Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rBql6CnGhzwapVSa0rZIVU8Hf8A.roa
File: rBql6CnGhzwapVSa0rZIVU8Hf8A.roa (raw, json)
Hash identifier: co0t3RwTNnZQLgBM+G2+AbHx/UN2iaCkNL5sdOOCwk4=
Subject key identifier: AC:1A:A5:E8:29:C6:87:3C:1A:A5:54:9A:D2:B6:48:55:4F:07:7F:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189B0B6A75C40C3FFC314A95B6538BA9F4A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rBql6CnGhzwapVSa0rZIVU8Hf8A.roa
Signing time: Tue 01 Aug 2023 10:48:27 +0000
ROA not before: Tue 01 Aug 2023 10:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
62.76.225.0/24 maxlen: 24
195.133.79.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.14.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.121.0/24 maxlen: 24
194.87.129.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:b6:a7:5c:40:c3:ff:c3:14:a9:5b:65:38:ba:9f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 1 10:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac1aa5e829c6873c1aa5549ad2b648554f077fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5a:f6:be:10:96:e0:fc:65:30:60:ad:e3:20:
28:69:98:7a:12:a3:9b:f4:16:1e:73:ed:44:02:6a:
f2:ec:fc:76:27:54:89:01:5d:63:79:b3:c4:f4:30:
af:89:43:a4:34:23:2f:ec:ea:a7:be:80:df:f6:ea:
59:20:4a:f9:f8:b9:28:93:22:d4:37:e0:fc:65:b5:
5d:b3:a6:c7:c4:94:65:a3:a0:f3:b1:26:13:81:11:
0a:38:56:5a:f2:31:4e:2c:e9:8d:cd:f5:8e:9f:7a:
ac:4c:c0:36:b6:e5:b8:6c:6c:f4:44:9a:1f:1d:8f:
7e:eb:bd:09:f5:56:76:db:cf:76:44:e6:40:d3:3a:
20:36:f0:0c:db:81:54:67:c9:a7:5d:27:2c:be:57:
ef:34:29:71:d2:69:94:e1:81:36:0b:23:a6:49:aa:
ec:8d:4c:04:47:60:e1:3a:1d:2c:56:e8:ea:69:4e:
02:5b:60:b6:de:a9:4c:1c:82:af:9d:fd:67:02:be:
dd:be:d3:25:1a:1b:8e:28:4e:20:7a:b0:9b:87:17:
bc:a9:68:bb:01:70:c4:a0:89:99:cb:a7:da:b6:46:
47:c9:6a:78:0a:24:43:3c:d9:58:76:f5:21:ff:07:
7f:8b:bf:d3:2f:6e:00:98:20:cb:e4:93:8a:48:42:
e6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:A5:E8:29:C6:87:3C:1A:A5:54:9A:D2:B6:48:55:4F:07:7F:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rBql6CnGhzwapVSa0rZIVU8Hf8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.225.0/24
193.124.5.0/24
193.124.91.0/24
193.124.95.0/24
194.87.51.0-194.87.52.255
194.87.54.0/24
194.87.81.0/24
194.87.114.0/24
194.87.121.0/24
194.87.129.0/24
194.87.178.0/24
195.58.35.0/24
195.133.14.0/24
195.133.79.0/24
195.133.81.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:86:a9:91:6c:69:71:97:90:5a:9c:1e:d9:8e:22:e2:88:7c:
f3:13:cb:77:2d:60:10:31:8f:fb:00:6c:a3:0f:7e:c4:23:a2:
c8:bf:94:1f:67:15:44:fb:89:e4:fc:39:76:e2:86:35:c0:d9:
aa:cc:01:9c:0b:fd:40:8f:03:cf:4e:37:fc:75:d2:d7:dd:7b:
80:64:c6:5d:ad:88:aa:a3:62:26:14:96:77:e0:1b:10:bd:cf:
b4:1a:5d:a5:c6:5d:5c:9b:9b:c3:b6:da:bf:51:5b:47:3c:4b:
29:e2:19:0e:e3:37:a3:13:25:f3:00:83:03:76:25:d5:64:c0:
ba:85:40:cc:ad:cf:54:cb:bd:28:a3:37:f9:74:26:48:b8:10:
d2:c1:35:9f:84:48:08:02:f6:41:37:c2:68:89:f1:e4:6a:4b:
5b:b7:e5:75:8e:25:89:73:e9:b9:f7:79:04:a8:05:5c:38:5a:
ea:4a:0b:28:17:b2:95:95:9b:46:a2:58:bc:fe:3e:eb:88:3a:
2f:1d:97:46:0d:7d:b5:ed:03:e7:39:ad:e5:0f:aa:3d:07:aa:
76:c9:54:56:82:13:90:37:73:a8:48:e8:3c:9d:38:9c:1c:c4:
7c:2e:2f:ea:8f:f2:f5:b6:fe:4f:48:c6:7b:37:29:db:33:31:
2f:a7:df:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 06:30:58 2023 by rpki-client on console-fra.rpki-client.org