Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mMLs9Res6sHI211h7POjnMcqUnY.roa
File: mMLs9Res6sHI211h7POjnMcqUnY.roa (raw, json)
Hash identifier: WinH3pBoQBcowJStECyN7vvoSNSJmVM0WiouFAYHe2Y=
Subject key identifier: 98:C2:EC:F5:17:AC:EA:C1:C8:DB:5D:61:EC:F3:A3:9C:C7:2A:52:76
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCDA8267C93A8C9D0376662C1C6D5EB97
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mMLs9Res6sHI211h7POjnMcqUnY.roa
Signing time: Wed 03 Jan 2024 04:49:58 +0000
ROA not before: Wed 03 Jan 2024 04:49:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.135.33.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cd:a8:26:7c:93:a8:c9:d0:37:66:62:c1:c6:d5:eb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 3 04:49:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98c2ecf517aceac1c8db5d61ecf3a39cc72a5276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:50:fc:d6:35:80:31:80:d4:69:c5:c0:d1:
f3:de:a8:23:5c:b1:5b:8f:45:4c:eb:b3:02:14:89:
7f:39:6b:0e:af:6f:54:8b:3b:f0:a9:09:c6:74:03:
31:f5:9a:3b:f7:00:b8:13:24:3f:0c:f2:a0:ed:36:
64:59:47:35:db:9e:4f:0f:f8:29:32:5d:40:2d:85:
3d:d1:e7:a2:45:d3:a8:2d:03:2d:98:59:19:c7:09:
09:43:b1:6d:ba:63:11:78:a5:6c:39:c4:11:b7:b8:
91:cb:9d:74:1a:17:18:7c:76:45:47:8b:77:19:68:
36:e7:5a:9b:bb:53:c7:c6:e9:fd:da:44:17:b2:0c:
a8:89:50:b8:7e:06:98:05:6a:7f:e9:9e:86:23:45:
04:39:c3:e3:16:c2:a5:1c:95:b1:d1:9e:b1:64:50:
95:e6:0a:e7:ce:fb:e7:4a:79:fb:e6:ff:c3:81:61:
12:4d:35:31:ad:05:43:38:5e:6f:01:19:bc:22:90:
85:84:81:3c:54:75:84:09:93:ba:05:1a:61:d6:ff:
1e:ee:f9:f0:75:14:21:f0:79:c7:3c:73:a6:21:a4:
7d:66:f7:24:e8:a3:3c:94:c9:1b:9a:b9:89:51:88:
43:f5:83:e1:17:2e:0a:5b:45:6d:b2:8e:8b:02:d9:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C2:EC:F5:17:AC:EA:C1:C8:DB:5D:61:EC:F3:A3:9C:C7:2A:52:76
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mMLs9Res6sHI211h7POjnMcqUnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
194.87.26.0/24
194.87.128.0/24
194.135.33.0/24
212.192.214.0/24
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
93:89:a5:f5:22:47:e2:57:4f:be:d6:a6:4f:42:75:21:26:5e:
c1:e7:bd:b9:4b:c4:43:60:77:a9:47:52:34:9c:40:ae:2b:d2:
1f:67:b4:6b:c1:d2:d7:58:ca:2f:66:e7:8f:f1:f8:c6:0e:ac:
1c:f3:d4:c7:ee:ed:e7:9d:ee:db:e6:51:81:1d:b3:e4:bf:bf:
7e:97:6c:33:2d:ef:cb:3c:72:05:20:71:c3:b2:96:6f:64:69:
76:be:e8:1c:e8:68:1f:d2:27:81:e9:eb:98:62:5e:c8:99:94:
87:52:9b:49:f3:69:23:17:8c:70:f0:09:72:f3:bc:57:bb:ad:
e3:9c:a1:75:f3:b2:30:7d:1f:c7:41:2f:47:02:21:59:86:b1:
65:b2:a4:d1:f5:1c:d7:5c:25:6d:98:32:ce:e1:43:1b:07:6c:
06:f1:4b:be:df:39:0c:c2:dd:68:9d:48:cc:e9:0e:6d:e6:17:
92:ad:a1:cf:70:84:f2:0a:45:59:03:62:e2:08:76:f8:05:6c:
fe:a3:b8:dc:34:fd:70:07:44:b7:b2:ba:a6:aa:1f:a0:06:1c:
a7:31:f9:de:be:10:ac:23:3a:6d:4f:f6:98:4a:de:9b:ea:99:
01:3f:b9:59:67:8c:da:04:59:d8:14:41:50:b8:8a:2d:ec:3c:
14:49:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:09:56 2024 by rpki-client on console-fra.rpki-client.org