Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oahL31A72d0BvYI2LpCBnrsUm9o.roa
File: oahL31A72d0BvYI2LpCBnrsUm9o.roa (raw, json)
Hash identifier: h48r3WGcl2EXFpOZTZWtQY2PJiL3e5oxV3+oPW+/Nvs=
Subject key identifier: A1:A8:4B:DF:50:3B:D9:DD:01:BD:82:36:2E:90:81:9E:BB:14:9B:DA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BD30452A10EB1E0BF8DB8B673B8F40885
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oahL31A72d0BvYI2LpCBnrsUm9o.roa
Signing time: Wed 15 Nov 2023 12:45:57 +0000
ROA not before: Wed 15 Nov 2023 12:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.250.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
194.87.33.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:04:52:a1:0e:b1:e0:bf:8d:b8:b6:73:b8:f4:08:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 15 12:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1a84bdf503bd9dd01bd82362e90819ebb149bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:0c:a9:a7:5d:5d:0c:7b:76:23:a7:95:7c:
fc:d7:e8:04:03:c7:c1:d1:3b:c9:80:7d:a1:f9:cc:
16:8e:61:02:68:a4:e3:03:53:bc:63:15:f4:b9:71:
56:d1:17:49:cf:06:2b:cb:41:4e:e4:32:8f:64:81:
c0:78:53:5c:85:2d:78:13:0f:56:18:67:52:2a:40:
63:27:16:f1:4a:cf:05:cb:0c:af:ea:da:33:66:83:
3f:f3:ec:ba:29:e3:73:2f:d9:e5:30:29:8b:3b:38:
83:6a:f3:01:2b:ec:65:a5:f9:cb:c4:b6:6f:69:e5:
15:e4:5f:1a:b4:79:41:07:91:7b:33:5a:ef:27:a9:
29:66:0b:0f:69:c0:79:5e:96:11:1a:39:1e:d3:17:
53:9e:54:cd:35:88:4d:a1:83:f4:d5:ca:bd:51:47:
80:67:92:76:2a:65:89:b0:1c:79:22:bc:e6:ef:8b:
7c:4d:7a:fe:2b:5e:3b:1f:c4:df:e0:b5:f9:be:a4:
bc:76:8d:1c:07:5b:4a:33:77:50:dc:98:e7:61:0e:
d6:fe:88:86:a7:dc:84:80:88:4a:a7:4d:1e:68:77:
b2:08:33:04:3b:06:15:41:d7:53:42:58:da:81:34:
1e:cd:d2:f1:d4:61:60:eb:f8:7a:6d:0b:e2:91:4d:
06:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:A8:4B:DF:50:3B:D9:DD:01:BD:82:36:2E:90:81:9E:BB:14:9B:DA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oahL31A72d0BvYI2LpCBnrsUm9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.33.0/24
194.87.141.0/24
194.87.170.0/24
194.87.178.0/24
194.87.250.0/24
195.58.63.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:7e:38:c7:19:3a:c1:84:b3:71:62:65:9a:cc:00:55:82:9c:
60:85:d5:7b:68:62:2e:9c:dd:52:15:77:3c:c1:46:d1:30:cc:
54:1c:4b:85:d0:1f:f4:fa:45:ad:1f:39:e7:db:aa:0e:ca:c5:
13:b4:35:51:a3:cd:dd:e1:2d:ec:6a:da:6c:2f:c9:ba:38:d8:
35:58:eb:93:ac:c2:6e:f1:dd:84:da:1b:a3:d4:a8:c4:f8:2f:
02:c2:d5:f6:9c:78:24:8c:30:ad:14:3d:56:7e:d4:1a:74:d8:
9c:2d:ca:38:c5:26:fd:af:43:56:8a:c5:a2:e8:b5:8a:d5:65:
3e:66:3b:9d:71:3d:fc:80:db:13:28:a2:7e:59:2b:29:b3:47:
23:da:8c:9d:ac:19:c2:8f:cc:07:fd:6a:d6:7a:f5:3c:dd:d6:
9c:4e:48:ae:86:62:d5:a0:d0:f0:9f:7b:ad:f2:ec:51:44:f1:
9d:17:00:08:b8:d7:d2:ca:ff:04:60:fa:4e:26:a0:01:e2:c4:
8e:47:4d:58:88:a3:7f:61:6e:f8:26:a8:01:c2:e0:7b:3d:f6:
fc:65:2d:e7:c7:65:b0:58:90:8f:20:9a:ff:4f:56:5a:8e:79:
1b:c5:10:57:c5:67:2f:47:d2:1d:84:d5:3e:bf:de:97:2d:ba:
a6:8b:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 14:04:38 2023 by rpki-client on console-fra.rpki-client.org