Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tdbu0Hqqhb_ws3XsB16ndYf-x14.roa
File: tdbu0Hqqhb_ws3XsB16ndYf-x14.roa (raw, json)
Hash identifier: p0LwFUpow1El6oL/PQOmfaeaGZfDCmnp1VNuac9mWpQ=
Subject key identifier: B5:D6:EE:D0:7A:AA:85:BF:F0:B3:75:EC:07:5E:A7:75:87:FE:C7:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186A25C5AC41D9FD8732A187DACBEF21361
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tdbu0Hqqhb_ws3XsB16ndYf-x14.roa
Signing time: Thu 02 Mar 2023 12:46:46 +0000
ROA not before: Thu 02 Mar 2023 12:46:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
193.124.8.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.52.0/22 maxlen: 22
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.116.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.126.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.138.0/23 maxlen: 23
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.233.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.165.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
212.192.211.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:5c:5a:c4:1d:9f:d8:73:2a:18:7d:ac:be:f2:13:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 2 12:46:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5d6eed07aaa85bff0b375ec075ea77587fec75e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cb:20:5c:24:b1:57:34:52:f5:43:a8:16:92:
2a:41:08:20:b7:b6:34:43:c0:55:98:68:7c:44:d3:
0b:41:ee:b3:4e:5a:8f:07:c1:eb:fe:2f:b7:31:50:
c1:f0:02:3a:4d:b9:b7:98:11:53:f2:bc:11:39:8c:
7b:ca:ec:e3:2a:3b:0f:01:26:38:88:5e:3e:b0:7e:
8a:80:41:fb:76:ba:27:83:78:cf:ca:4e:72:94:31:
81:e9:a7:a5:f8:24:18:e7:0c:e2:59:49:53:1c:8f:
52:d4:6f:bb:da:cf:67:05:94:57:f8:42:19:a4:a9:
27:d9:f9:e3:cf:62:0b:d1:ff:b2:20:81:ce:d6:83:
10:5f:e7:97:b7:27:13:c2:18:ba:e0:6b:48:04:a8:
76:97:43:bf:cd:85:23:8d:c1:3e:9d:46:81:aa:6c:
51:e0:ce:d4:c1:e7:1d:9f:f1:c4:a8:e6:b8:70:10:
14:ae:59:a2:bd:a7:77:0a:71:eb:50:d6:e6:08:e5:
67:1b:74:a3:d0:06:86:d6:56:65:92:a3:ca:c3:2b:
a9:2d:90:bf:73:8f:25:88:23:f9:f8:b2:ed:25:05:
fc:01:b7:bf:76:98:69:33:08:a6:07:e5:06:b8:4d:
31:f3:b5:5b:fa:a1:43:4a:f8:45:f7:30:14:30:a9:
df:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:EE:D0:7A:AA:85:BF:F0:B3:75:EC:07:5E:A7:75:87:FE:C7:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tdbu0Hqqhb_ws3XsB16ndYf-x14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
193.124.8.0/24
193.124.133.0/24
193.124.203.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.87.22.0/24
194.87.27.0/24
194.87.82.0/24
194.87.114.0-194.87.116.255
194.87.118.0/24
194.87.126.0/24
194.87.136.0/24
194.87.138.0/23
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
194.87.233.0/24
195.58.50.0/24
195.58.52.0-195.58.63.255
195.133.55.0/24
195.133.193.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.192.211.0/24
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
47:98:61:ea:97:dd:99:9c:88:e6:62:54:ce:6a:76:5e:cc:e3:
aa:e8:0d:69:1c:a0:15:ed:7f:28:78:3c:66:7b:6f:7c:bb:6b:
22:5e:fe:ed:29:d3:08:de:7f:db:d7:52:94:c0:55:be:0c:4f:
8a:f1:44:ab:5f:32:67:6d:1b:ce:f7:9f:10:a3:7c:a5:6b:7d:
57:39:5e:7d:69:67:25:e4:e1:2f:aa:53:b1:31:c2:34:45:3a:
be:92:30:3a:4d:13:15:3c:f9:37:07:39:90:67:ef:b8:9e:5e:
0b:4c:76:c0:69:84:36:7b:88:dd:0c:5b:88:83:7f:7a:18:0f:
e0:85:ce:ae:ce:d2:d1:ec:9e:8b:dc:4e:4b:72:a9:03:e8:bb:
91:d3:09:6f:f5:4a:d4:12:9e:09:2b:4f:25:5f:73:c8:3c:81:
a4:93:3c:73:cf:5c:25:77:93:ee:38:14:c1:70:0a:d2:79:a2:
65:05:76:cf:2b:d2:d8:fc:70:52:6e:ff:df:c6:7e:9b:46:6b:
0e:37:dc:94:cc:60:1d:bc:98:d1:f3:f7:17:a7:5b:f4:73:6d:
dc:4d:04:6d:d9:9c:1f:17:73:cf:10:f8:64:d3:5d:3c:a9:fc:
d9:0c:33:bf:54:3f:f3:0a:a5:3c:e5:fd:38:75:da:ba:85:1b:
d0:0c:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:13 2023 by rpki-client on console-fra.rpki-client.org