Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kiPv11zJSRG5FHDCtEGALMAc5RI.roa
File: kiPv11zJSRG5FHDCtEGALMAc5RI.roa (raw, json)
Hash identifier: c7yyBo83CvvGM5HqoKiw3B8j+6uKWubLVNNd2RnyBOw=
Subject key identifier: 92:23:EF:D7:5C:C9:49:11:B9:14:70:C2:B4:41:80:2C:C0:1C:E5:12
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A8472CB1951AF3A3E2CF1BA6A09B233B3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kiPv11zJSRG5FHDCtEGALMAc5RI.roa
Signing time: Mon 11 Sep 2023 13:33:50 +0000
ROA not before: Mon 11 Sep 2023 13:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
212.192.254.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:72:cb:19:51:af:3a:3e:2c:f1:ba:6a:09:b2:33:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 11 13:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9223efd75cc94911b91470c2b441802cc01ce512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:f6:a8:8a:f2:1d:2a:bb:c7:5c:e2:e5:38:
b2:eb:8e:82:2f:c4:aa:1a:5a:f8:30:ec:3b:8c:c1:
d4:b9:00:2e:8f:a1:d9:71:4d:85:a4:63:d5:c2:41:
8b:3f:24:18:4a:9a:82:1a:81:94:c1:f9:38:4d:15:
9b:7d:57:a4:f2:91:94:b1:ad:57:f8:af:a2:73:4d:
25:51:44:ac:48:59:23:c5:9d:5f:9d:ee:db:08:cf:
30:40:69:95:a3:f3:71:4f:af:a6:36:3e:df:77:dd:
0c:20:fb:3c:c7:9b:c5:ef:20:cf:82:8d:bf:be:3e:
4f:70:f5:54:e3:db:11:28:31:1c:02:cd:56:ad:a8:
6b:31:13:c4:ff:c8:3a:12:70:e0:2f:67:04:fd:e6:
20:91:5c:5b:0c:a8:3c:96:0f:9c:ba:a4:9b:97:c0:
d8:84:6e:22:17:60:0d:a7:aa:1f:08:9c:64:70:97:
cc:21:0c:4a:64:7a:37:38:95:45:8d:31:68:6d:ae:
b9:d5:ec:b8:17:47:86:46:1c:e3:79:08:6a:14:66:
6c:c3:bb:44:6a:41:3f:e5:35:50:e5:fb:fb:81:bc:
30:08:ca:aa:71:05:f4:8f:b2:ab:ca:ac:ce:07:6c:
f1:61:5a:af:d6:b4:c0:25:e0:10:1a:34:db:db:7f:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:EF:D7:5C:C9:49:11:B9:14:70:C2:B4:41:80:2C:C0:1C:E5:12
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kiPv11zJSRG5FHDCtEGALMAc5RI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
193.124.4.0/24
194.87.2.0/24
194.87.30.0/24
194.87.44.0/24
194.87.142.0/23
194.87.221.0/24
195.133.94.0/24
212.192.8.0/24
212.192.212.0/24
212.192.215.0/24
212.192.248.0/24
212.192.252.0-212.192.254.255
Signature Algorithm: sha256WithRSAEncryption
95:d4:2d:11:53:5a:2a:c3:8a:cb:fd:bb:a2:4e:68:80:a4:cc:
83:4b:e7:43:dd:83:c9:83:bf:ab:57:a5:ba:29:f5:25:64:01:
24:08:d7:e1:6f:0f:1f:bb:a2:cd:08:2f:f3:a7:54:9f:e3:64:
f6:93:2c:7e:b7:71:ff:5b:10:f3:ce:4c:97:41:0c:e6:78:44:
0f:bf:24:e8:cc:c3:e8:ea:fa:71:d7:fa:5f:47:c2:27:4f:ad:
0b:cc:79:49:a6:2c:1b:10:09:1b:f2:1a:0b:58:d7:d3:d4:90:
8b:0b:02:5f:fc:5d:8c:8c:38:77:b3:57:5a:67:b3:9a:fe:ce:
1f:c9:0d:bd:d8:98:56:d0:c0:73:3f:4f:22:59:de:da:0f:89:
3d:47:ad:7b:26:9f:55:e3:70:1c:8c:8a:ac:da:7b:42:0f:b8:
ab:04:bb:33:d3:82:bb:e3:a4:6a:1c:e9:47:78:86:0c:cb:4b:
50:35:67:70:64:e9:b7:d8:34:98:64:0b:63:92:3d:d9:39:2e:
fe:99:99:29:c4:9d:d9:cd:26:92:89:f4:c4:ba:ae:14:74:b1:
e9:96:40:1d:4e:c9:c6:f1:0c:d7:6e:28:7c:61:00:82:52:08:
e8:70:22:ba:f6:5b:a3:d0:45:d9:23:6a:92:e3:02:0f:81:4d:
29:81:1d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 14:16:59 2023 by rpki-client on console-ams.rpki-client.org