Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q3iPYqslBD8qzVXbzxLjPsW0GXI.roa
File: q3iPYqslBD8qzVXbzxLjPsW0GXI.roa (raw, json)
Hash identifier: 3ZQYmdi31heWkqFPBKq1DREZgF5l56+T7mhP+dtRgTY=
Subject key identifier: AB:78:8F:62:AB:25:04:3F:2A:CD:55:DB:CF:12:E3:3E:C5:B4:19:72
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A78E5AD417DDDF1969680ACC7B3C7F85D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q3iPYqslBD8qzVXbzxLjPsW0GXI.roa
Signing time: Sat 09 Sep 2023 07:43:52 +0000
ROA not before: Sat 09 Sep 2023 07:43:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 62.76.230.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
194.87.228.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
194.87.141.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
212.192.255.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:78:e5:ad:41:7d:dd:f1:96:96:80:ac:c7:b3:c7:f8:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 9 07:43:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab788f62ab25043f2acd55dbcf12e33ec5b41972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b4:2a:8b:64:06:d9:25:3c:0d:17:00:4c:31:
56:7f:ff:bc:e8:ac:da:ad:ec:b0:66:f9:d8:dc:86:
b1:01:35:bd:07:91:12:c1:56:d7:f3:ea:df:5b:f8:
28:ca:75:8d:ca:d7:65:3d:00:2f:43:6c:6d:6a:64:
1d:7c:f3:16:5a:a7:30:f8:8c:16:6b:7f:bc:31:1f:
25:4a:b4:b0:0d:1e:dd:51:54:ff:a4:39:89:a6:8a:
ad:6c:b4:cc:c3:40:9f:b7:fe:a1:a5:14:e8:08:36:
9c:45:c8:54:7b:af:d1:2d:b8:21:d1:f3:46:9c:ec:
3c:ab:dd:8d:69:68:7a:89:54:54:56:c1:92:7c:3c:
36:04:86:05:eb:38:86:bc:8f:f8:07:cc:f3:a0:03:
47:89:b0:26:ea:00:a9:95:6e:c6:54:81:34:45:2c:
05:c5:8e:e1:62:4e:26:32:16:92:6d:74:0a:0a:53:
dc:1f:0d:e6:83:f9:20:c7:28:62:b9:05:b0:30:b5:
6d:34:44:c7:80:4d:18:c0:97:a7:8a:b6:92:56:22:
53:f6:a1:5c:9f:3a:7b:07:11:65:7c:ad:54:b3:44:
8e:51:2b:8b:8d:37:6d:6a:fa:8b:a2:17:51:59:38:
23:b6:dc:41:63:e6:fd:b6:24:4d:59:e0:b2:4d:7d:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:78:8F:62:AB:25:04:3F:2A:CD:55:DB:CF:12:E3:3E:C5:B4:19:72
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q3iPYqslBD8qzVXbzxLjPsW0GXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.230.0/24
194.58.41.0/24
194.87.140.0/23
194.87.228.0/24
194.135.30.0/24
195.133.81.0/24
195.133.194.0/24
212.192.255.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c7:7f:14:c0:db:f5:bf:61:12:75:97:c1:90:50:62:33:1c:
9e:eb:d7:2a:db:5c:9e:56:c0:7e:fa:69:07:dd:74:82:68:04:
de:af:72:b4:fe:13:07:3b:4a:53:ea:76:4b:d6:ab:e9:a2:49:
2d:fe:64:48:27:c5:5e:11:f2:b0:d5:5d:65:54:c0:ac:c8:c1:
52:5d:d0:37:5b:4b:1a:d0:59:9c:a9:c0:10:51:5f:36:57:c6:
fd:23:c4:85:c4:2c:0c:6c:65:15:8d:e8:40:1d:5d:ce:70:92:
cd:7f:ba:bc:a7:6c:54:34:56:bc:12:5d:26:2f:d7:11:d2:88:
3b:8b:98:95:02:ad:31:af:c5:25:4d:bd:43:55:05:66:83:3b:
9c:48:01:9a:dd:55:30:d0:d2:79:0c:35:4a:ed:36:da:f4:3a:
0e:78:11:68:fb:50:c3:cc:91:54:ed:66:a3:57:3a:c5:75:83:
62:1e:ae:d1:9b:ba:57:29:fa:58:c6:c4:2f:6a:37:d2:49:6e:
f6:d4:d5:64:27:54:c9:5e:ae:ba:cf:04:46:19:d6:7d:17:14:
73:f8:bb:da:0e:ea:41:e0:00:81:f6:db:34:66:9d:f5:ec:a6:
d1:6e:f9:a9:d7:cf:77:c5:29:f5:f6:1a:39:e6:17:a9:7f:bc:
89:13:2e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 15 11:07:38 2023 by rpki-client on console-ams.rpki-client.org