Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lZQpzwETTDrWXb4l57Hf6nZ0Bgs.roa
File: lZQpzwETTDrWXb4l57Hf6nZ0Bgs.roa (raw, json)
Hash identifier: ag2epXogS+aAysyfsgm2gHVHV66mtfWhbia3G53Avvw=
Subject key identifier: 95:94:29:CF:01:13:4C:3A:D6:5D:BE:25:E7:B1:DF:EA:76:74:06:0B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66F0060BCDEDEFAB3DAD1C389CFF26
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lZQpzwETTDrWXb4l57Hf6nZ0Bgs.roa
Signing time: Sun 01 Jan 2023 22:14:55 +0000
ROA not before: Sun 01 Jan 2023 22:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 193.124.22.0/24 maxlen: 24
62.76.234.0/24 maxlen: 24
194.87.47.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
194.87.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f0:06:0b:cd:ed:ef:ab:3d:ad:1c:38:9c:ff:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=959429cf01134c3ad65dbe25e7b1dfea7674060b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:1b:31:7a:04:17:80:90:fe:d1:86:5f:e5:
51:65:57:55:52:a9:b6:66:9b:e2:49:31:7e:86:e9:
e9:aa:b9:bb:81:3d:e5:40:88:72:01:89:59:61:3d:
2f:bc:bf:ff:a6:3a:53:a9:74:5e:56:31:bb:4f:96:
4e:88:9b:cb:7f:09:80:ae:a1:80:a3:bf:8a:69:33:
e4:3b:51:f9:86:cf:82:57:ea:ed:50:3e:72:56:95:
b3:9d:ee:78:23:d1:6e:a4:4e:d3:19:21:78:c6:9d:
7b:69:f8:fa:6a:78:ef:8d:ad:08:7e:3d:b9:2a:26:
97:71:10:5c:3c:af:15:aa:46:eb:ae:a4:af:b6:e1:
fc:22:88:b0:9f:a6:9f:8a:34:0c:9d:9f:04:4e:6f:
57:9d:b0:15:7d:d5:82:5c:3c:9f:69:01:b7:25:a3:
a7:7f:a8:3d:bd:eb:c9:df:8f:58:66:13:2c:05:26:
97:59:ae:db:63:b8:3c:17:b6:a3:3a:dd:7f:eb:2c:
d2:69:94:4b:db:c6:f4:b3:58:1c:3c:1c:98:22:c4:
0a:c0:7f:48:05:e5:67:89:d2:21:ae:4d:9c:a5:77:
c0:06:12:7f:94:d5:44:26:46:81:3b:49:55:ea:8a:
ea:8a:89:07:01:db:a9:a0:09:ca:44:ee:b4:b4:6a:
e7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:94:29:CF:01:13:4C:3A:D6:5D:BE:25:E7:B1:DF:EA:76:74:06:0B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lZQpzwETTDrWXb4l57Hf6nZ0Bgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.234.0/24
185.72.8.0/24
193.124.22.0/24
194.58.34.0/24
194.87.47.0/24
194.87.189.0/24
212.192.12.0/24
212.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ea:a0:46:87:2a:64:bc:22:32:80:77:be:34:5d:1f:58:91:
d9:d5:ce:b2:5e:81:2a:69:a1:37:74:9f:82:85:1d:8d:da:03:
81:75:d1:36:9b:da:3b:8e:48:bb:f1:1b:a7:11:d5:1c:12:a3:
ef:20:4c:44:e1:07:9d:a8:0a:bb:f7:e5:3f:63:13:53:dc:80:
3b:9a:4f:57:ac:57:7f:14:26:cc:38:2a:c0:83:74:f0:6d:b6:
46:01:65:75:6b:d2:64:39:58:ce:f5:c5:7d:a1:f3:5a:dd:ef:
45:12:8c:3d:de:07:a6:a4:7f:8a:d0:a3:ca:e7:41:1d:b6:11:
9a:fe:f3:49:4f:bf:cc:d7:76:72:ee:ee:e4:87:69:76:0c:69:
b7:3a:49:76:af:06:a4:9e:9f:8b:cb:90:e2:03:7a:4b:0c:b3:
34:40:70:4d:5d:0d:92:42:e6:fe:32:bd:e2:bc:47:8d:b2:48:
32:30:c0:94:85:f6:84:c6:14:3c:74:4b:a4:27:1a:87:b3:43:
06:37:13:61:5f:f3:82:4a:eb:04:6a:9b:c7:6d:54:86:25:48:
9c:3d:01:4a:1c:9e:5a:06:4a:dd:c1:6b:6b:b6:42:ea:79:a2:
32:1b:76:15:cb:08:72:e7:1c:d4:65:57:d1:27:23:d9:6c:b2:
c3:5f:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-ams.rpki-client.org