Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jKO_gwkLLnCzNPrNtQM2DqTPECc.roa
File: jKO_gwkLLnCzNPrNtQM2DqTPECc.roa (raw, json)
Hash identifier: zWEFiZph5XAiCOvWD/aNGXed2g3Kx2zCYLSXZSBE82M=
Subject key identifier: 8C:A3:BF:83:09:0B:2E:70:B3:34:FA:CD:B5:03:36:0E:A4:CF:10:27
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018658805F8B95CE5EA1397AA57ABF2BC090
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jKO_gwkLLnCzNPrNtQM2DqTPECc.roa
Signing time: Thu 16 Feb 2023 04:34:13 +0000
ROA not before: Thu 16 Feb 2023 04:34:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 194.87.207.0/24 maxlen: 24
193.124.18.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
193.124.41.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
212.192.7.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
212.192.30.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:58:80:5f:8b:95:ce:5e:a1:39:7a:a5:7a:bf:2b:c0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 16 04:34:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ca3bf83090b2e70b334facdb503360ea4cf1027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bd:ee:f6:81:43:9d:5e:d4:61:73:18:83:d7:
1b:51:55:11:e8:61:a5:ab:fb:01:96:0f:00:b4:8e:
04:8f:ef:ff:8f:9c:d5:23:ad:93:21:58:59:f6:db:
7d:57:61:bd:4b:6d:a4:cf:5e:00:f0:06:9c:15:d6:
4a:d4:ba:aa:f9:1e:d1:2c:d0:42:85:98:ff:a9:34:
7f:4b:0a:64:e0:00:ed:86:ae:dc:20:ed:ce:43:fd:
29:52:18:48:03:b8:88:de:d6:b8:bc:62:6c:9d:34:
3b:18:fa:8a:34:96:ca:a1:77:da:a2:71:97:3b:e8:
88:17:ef:52:93:02:84:61:02:4c:56:57:26:16:ed:
a8:18:57:2e:d8:53:5e:78:c2:e5:77:d3:89:b3:87:
74:2b:61:58:5e:d5:25:3c:40:0a:de:c6:2e:f0:42:
9a:cf:ae:76:ea:83:ce:65:d8:8c:68:9e:e8:d3:cb:
23:4d:c7:30:09:6b:5a:4b:80:a3:1b:2e:2b:14:c5:
97:46:89:5a:79:15:87:55:f8:8b:80:b2:bc:a4:76:
8d:93:f7:53:4d:2e:c5:eb:ec:ab:f5:5e:47:9f:f4:
cd:a1:e7:b6:14:b7:4e:7c:e8:bf:7e:e2:a3:ee:6e:
03:b3:ea:a1:d3:6f:e0:c4:b6:5e:17:31:4b:9a:ec:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:BF:83:09:0B:2E:70:B3:34:FA:CD:B5:03:36:0E:A4:CF:10:27
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jKO_gwkLLnCzNPrNtQM2DqTPECc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.18.0/24
193.124.41.0/24
193.124.47.0/24
193.124.205.0/24
194.58.43.0/24
194.58.46.0/24
194.58.155.0/24
194.87.30.0/24
194.87.64.0/24
194.87.108.0/24
194.87.161.0/24
194.87.163.0/24
194.87.207.0/24
195.133.12.0/24
195.133.94.0/24
212.192.7.0/24
212.192.30.0/24
Signature Algorithm: sha256WithRSAEncryption
66:4c:41:ef:e1:cb:1f:a7:de:57:78:62:12:43:87:b7:65:e7:
26:3e:3f:c9:6d:8c:58:90:5b:b1:21:a5:c1:02:03:40:de:c4:
18:56:92:f4:f1:b8:4a:db:b7:69:ad:4c:6c:ce:5b:96:b0:92:
b7:ee:d1:2a:fd:1a:e3:46:b2:03:7f:60:52:91:36:ac:c4:76:
77:e1:5a:84:94:d9:86:52:78:a3:54:6e:e3:5c:e5:54:8b:85:
59:10:2c:d0:c2:7f:a5:39:dd:9c:3e:82:3c:d9:60:2b:9d:14:
ea:33:b1:8f:37:fa:03:8c:22:d6:b4:b0:d1:b1:76:67:f8:2c:
c1:df:e2:de:07:8a:e1:22:c3:a9:f8:bf:a9:bf:dc:30:5f:d5:
08:ab:09:c8:93:aa:6f:3f:20:f5:5d:9e:07:91:27:1d:43:44:
71:94:ff:b1:b1:af:f1:90:1a:fa:13:d7:f0:a0:22:c1:00:16:
e0:d4:5a:8a:56:c5:57:2c:d9:09:b9:92:9a:86:f6:8b:56:eb:
68:a4:42:82:76:d4:75:ef:29:f6:f0:fd:85:ea:7b:88:6a:f1:
bd:94:8d:3e:2a:64:a0:1f:b1:1b:e1:9a:0e:a6:cd:05:00:36:
0c:33:55:17:96:34:47:d7:cb:cb:b5:57:e4:d0:d1:fa:33:4f:
c5:96:0f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org