Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uj-sYUu3_lL1meS7RAaBZXUOiwc.roa
File: uj-sYUu3_lL1meS7RAaBZXUOiwc.roa (raw, json)
Hash identifier: JqIJxaoIBCBonNHCWdA/63/ZfgGIzqsje3p1FqiDuOg=
Subject key identifier: BA:3F:AC:61:4B:B7:FE:52:F5:99:E4:BB:44:06:81:65:75:0E:8B:07
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C3DA6900B1CF17AC1CE68163F10E43FB2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uj-sYUu3_lL1meS7RAaBZXUOiwc.roa
Signing time: Wed 06 Dec 2023 05:42:55 +0000
ROA not before: Wed 06 Dec 2023 05:42:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
212.192.11.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:a6:90:0b:1c:f1:7a:c1:ce:68:16:3f:10:e4:3f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 6 05:42:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba3fac614bb7fe52f599e4bb44068165750e8b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:e8:1f:58:9c:24:f7:f5:5a:ad:87:11:d8:
3b:12:9c:b4:ff:78:52:5a:a2:85:52:d4:2b:f8:98:
e6:45:35:74:e5:2a:98:7f:9d:58:01:8a:48:54:93:
0d:0b:2b:ef:5d:0a:fe:03:61:d1:64:49:94:c1:68:
c4:86:58:cd:19:d9:88:b1:4e:bf:7e:26:69:19:0d:
3a:6c:ff:ec:ce:db:73:fa:45:fe:1a:55:46:6f:2b:
92:86:f9:78:64:3c:bb:bc:81:ed:b3:ad:c5:a3:2c:
7d:d4:5e:92:61:7f:57:60:bd:dc:43:66:4d:6c:44:
44:08:40:32:4d:fc:3d:f0:02:b7:86:bb:62:43:3f:
6d:74:10:b1:a0:50:d2:76:b3:7f:1f:71:d9:10:38:
c1:d1:ee:af:a3:0c:50:d4:99:53:41:95:3d:ee:9d:
64:c0:51:e0:eb:a8:36:2e:9a:a6:e1:20:73:5e:9f:
ea:b0:da:83:06:68:c4:b0:f1:e9:9c:e0:31:5f:13:
66:c3:e0:76:17:3b:49:99:6b:71:9a:b8:a9:91:da:
26:c9:72:2d:db:f9:fd:44:62:0b:16:0b:99:4a:39:
9d:cd:dd:e8:0d:bd:c8:a9:ff:6a:cb:83:ab:c0:86:
0d:f1:9f:bf:e7:a2:60:c8:a7:37:20:0c:0d:28:0b:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3F:AC:61:4B:B7:FE:52:F5:99:E4:BB:44:06:81:65:75:0E:8B:07
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uj-sYUu3_lL1meS7RAaBZXUOiwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
194.87.200.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.11.0/24
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
15:f1:0f:bd:88:aa:77:3e:e5:2c:b6:cb:49:6e:b3:71:0b:d5:
9a:a7:43:2a:ee:bd:36:86:48:61:8f:c2:20:93:77:14:bf:d3:
c5:fc:d4:e7:f3:b5:d9:f1:81:fa:cc:22:c0:15:f2:6b:e7:5e:
f7:7d:49:c4:07:ce:c0:d0:4e:c4:8a:f1:7b:12:73:49:99:de:
92:c0:b0:6b:5e:d5:1d:de:1a:f2:2b:88:3a:57:39:43:55:5f:
a0:ae:d2:3f:3d:30:f3:8a:ca:b1:5b:f9:37:64:69:29:d9:20:
52:05:db:20:7e:4c:12:4b:df:f6:b8:53:e5:bb:ab:32:ec:7b:
8b:01:ad:aa:8a:e4:f9:43:a0:5e:e5:45:98:bc:ec:e0:33:2e:
dc:80:35:6d:f0:2f:07:79:87:89:65:e6:90:f8:05:50:d3:a1:
23:3f:64:bd:ab:c2:43:f8:8b:07:cd:42:6f:bc:1b:ef:73:a0:
e0:3e:96:d2:82:07:0a:a6:6c:5b:ed:fb:49:3d:ef:96:18:a4:
b2:63:82:1f:b4:e4:e5:99:a5:b0:b6:56:73:e8:54:48:df:0f:
18:8b:f3:1a:a5:ba:9b:b5:9e:79:44:08:ce:3c:7f:51:18:a5:
0e:13:6c:9e:40:97:0a:9f:0f:64:f5:5f:1d:49:53:70:bc:5d:
b9:2c:8d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 10:05:00 2023 by rpki-client on console-ams.rpki-client.org