Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qvRAGtzy-S6Bo5DvhbXLwc0U9Tc.roa
File: qvRAGtzy-S6Bo5DvhbXLwc0U9Tc.roa (raw, json)
Hash identifier: zLMhqyn1D0hPkOKmBq3qMFUI7NRMHLJ8TVPBH6kiwT8=
Subject key identifier: AA:F4:40:1A:DC:F2:F9:2E:81:A3:90:EF:85:B5:CB:C1:CD:14:F5:37
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F671D399979AFD8ED91E42727BB3ED1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qvRAGtzy-S6Bo5DvhbXLwc0U9Tc.roa
Signing time: Sun 01 Jan 2023 22:15:06 +0000
ROA not before: Sun 01 Jan 2023 22:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 212.193.29.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.227.0/24 maxlen: 24
194.87.35.0/24 maxlen: 24
212.192.216.0/22 maxlen: 24
194.85.250.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
194.87.62.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:1d:39:99:79:af:d8:ed:91:e4:27:27:bb:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaf4401adcf2f92e81a390ef85b5cbc1cd14f537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:00:90:4d:fa:fe:2b:a1:86:06:4c:d3:f7:
8a:59:0b:cf:c0:4b:fd:f6:e6:83:cb:57:d8:02:39:
88:92:57:5a:52:77:84:02:fe:e3:87:68:4e:6f:fc:
40:d6:da:20:ac:91:86:a4:cc:5d:f7:70:cc:e9:0d:
ab:d6:54:39:5e:4e:a7:e3:8f:49:88:33:24:7f:e3:
7a:16:09:f1:7e:6f:3c:48:a0:9b:3e:b7:c9:2e:39:
73:8a:a0:ab:b5:e3:3e:f7:3a:14:bd:49:d8:c9:4c:
e7:c6:14:ff:14:f3:28:ba:f2:42:cf:b4:12:06:97:
ad:77:7d:05:33:99:e3:af:65:66:97:42:47:11:9b:
8d:c0:93:5a:e4:8e:b3:56:db:39:60:d8:6f:09:5b:
52:10:1a:25:9a:7f:81:0d:47:f1:b0:e2:5c:e6:96:
ae:72:6e:06:e6:5b:f2:bf:9c:40:6d:90:07:96:72:
bc:bf:42:64:d3:6d:6e:2b:86:2d:ec:e9:42:fb:fb:
e7:de:f6:cf:cf:61:07:59:81:e8:06:8f:83:ab:51:
c6:ad:de:8d:ce:7b:f7:e5:2d:dc:88:43:35:6b:11:
f0:b3:a3:a8:21:59:e8:74:7d:e9:f9:10:29:8e:73:
8b:69:e2:ca:71:78:8f:f6:bb:2d:3b:57:17:9d:9c:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F4:40:1A:DC:F2:F9:2E:81:A3:90:EF:85:B5:CB:C1:CD:14:F5:37
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qvRAGtzy-S6Bo5DvhbXLwc0U9Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.248.0/24
194.85.250.0/24
194.87.35.0/24
194.87.62.0/24
194.87.220.0/23
194.87.227.0/24
195.133.39.0/24
212.192.216.0/22
212.192.244.0/22
212.193.29.0/24
Signature Algorithm: sha256WithRSAEncryption
08:25:a5:95:be:13:27:e0:ec:04:bb:f0:cd:19:73:55:16:2a:
e2:0e:ff:49:26:5f:c9:1c:6a:47:bd:cb:19:35:f7:18:d5:c9:
90:6f:e7:28:de:a5:f6:3b:d1:b5:eb:86:32:63:cd:71:91:76:
69:44:ea:52:8a:a2:4d:87:87:2a:7b:69:23:91:b7:45:2a:05:
d2:1a:18:f1:6f:37:cd:ab:e2:20:e9:e7:01:12:cd:9d:50:8d:
6f:f0:a4:c3:5f:2b:48:84:b2:07:c9:9c:5e:85:4b:59:45:fb:
a4:2c:1d:a0:aa:7f:25:93:a2:a3:63:6c:0c:c9:6d:6c:50:46:
fa:f1:ee:6a:4c:d6:44:f5:16:8a:aa:62:c9:7d:7b:d4:67:38:
95:62:52:47:2e:22:96:39:86:04:3b:9d:74:71:f2:91:d0:04:
2d:6c:05:b2:53:16:30:c2:02:49:5e:3b:f0:8a:f3:94:bd:9c:
8b:15:7e:28:04:e5:d3:59:d2:8c:64:f0:93:29:dd:28:51:d6:
79:3b:66:95:b0:f5:90:12:2d:3a:b4:10:4f:13:a5:78:1d:53:
83:dc:21:a7:e3:23:d6:37:1d:90:1e:f6:63:ec:f8:7b:20:af:
d9:d8:4f:9f:e0:d9:e2:64:09:5d:38:ba:84:30:ad:7b:89:eb:
f2:ed:19:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:12 2023 by rpki-client on console-fra.rpki-client.org