Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k1QV4Nw_vX6WAhhwYbs2372ycSE.roa
File: k1QV4Nw_vX6WAhhwYbs2372ycSE.roa (raw, json)
Hash identifier: IcoUuaJgT7gVMI1XajoZ9MRQ+fq0nLQJuE9DxcK4Hjw=
Subject key identifier: 93:54:15:E0:DC:3F:BD:7E:96:02:18:70:61:BB:36:DF:BD:B2:71:21
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CFE44A5B83FF60D12CDA3C2B878FDAE69
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k1QV4Nw_vX6WAhhwYbs2372ycSE.roa
Signing time: Fri 12 Jan 2024 15:22:40 +0000
ROA not before: Fri 12 Jan 2024 15:22:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
192.124.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 10:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:44:a5:b8:3f:f6:0d:12:cd:a3:c2:b8:78:fd:ae:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 12 15:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=935415e0dc3fbd7e9602187061bb36dfbdb27121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:62:85:75:62:2b:19:32:37:a4:85:b3:34:
a2:bb:3b:39:05:2a:e5:82:81:18:1a:5f:2b:4a:c2:
13:0e:dc:b1:ab:74:eb:06:27:4c:49:f4:44:cd:67:
46:5f:65:c8:11:b0:ef:3e:75:ed:0c:5b:6a:b0:10:
b4:e4:e8:82:dd:40:f5:5d:b2:e1:a7:e7:74:99:a9:
f0:e9:f4:e8:26:ba:5a:03:8a:b5:df:cc:6c:4e:97:
1b:7b:66:c0:0c:d7:e3:76:6f:09:07:b0:7b:ae:5a:
13:63:74:f8:2e:c7:d8:38:e5:2a:cb:f4:20:b5:d5:
88:f9:95:89:b0:66:d2:24:02:35:6a:07:d4:79:c7:
ee:72:33:87:3a:a8:7b:34:ec:c7:4c:ed:5e:48:b6:
b8:4d:5a:6c:d0:f4:de:4f:56:ac:de:7c:e8:77:8e:
bc:ae:94:6f:b1:f2:52:fb:20:ae:27:5a:9b:40:7f:
19:49:e6:b3:ec:7a:b6:a9:27:77:ab:8a:4e:ec:19:
ed:10:63:de:f4:fb:fd:a1:85:76:9d:87:cd:f3:15:
2f:79:e3:52:05:9b:92:8c:6f:94:8a:5c:40:64:cc:
9a:91:3d:89:21:d5:73:a4:f5:d5:91:78:36:bf:ea:
52:7b:89:b5:03:ca:7b:ab:c0:7c:f4:1e:10:c1:6b:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:54:15:E0:DC:3F:BD:7E:96:02:18:70:61:BB:36:DF:BD:B2:71:21
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/k1QV4Nw_vX6WAhhwYbs2372ycSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
194.87.200.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
195.133.194.0/24
Signature Algorithm: sha256WithRSAEncryption
08:9d:f6:87:05:1e:28:5d:fd:dd:4f:46:76:32:cd:5e:31:96:
8c:e0:92:1c:96:b7:1e:e2:e0:28:12:cc:b9:e4:18:94:90:6d:
0d:6e:2a:a4:70:2e:86:1a:77:40:ee:d7:e9:3f:9d:04:10:6b:
b8:f7:00:78:c8:82:c3:19:83:fd:18:07:0f:5b:1c:36:a2:84:
16:c9:65:f4:4b:60:71:89:b8:88:6f:2f:11:cd:4a:d6:5b:8a:
e1:0b:a3:15:d3:94:37:a5:b6:59:35:4c:36:3d:25:fa:ae:84:
cf:6e:33:da:aa:f2:ad:3d:5e:ab:93:ab:26:11:b8:c3:3d:db:
f0:ad:e8:0c:a2:11:bd:b3:13:64:7b:5c:a4:90:a6:c6:c5:09:
ff:84:6e:d5:27:f4:87:fe:af:89:ad:43:ae:fa:87:8d:48:9c:
3c:9a:6d:05:93:2c:8b:76:96:d3:3f:51:44:09:50:d0:37:f2:
2c:0d:aa:5c:0d:05:59:67:ef:d3:a2:39:c0:9f:ec:41:af:0c:
be:da:c4:1e:a0:8e:cf:08:1b:3f:ab:d7:04:5a:78:1b:85:7b:
f3:30:ee:07:64:86:e8:37:09:ce:59:e1:88:1d:64:1d:c1:dc:
77:44:15:07:55:14:f3:cf:a4:37:32:bb:f3:60:59:e9:b2:25:
20:d8:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 23 14:58:07 2024 by rpki-client on console-ams.rpki-client.org