Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kpPhX_8GDnSZZJ1bvhP39io9fp0.roa
File: kpPhX_8GDnSZZJ1bvhP39io9fp0.roa (raw, json)
Hash identifier: 5+oOlIxvSYAumVNiDIIaSPOQ/pEDbOYnJh+MBIVpqpc=
Subject key identifier: 92:93:E1:5F:FF:06:0E:74:99:64:9D:5B:BE:13:F7:F6:2A:3D:7E:9D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019154B16E8699AA9E4D69EF223231787F2A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kpPhX_8GDnSZZJ1bvhP39io9fp0.roa
Signing time: Thu 15 Aug 2024 06:19:59 +0000
ROA not before: Thu 15 Aug 2024 06:19:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.44.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 16 Aug 2024 08:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:54:b1:6e:86:99:aa:9e:4d:69:ef:22:32:31:78:7f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 15 06:19:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9293e15fff060e7499649d5bbe13f7f62a3d7e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:ff:02:ed:c0:0a:30:1e:bf:7d:ed:16:dc:63:
de:21:b4:fc:49:1e:02:5a:06:59:85:46:ed:bf:53:
5a:c9:40:e9:c6:3d:24:2c:42:1f:e3:03:7b:32:0f:
20:94:2a:f3:2b:99:c8:a1:0c:43:9f:de:ba:70:f8:
e7:31:8c:10:23:b4:60:20:78:87:c4:e8:54:f9:44:
2f:49:fb:9c:20:60:79:28:9b:3a:a2:7e:a5:ca:c3:
88:6b:d0:ef:67:a6:9a:e1:85:6e:b0:58:db:11:cb:
50:a5:4f:51:a0:e2:d3:d7:d2:6b:ad:78:36:89:0e:
07:20:12:c3:f5:6f:fa:ff:b1:77:78:f0:d4:1a:84:
a2:ec:68:7c:97:83:96:33:71:ba:89:cf:c6:ec:e3:
28:01:ad:79:d1:a6:d7:a3:b4:e3:00:b0:eb:09:84:
30:af:a0:c3:56:fb:28:ed:a7:b0:3e:6c:b3:9f:70:
3b:f7:8c:29:81:ef:20:f8:42:ff:b5:df:88:46:d0:
f1:6c:48:f2:96:58:93:5d:bd:d1:23:17:d1:9d:41:
0c:05:53:83:37:a7:78:65:e7:b8:ab:b4:fc:60:50:
0e:f8:02:0a:3e:de:69:2d:dd:ac:65:cf:81:3a:8a:
e4:e5:9e:31:8c:eb:30:40:ef:e8:4e:41:dc:d2:6f:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:93:E1:5F:FF:06:0E:74:99:64:9D:5B:BE:13:F7:F6:2A:3D:7E:9D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kpPhX_8GDnSZZJ1bvhP39io9fp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.44.0/24
194.58.66.0/24
194.58.155.0/24
194.87.44.0/24
194.87.49.0/24
194.87.52.0/24
194.87.83.0-194.87.84.255
194.87.104.0/24
194.87.115.0/24
194.87.130.0/24
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.169.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.215.0/24
194.87.220.0/23
194.87.226.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/23
195.133.15.0/24
195.133.18.0/24
195.133.21.0/24
195.133.25.0/24
195.133.27.0/24
195.133.30.0/24
195.133.50.0/23
195.133.63.0/24
195.133.73.0/24
195.133.81.0/24
195.133.92.0/23
195.133.194.0/24
212.192.1.0/24
212.192.223.0/24
212.192.246.0/24
212.192.248.0/24
212.193.24.0/24
212.193.30.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
56:ad:56:b8:76:2c:d9:74:ab:fe:d4:43:c5:ba:55:e7:3a:26:
b6:f8:ba:36:b9:01:c0:ec:14:76:d5:aa:6e:d7:b1:cc:f2:23:
51:ae:39:3c:80:b3:09:01:39:b1:4b:33:93:3f:47:5a:06:bd:
e1:86:dc:97:e1:2d:74:e9:10:4f:c3:13:56:80:1d:30:cd:29:
de:86:e6:1d:1f:18:cf:55:05:36:87:44:32:83:8e:33:27:c8:
7c:72:55:6c:be:e3:9b:4b:3c:81:a8:c1:b8:68:05:1e:73:09:
19:23:ed:3f:3b:de:a1:27:8f:34:66:5b:5b:27:38:f1:6d:1b:
db:7b:d1:97:f0:61:1a:00:01:e8:50:81:be:32:2e:f6:9a:fd:
82:63:fa:16:99:a2:b4:89:af:ea:12:0a:cf:bc:d1:33:72:01:
cc:f1:86:76:ed:e3:dc:35:bc:1e:9e:9c:13:02:29:75:44:b7:
73:35:9d:a9:aa:c3:39:cd:fb:40:15:45:a1:ed:5d:38:5c:4b:
85:0c:4f:77:03:11:7f:de:b2:6a:a8:1b:c5:7a:fc:91:04:b5:
fd:1f:05:2c:49:5c:5d:9f:1d:4d:68:5f:a9:5b:0d:6e:43:5c:
56:f2:dc:83:8f:1b:bd:f3:39:f2:c1:aa:6f:44:e8:29:d4:f7:
bf:75:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 13:13:21 2024 by rpki-client on console-ams.rpki-client.org