Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oj-XrVYZgEpvXeM_EiPQNkuimsw.roa
File: oj-XrVYZgEpvXeM_EiPQNkuimsw.roa (raw, json)
Hash identifier: GluqBSxIErcLBu6nUYbweB7/SX2T6IqBv6xxzxH/V+w=
Subject key identifier: A2:3F:97:AD:56:19:80:4A:6F:5D:E3:3F:12:23:D0:36:4B:A2:9A:CC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018581276A6D6495C0AC79565A3A79560182
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oj-XrVYZgEpvXeM_EiPQNkuimsw.roa
Signing time: Thu 05 Jan 2023 08:58:42 +0000
ROA not before: Thu 05 Jan 2023 08:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 194.87.3.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
195.133.86.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.37.0/24 maxlen: 24
194.87.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
212.193.8.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:27:6a:6d:64:95:c0:ac:79:56:5a:3a:79:56:01:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 5 08:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a23f97ad5619804a6f5de33f1223d0364ba29acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:cf:ed:74:6f:11:51:4c:92:10:f1:9f:53:
bf:4e:77:e8:69:dd:de:20:a5:96:91:9c:c5:76:f4:
17:96:d6:cb:e8:b0:ea:21:60:83:94:27:6e:14:be:
19:11:95:23:d7:43:22:a3:c8:19:86:ec:0a:ca:f7:
8e:79:7d:9e:f3:e9:4e:9a:ef:02:e4:c3:b5:4e:6f:
bb:8a:ae:c2:c2:f9:09:b7:31:9f:13:c8:bc:a3:2f:
4c:99:1c:f8:27:ae:b2:27:2a:48:be:6f:c9:2c:70:
ba:3d:a9:c9:c7:08:62:15:a2:18:41:c9:fb:2f:c0:
46:a8:0b:a8:f7:53:f1:46:51:f9:51:a1:d2:dc:48:
79:8e:60:22:fd:94:f1:63:68:9d:5e:9e:3d:83:ae:
c1:31:7e:5b:e5:aa:6c:61:2a:5a:2f:98:f4:f1:66:
4d:5b:0e:d5:0b:0c:b6:8f:63:a8:da:47:91:81:90:
fb:f7:be:bf:53:b9:28:fe:cb:ec:c6:92:1a:2b:f7:
50:6b:89:bc:09:b2:a5:dc:78:56:ad:f7:de:1b:db:
b2:20:c4:4a:04:1c:ad:00:37:d7:61:db:a3:5b:96:
2f:da:20:df:f6:76:61:6d:3b:24:d3:0b:d6:5b:06:
ff:e0:31:89:b9:10:b9:1a:bf:a2:06:5f:be:d8:a2:
5e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3F:97:AD:56:19:80:4A:6F:5D:E3:3F:12:23:D0:36:4B:A2:9A:CC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/oj-XrVYZgEpvXeM_EiPQNkuimsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
193.124.16.0/24
193.124.93.0/24
193.124.202.0/24
194.58.47.0/24
194.87.3.0/24
194.87.16.0/24
194.87.22.0/24
194.87.36.0/23
194.87.83.0/24
194.87.177.0/24
195.58.54.0/24
195.133.86.0/24
195.133.194.0/24
212.192.211.0/24
212.193.8.0/24
Signature Algorithm: sha256WithRSAEncryption
02:58:91:13:00:b6:39:f5:be:fe:63:e4:64:cd:89:10:b4:92:
9a:be:e4:0b:25:9c:f5:f6:5a:7e:a8:81:89:d7:69:57:f6:01:
13:6c:f8:f1:3a:db:21:01:02:b1:ca:92:4a:75:11:2c:44:68:
d2:bf:4f:64:62:14:ef:31:ad:f4:75:9b:27:70:ea:fd:4c:28:
f8:ec:50:ff:39:5f:7f:dd:ba:85:f1:20:d1:f0:07:75:aa:a6:
a2:35:aa:a9:c3:20:bd:f7:08:dd:1c:26:cd:61:b5:f9:0e:58:
c7:f5:55:50:ee:9b:56:72:7c:34:4d:74:26:2d:7a:3d:e9:30:
42:2d:77:91:ce:20:56:79:28:a4:0d:c5:26:85:51:c3:39:4d:
c9:66:28:28:55:93:cc:5f:73:c5:54:53:da:d9:f8:19:a0:21:
ee:c5:3f:eb:db:cf:3d:c3:72:ae:df:cd:04:22:6d:0a:67:29:
dc:88:a4:69:d8:c2:52:f6:88:e2:05:6b:3b:8b:e7:22:c2:17:
9c:53:35:99:21:b9:d7:96:79:d7:66:ff:2b:94:0d:a2:fa:5c:
84:e7:8c:96:0f:3a:6e:fd:c7:09:4f:2f:4c:f0:af:84:06:80:
ed:5d:a7:13:6f:b4:62:6e:9d:cc:a2:2a:26:22:21:0b:4a:f9:
0e:5a:4c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-ams.rpki-client.org