Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jUVefD8mVbCJmwBLfRVWkzUT2sI.roa
File: jUVefD8mVbCJmwBLfRVWkzUT2sI.roa (raw, json)
Hash identifier: x9LHKJxOXhXCWxWzTVZBb9WcG/LpeJFWfORLA8UDItk=
Subject key identifier: 8D:45:5E:7C:3F:26:55:B0:89:9B:00:4B:7D:15:56:93:35:13:DA:C2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A1E1A61C843BF9E8C0A4BC9F35AE5D039
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jUVefD8mVbCJmwBLfRVWkzUT2sI.roa
Signing time: Tue 22 Aug 2023 16:36:00 +0000
ROA not before: Tue 22 Aug 2023 16:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 194.87.21.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.55.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
212.192.250.0/24 maxlen: 24
195.58.59.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1e:1a:61:c8:43:bf:9e:8c:0a:4b:c9:f3:5a:e5:d0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 22 16:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d455e7c3f2655b0899b004b7d1556933513dac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9e:19:b2:32:c8:39:b7:2b:b9:02:28:d8:f9:
d1:61:20:52:1d:b3:53:f3:52:87:2b:3f:02:c9:9a:
68:dd:8c:ca:a5:d8:a3:40:0b:cf:93:75:aa:24:07:
1d:0a:0d:83:17:e5:b1:9c:1c:bf:f3:29:4c:93:e8:
25:55:42:10:8c:14:ea:c9:29:09:59:d1:b2:98:86:
43:14:55:32:04:02:bf:20:bf:3e:3b:a0:de:14:60:
57:fb:26:ba:20:50:07:d8:3a:d6:0f:b2:b2:3c:61:
3d:41:04:46:92:ae:85:c2:b1:50:2f:26:af:fb:af:
91:22:0f:bb:6e:a0:30:bd:ce:cb:d7:69:10:c8:b6:
9b:36:59:76:3c:87:93:b4:a3:c9:65:e8:7c:df:16:
90:71:19:64:2f:f8:f0:22:72:f1:a6:4b:62:4a:90:
89:39:54:10:8e:e5:bd:c8:2f:4d:f3:9e:15:c7:bd:
d1:13:92:96:10:b7:f5:f6:bf:70:be:50:36:f8:c0:
86:27:e9:aa:8d:eb:f4:65:d0:c0:8f:10:a1:5d:40:
d4:48:a3:67:8e:ef:e1:61:30:78:8a:58:e5:91:e4:
58:29:07:68:79:36:a1:0e:d6:1c:98:be:a3:cf:df:
81:68:47:4c:d7:23:94:5b:45:69:ba:5a:b0:31:af:
9d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:5E:7C:3F:26:55:B0:89:9B:00:4B:7D:15:56:93:35:13:DA:C2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jUVefD8mVbCJmwBLfRVWkzUT2sI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.95.0/24
193.124.201.0/24
194.87.21.0/24
194.87.33.0/24
194.87.166.0/24
194.87.170.0/24
194.87.187.0/24
194.135.18.0/24
195.58.55.0/24
195.58.59.0/24
212.192.248.0/24
212.192.250.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:96:d7:a8:96:d1:48:02:67:9b:00:ce:23:bc:40:54:83:fc:
3a:89:61:d6:8d:f0:dd:01:ca:f8:a4:e8:d7:7c:d3:c6:73:b8:
33:cb:e6:2b:2d:5a:d3:79:6e:e9:7d:21:62:b4:13:e3:29:9a:
49:0e:aa:62:67:5f:15:8e:bb:98:d5:8c:0b:12:81:56:da:81:
e6:95:e9:cb:5d:6f:55:6f:1c:17:13:14:49:3f:6e:5b:85:5e:
09:02:4d:59:fa:e9:20:be:67:f5:8c:4d:e8:85:a0:03:8e:c2:
05:18:62:62:fe:41:15:84:08:09:56:ca:4b:3d:0b:62:62:6f:
03:a6:11:d6:ab:ba:be:a0:9d:b9:00:3f:8b:98:bb:80:1a:7a:
40:29:e3:98:be:8c:74:ad:78:68:79:d1:01:cc:fc:e7:80:8d:
8e:0a:db:51:98:07:0c:a3:71:34:77:bd:e5:e0:96:f6:0c:82:
08:a3:60:37:08:e3:71:9c:e7:da:a9:75:25:ce:d1:c8:7b:d7:
57:11:c5:84:bb:81:05:bc:22:58:f9:5e:a3:7d:fe:52:3e:7f:
1c:0d:de:7e:8d:73:f6:de:dd:34:f6:ff:70:66:1d:30:93:e4:
6d:57:86:c7:94:4a:0a:57:d0:8a:b2:71:b9:c6:63:63:ed:d8:
f9:db:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 12:28:53 2023 by rpki-client on console-ams.rpki-client.org