Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rR-7sr1-lQulwUhNeMxk-nJLL58.roa
File: rR-7sr1-lQulwUhNeMxk-nJLL58.roa (raw, json)
Hash identifier: 3mKRPUm4RTSDEy9FJho+kslMhk6yLlzkWegnCorSnC8=
Subject key identifier: AD:1F:BB:B2:BD:7E:95:0B:A5:C1:48:4D:78:CC:64:FA:72:4B:2F:9F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185A509DE77D135AC87EABB6747B702742E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rR-7sr1-lQulwUhNeMxk-nJLL58.roa
Signing time: Thu 12 Jan 2023 08:12:45 +0000
ROA not before: Thu 12 Jan 2023 08:12:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 193.124.3.0/24 maxlen: 24
193.124.9.0/24 maxlen: 24
194.87.1.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.38.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.56.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
194.135.23.0/24 maxlen: 24
212.192.10.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.166.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
212.192.31.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
194.87.182.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:09:de:77:d1:35:ac:87:ea:bb:67:47:b7:02:74:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 12 08:12:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad1fbbb2bd7e950ba5c1484d78cc64fa724b2f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:42:98:fd:0f:1e:7d:ae:b0:4a:ea:c5:72:e3:
f4:f1:c1:fc:29:2f:83:1a:ca:ae:71:11:21:9a:d2:
16:e5:01:b5:3e:cf:17:99:4a:9f:1b:28:22:a0:95:
c6:1e:09:01:a4:19:0c:d6:6b:7a:34:bb:a9:0e:8c:
d2:7b:e5:dd:58:24:47:f0:c6:41:89:65:a8:cf:54:
6c:1c:75:ba:d9:f5:eb:98:a2:00:e3:65:29:6d:8c:
e2:b4:5e:fe:ef:ee:00:26:d9:21:9a:57:39:61:99:
37:63:29:bf:97:71:dc:52:4b:ed:46:a4:aa:a3:e1:
92:07:b0:80:5e:4f:13:94:24:42:87:a1:65:b3:b4:
fb:5f:d9:c8:07:fd:ce:c2:5e:39:93:d0:80:16:4c:
69:ff:4c:89:76:aa:8d:57:14:1e:b7:73:8e:18:eb:
db:8a:f4:2a:58:d6:f9:71:7b:74:86:fb:e1:0f:d2:
b4:89:97:2f:79:68:37:96:fd:c2:ac:0d:2c:f1:fc:
15:39:62:af:d9:05:f6:57:93:c0:2f:65:01:b9:b7:
ff:e8:98:8e:fc:12:a2:e9:67:f3:26:90:4b:e4:dc:
cd:e5:04:d1:e5:13:94:68:64:15:f1:7f:c5:ba:aa:
4c:60:c6:8b:51:f7:fc:ff:14:e2:9e:d5:14:83:b3:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1F:BB:B2:BD:7E:95:0B:A5:C1:48:4D:78:CC:64:FA:72:4B:2F:9F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rR-7sr1-lQulwUhNeMxk-nJLL58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.3.0/24
193.124.9.0/24
193.124.44.0/24
194.87.1.0/24
194.87.38.0/24
194.87.42.0/24
194.87.73.0/24
194.87.130.0/23
194.87.166.0/24
194.87.168.0/24
194.87.172.0/24
194.87.178.0/23
194.87.182.0/24
194.87.187.0/24
194.135.18.0/24
194.135.23.0/24
195.58.35.0-195.58.36.255
195.58.50.0/24
195.58.56.0/24
195.133.0.0/24
195.133.30.0/24
195.133.35.0/24
195.133.195.0/24
212.192.10.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b9:17:eb:4c:87:34:27:fe:6c:31:0e:93:56:04:9c:73:4c:
5c:1a:e9:94:3e:3d:1f:97:55:7a:1d:bd:ef:43:3a:e7:dd:5d:
1c:09:c6:56:47:f5:0e:38:9c:94:46:2a:fe:fa:00:3f:72:53:
61:9d:ea:54:04:3f:cd:d9:7a:e1:2f:48:ff:f8:8b:b3:a2:5d:
fb:e9:f2:ef:b2:65:29:95:7b:20:24:75:e2:0b:fb:e5:da:e8:
0f:ca:23:94:ea:bd:07:ef:ec:9e:62:57:63:06:1e:75:cf:ba:
2e:69:cc:ec:1d:a1:e8:04:65:f2:7a:88:01:43:f0:92:23:c7:
55:12:6b:c4:2c:6f:e3:75:49:21:8a:fb:fd:e2:9b:48:fa:e2:
73:f6:9f:8f:c2:34:fc:7a:cd:d3:3d:29:01:14:bf:ed:5f:9a:
c5:06:1d:a7:f5:1a:21:e7:cb:b5:f9:c7:46:62:ed:c5:06:39:
b7:27:66:2b:67:2a:5d:73:d5:17:0f:cd:0f:db:4f:5e:20:93:
4a:02:28:5c:d4:31:45:91:0b:e9:9b:b3:2c:ce:b3:d9:4d:0a:
aa:7a:44:55:e9:17:f1:88:67:a7:5c:2b:9d:10:99:d5:ed:3b:
94:90:5d:fe:c4:d0:60:b7:6a:2c:8e:9a:b2:11:53:c4:40:a3:
13:70:5e:cf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:12 2023 by rpki-client on console-fra.rpki-client.org