Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ulxdjbjdHsnB8DAp_ZNxf6q7QWA.roa
File: ulxdjbjdHsnB8DAp_ZNxf6q7QWA.roa (raw, json)
Hash identifier: FvPDgtvCds9T3s2kQ8FNgB7eVCtVQNxtczzXUHWnWw8=
Subject key identifier: BA:5C:5D:8D:B8:DD:1E:C9:C1:F0:30:29:FD:93:71:7F:AA:BB:41:60
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A2C31DBFD4AEF7EE70B974C3236A337DB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ulxdjbjdHsnB8DAp_ZNxf6q7QWA.roa
Signing time: Fri 25 Aug 2023 10:16:19 +0000
ROA not before: Fri 25 Aug 2023 10:16:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 194.87.205.0/24 maxlen: 24
193.124.227.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
194.58.60.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:31:db:fd:4a:ef:7e:e7:0b:97:4c:32:36:a3:37:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 25 10:16:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ba5c5d8db8dd1ec9c1f03029fd93717faabb4160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:70:e7:53:10:54:c6:89:3e:46:b1:e7:9b:
33:2b:11:48:3f:53:9e:4a:56:fd:23:4f:79:61:de:
65:6e:f1:45:6c:01:96:a9:ab:6a:05:46:ee:df:8b:
54:e3:70:b7:e5:23:06:79:07:11:24:94:06:5e:6f:
84:7b:cb:67:2d:50:70:ff:e8:fd:27:10:89:76:4a:
f8:4f:c2:de:d4:3f:2b:41:b2:bd:a3:a8:67:fe:09:
3a:b1:05:dc:5b:5c:a8:81:7f:20:09:89:77:c9:cb:
86:54:1e:65:98:f1:3c:6d:2e:e7:ae:9b:f2:08:ca:
58:2d:d7:58:b7:e5:df:68:dc:8e:3f:8c:27:30:d5:
f6:cb:44:a6:4a:4c:75:ab:b8:b9:66:7b:84:0c:4a:
57:6a:19:93:94:11:5a:26:7c:92:8c:3f:a1:57:67:
fc:f1:5d:d5:b6:0a:8d:14:1e:59:af:bc:93:10:b5:
2b:e1:2f:ad:99:80:bd:57:c5:69:ec:9d:ba:fd:8a:
7c:37:46:22:11:b0:45:1b:36:6d:7e:bb:90:ba:db:
04:09:4a:af:b7:cb:45:0c:d1:4b:ae:39:78:52:b5:
ef:a6:bb:1b:00:8e:85:54:33:b7:11:e6:88:7e:c3:
69:98:29:af:01:04:fe:8b:dd:c4:58:5c:6d:08:94:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5C:5D:8D:B8:DD:1E:C9:C1:F0:30:29:FD:93:71:7F:AA:BB:41:60
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ulxdjbjdHsnB8DAp_ZNxf6q7QWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
193.124.91.0/24
193.124.227.0/24
194.58.60.0/24
194.87.205.0/24
195.133.37.0/24
Signature Algorithm: sha256WithRSAEncryption
69:b1:9f:7e:b5:b3:02:3b:af:49:2e:19:c4:0a:1b:16:3b:4f:
5c:4b:74:1f:b3:d6:8a:c2:07:b9:5a:6a:c1:9c:0a:48:09:b9:
c0:a6:47:27:71:0a:bc:1d:03:59:b5:e4:96:42:fc:b2:19:7c:
6c:66:fe:17:c5:7c:d3:7c:cd:72:fc:8c:dd:a9:e4:93:8e:5d:
15:cb:b5:35:68:3f:cb:3f:52:a6:f9:ba:e5:e0:f9:05:95:5a:
db:af:7a:08:bb:67:19:eb:57:26:93:91:cb:81:18:73:77:71:
13:2a:0c:d8:c2:0a:0c:5b:d9:78:36:07:bb:ac:72:0e:bc:72:
ab:e3:d7:13:b0:dc:c1:37:2a:54:a3:1b:10:fc:20:86:ba:90:
8e:80:1c:d3:a9:dc:53:ea:93:eb:70:0f:d9:11:72:14:7c:fd:
4c:9a:ad:c4:1b:2f:87:3a:19:bc:56:c3:b2:3f:fa:3b:e9:9b:
3f:45:9a:cc:87:6b:d1:38:3d:ad:e6:b2:0f:9d:cb:72:55:83:
9e:85:0d:9e:97:a6:db:09:b8:65:db:14:c5:61:55:f6:88:5e:
d7:ee:b6:04:b6:c4:1e:ab:46:09:0b:07:4f:e0:3f:1d:3d:38:
8a:90:87:4e:75:be:19:08:b8:ad:65:45:7b:e3:54:79:26:ac:
67:b9:ac:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 13:27:30 2023 by rpki-client on console-fra.rpki-client.org