Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sAYKaOEF9o7PWLldJUhV8MLXIWc.roa
File: sAYKaOEF9o7PWLldJUhV8MLXIWc.roa (raw, json)
Hash identifier: fBIjWIBl8g9rQxKTgxRkrL4thYIarzXqrC+BXtAXWrk=
Subject key identifier: B0:06:0A:68:E1:05:F6:8E:CF:58:B9:5D:25:48:55:F0:C2:D7:21:67
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A6B97F234E1807E9625E45DF3F09498E2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sAYKaOEF9o7PWLldJUhV8MLXIWc.roa
Signing time: Wed 06 Sep 2023 17:43:54 +0000
ROA not before: Wed 06 Sep 2023 17:43:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.133.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
195.133.40.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 11:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6b:97:f2:34:e1:80:7e:96:25:e4:5d:f3:f0:94:98:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 6 17:43:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0060a68e105f68ecf58b95d254855f0c2d72167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d8:66:d5:e2:0e:94:2e:40:a7:26:b9:0b:3b:
57:f6:5b:7b:6f:0d:55:89:2a:5b:15:45:de:27:a6:
ca:bf:04:ed:f7:be:2c:22:15:56:99:7a:10:bc:26:
9f:d2:14:b9:30:f6:9f:57:a8:ad:77:b9:c8:db:ae:
a8:64:6c:d0:ff:a8:a6:7a:7f:d1:0e:d5:07:97:e1:
21:71:42:91:05:1e:53:a9:96:fd:c4:db:2f:88:69:
4b:6f:f9:dd:a4:6e:30:64:dd:a9:b3:07:75:25:b2:
1b:d3:11:ca:df:e9:6e:6b:d6:01:e3:60:69:b1:a9:
11:ed:5c:1b:1a:03:57:33:62:a4:08:b5:70:f1:19:
12:ae:f8:f6:4d:7b:15:e8:46:79:eb:a8:a3:32:3c:
c1:76:14:82:38:85:4f:1d:06:d1:c6:28:72:12:b9:
ba:b7:dd:05:a3:a0:17:47:78:36:62:ac:37:8b:81:
ad:ae:08:1e:fe:87:02:d0:09:8d:0d:ed:e9:ed:6d:
87:a8:dc:de:18:db:8c:2d:35:a8:9f:c5:2b:b1:b6:
83:1f:8b:3d:85:bd:b2:65:19:8c:7d:ab:49:33:dd:
05:f2:24:ae:a7:eb:00:df:48:29:8b:cd:c7:71:13:
ee:ee:52:75:66:55:bc:75:b4:36:57:90:2e:da:b1:
b7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:06:0A:68:E1:05:F6:8E:CF:58:B9:5D:25:48:55:F0:C2:D7:21:67
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/sAYKaOEF9o7PWLldJUhV8MLXIWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.24.0/22
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.133.0-194.87.135.255
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:03:3f:39:e2:f2:84:b0:8e:a0:0a:45:a7:df:54:57:56:02:
f8:b7:b9:18:91:16:f9:ee:d1:0c:26:bd:b1:1e:09:bc:e7:7a:
4f:05:8f:c5:2c:b6:ab:5a:c2:cd:0c:0b:06:18:0b:82:b3:e9:
de:bc:56:35:e7:3d:c8:45:cf:93:5c:18:b4:82:8e:84:18:1e:
74:cb:f4:9a:f4:83:45:6a:ce:54:64:8a:57:98:43:ce:03:3b:
52:f0:e8:e1:12:71:07:0a:ef:ac:b7:d1:73:47:aa:9c:58:27:
66:2b:5f:4f:da:82:7d:38:4e:96:dc:f7:b0:8e:52:c5:5b:83:
c6:2b:01:e1:6c:58:ca:21:54:f2:d9:9b:ac:bd:db:e1:74:c0:
e7:10:43:cf:35:2f:2f:4e:3d:4c:30:b6:fe:a7:99:17:e5:66:
9f:82:25:fa:a5:27:5d:91:9c:13:88:3a:ec:9f:15:9a:50:10:
0c:5c:93:1a:83:01:2c:58:08:83:ee:bf:17:40:3f:25:56:39:
83:79:6e:b7:66:f7:fb:d8:0d:39:23:0a:99:e4:20:60:ee:b8:
b1:1f:8c:e3:6b:f2:ce:95:0a:ec:77:f9:72:c9:de:20:07:78:
42:6c:7b:9d:28:f2:a0:4d:8a:87:6f:33:c1:48:7d:75:ed:de:
c7:9c:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:48 2024 by rpki-client on console-ams.rpki-client.org