Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJvw-vUBvWLIiMICnvlEJ9DSXl0.roa
File: uJvw-vUBvWLIiMICnvlEJ9DSXl0.roa (raw, json)
Hash identifier: JiCXCidkc+D3XhJbCzKCdOng2WxvIpWanecZL2Jds6w=
Subject key identifier: B8:9B:F0:FA:F5:01:BD:62:C8:88:C2:02:9E:F9:44:27:D0:D2:5E:5D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BA971A05301079971D31548B56079BFF7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJvw-vUBvWLIiMICnvlEJ9DSXl0.roa
Signing time: Tue 07 Nov 2023 11:01:17 +0000
ROA not before: Tue 07 Nov 2023 11:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
195.58.35.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
192.124.181.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 Nov 2023 14:29:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:71:a0:53:01:07:99:71:d3:15:48:b5:60:79:bf:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 7 11:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b89bf0faf501bd62c888c2029ef94427d0d25e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:2d:de:fb:1c:9f:73:38:e0:ed:0b:01:00:
80:d6:d8:fa:4c:73:83:4a:ae:5e:51:e3:81:54:c4:
14:35:90:cd:90:7d:7a:e3:bc:d8:3f:d5:22:8a:ce:
95:98:90:0c:aa:73:41:48:b3:92:a7:48:dc:53:e4:
80:73:ad:60:9e:0d:13:3b:24:df:2a:16:3f:08:cb:
90:5f:7f:e3:8a:d0:56:17:ce:7e:8b:a9:b9:11:96:
d9:28:ab:d0:e2:d5:b7:52:ec:94:9b:96:50:fd:54:
d1:a4:6c:a6:d3:ba:22:40:65:63:c8:9e:b3:20:bc:
57:70:fd:19:8e:20:3d:e6:db:73:7c:0e:b1:76:84:
77:ed:d6:e3:56:fa:56:a7:3e:dd:1c:3d:06:7d:b8:
7b:20:aa:de:ec:13:6d:4f:4e:e1:a6:00:75:29:a5:
6b:76:d8:8d:99:93:32:e2:97:23:67:61:b7:82:8a:
94:9f:96:b5:71:7d:94:ce:0f:9b:60:0c:c9:79:99:
6e:4e:77:8a:e4:d8:9c:b7:c3:30:01:73:31:0f:c6:
34:44:e9:64:08:41:77:91:56:de:94:b9:20:40:30:
1c:77:55:f9:e5:69:d1:6d:27:45:79:16:5e:38:3b:
25:1c:02:62:69:6a:ab:dd:e3:a7:47:a2:91:bb:eb:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:F0:FA:F5:01:BD:62:C8:88:C2:02:9E:F9:44:27:D0:D2:5E:5D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uJvw-vUBvWLIiMICnvlEJ9DSXl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.181.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.151.0/24
194.87.168.0/24
194.87.179.0/24
194.87.200.0/24
195.58.35.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:12:d2:2d:4b:08:7f:d8:74:31:34:10:0a:9d:d3:f1:c4:cc:
c8:25:94:39:ce:85:8f:58:3b:b3:01:f6:51:8c:1c:34:2d:15:
bc:63:e0:c7:fa:5e:3b:21:ac:20:96:04:96:ec:68:4d:5d:df:
58:d9:1c:9b:b1:3c:ee:2b:3e:2f:8e:71:3f:3a:46:94:63:79:
99:94:44:b6:6e:f0:7a:3b:a6:3b:c1:47:e5:88:45:fd:20:48:
0a:3d:7d:aa:18:21:cf:8e:f4:37:a5:6c:33:df:c9:2e:38:7c:
c1:ac:6e:2a:c0:3e:ac:4a:7b:ea:b3:73:ad:e2:02:66:69:3b:
98:66:91:8f:73:58:77:fa:5f:d9:f3:54:67:e4:d1:fa:55:f8:
10:d1:fb:80:33:39:6b:3c:23:fd:37:42:fa:4f:53:51:7f:fc:
45:eb:b3:a4:08:ab:9f:e7:dc:dc:6f:3b:6e:a1:37:e4:f7:58:
58:7e:61:40:d2:2e:bc:ac:f6:b6:1a:17:1a:74:2b:65:c4:f5:
34:e9:15:dc:a9:c0:66:7b:23:bd:aa:4b:16:2c:dc:19:93:eb:
60:82:ac:c0:27:9d:c4:08:18:f8:ec:2c:19:b2:58:55:97:ee:
09:f6:b6:e2:02:33:b1:8c:32:e6:52:84:7d:8c:60:cd:69:10:
29:ea:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:29 2024 by rpki-client on console-fra.rpki-client.org