:b7:da:85:b1:30:9e:5d:33:
b9:c3:2e:be:9a:72:26:7d:29:e4:48:da:54:6b:15:
07:ff:4b:7a:f7:81:1c:7e:34:6a:56:bc:77:96:a7:
a6:07:e5:b2:b5:71:39:d3:6e:6d:f0:c0:67:9f:68:
01:36:57:3f:79:b4:a2:97:ff:7a:78:a4:be:43:42:
e1:e7:6e:3b:7c:0f:b9:db:11:d3:6c:b3:b8:e6:55:
2a:9d:29:dd:b2:ad:b7:15:5c:a8:ac:f7:08:ac:90:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A0:63:89:36:80:07:EE:74:19:71:45:E2:59:C2:93:40:36:10:43
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jKBjiTaAB-50GXFF4lnCk0A2EEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.53.0-195.58.54.255
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
38:3c:66:5e:d7:ac:95:e8:7c:19:c9:7f:a3:64:94:b0:ca:48:
a6:78:f3:51:e2:54:5f:00:52:11:b5:92:18:41:08:28:ba:b2:
6a:e7:4d:6b:1f:e7:5d:e1:82:ad:bb:88:54:0b:62:1a:62:85:
72:7e:a6:89:fc:17:23:ed:08:6e:ca:cf:ee:74:89:92:17:c2:
66:5b:49:0c:83:9a:73:28:66:6a:b6:c3:20:63:37:03:c4:f6:
0e:36:b5:dd:ab:f4:96:ef:9b:a9:19:cc:d8:42:59:ac:4e:f9:
d6:dc:11:c5:1f:4f:fd:36:e0:cf:bc:07:77:6b:17:87:eb:81:
d5:39:0b:c0:31:34:09:d8:54:d9:37:82:d0:9e:7d:3c:48:32:
fe:27:45:5a:ca:e2:6c:f8:ea:79:ea:a5:10:48:20:e8:ba:6a:
4e:7b:b3:28:2e:62:9d:d7:22:8d:a7:d2:34:a3:e1:6d:c8:43:
d9:89:3a:98:ae:ac:41:7d:21:01:30:9c:cd:40:56:1d:76:4b:
2e:b4:74:75:81:f9:3b:24:e0:55:6f:40:02:8f:50:a7:fb:e0:
e9:02:fd:a5:f6:77:c3:7c:5b:ea:c7:45:f1:87:2b:dd:0f:5d:
4f:33:7f:3d:e9:0b:33:5a:20:27:35:f2:23:10:0e:1f:7e:35:
1b:64:e9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 15:26:13 2023 by rpki-client on console-fra.rpki-client.org