Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vJKhwE8kjiUKhRc0rD9EijQx19A.roa
File: vJKhwE8kjiUKhRc0rD9EijQx19A.roa (raw, json)
Hash identifier: vbL6tQVzh/SRjhI9wpLnLl3fMR6DePN5lpW2VsJ3Eek=
Subject key identifier: BC:92:A1:C0:4F:24:8E:25:0A:85:17:34:AC:3F:44:8A:34:31:D7:D0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C481B7C3CB830C7F193B35B1175052333
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vJKhwE8kjiUKhRc0rD9EijQx19A.roa
Signing time: Fri 08 Dec 2023 06:26:49 +0000
ROA not before: Fri 08 Dec 2023 06:26:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
212.193.5.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.215.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:48:1b:7c:3c:b8:30:c7:f1:93:b3:5b:11:75:05:23:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 8 06:26:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc92a1c04f248e250a851734ac3f448a3431d7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:05:73:a9:ed:90:98:8a:30:15:aa:90:c3:c7:
8d:86:a4:9b:d5:91:c7:9e:c5:29:08:ca:14:93:00:
e1:37:a0:6a:5b:c8:c6:7b:b5:79:1d:15:af:b8:48:
a5:da:7a:62:d8:a3:92:db:d4:80:08:3c:4e:f8:5f:
20:4a:84:c8:30:db:1c:50:ca:75:2b:0d:5b:9f:7e:
20:24:14:f3:ba:5a:9a:e6:2c:67:da:08:08:9b:61:
a9:f4:b3:ca:59:46:27:6d:dc:d3:2b:88:f4:2c:7d:
a5:40:46:e7:d3:2f:e3:b7:ea:e9:53:25:00:cd:55:
33:31:da:fe:27:52:6f:8d:af:b8:67:62:6d:14:98:
3f:10:c2:e6:ee:4a:8b:5a:2f:aa:5b:70:8b:fa:48:
0c:7c:a6:7e:a0:96:9c:a0:5f:09:7d:f8:9c:46:4b:
17:1e:71:f8:8a:c6:08:67:9d:93:f2:56:fe:fb:51:
cd:e3:04:cb:8b:2e:23:86:5d:8d:84:7b:5e:81:f7:
f5:45:06:7b:28:6a:93:a2:24:77:c6:59:4d:f6:40:
ec:fc:e9:bd:b3:c8:65:2a:f9:52:7e:3b:4e:92:21:
66:d6:26:b8:c5:a0:9a:bd:e8:6a:ba:4a:ee:a4:7f:
8e:6c:c0:6c:ca:49:9e:40:bf:e7:5a:51:47:f8:d9:
b3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:92:A1:C0:4F:24:8E:25:0A:85:17:34:AC:3F:44:8A:34:31:D7:D0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vJKhwE8kjiUKhRc0rD9EijQx19A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
194.87.200.0/24
194.87.215.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
195.133.194.0/24
212.192.11.0/24
212.192.214.0/24
212.193.5.0/24
Signature Algorithm: sha256WithRSAEncryption
82:82:63:24:82:99:f8:66:61:65:4f:48:d2:02:55:59:55:a0:
e8:f0:51:d6:94:61:00:87:d1:b1:b9:9f:59:e8:af:e5:08:b7:
0c:3a:e5:af:d6:40:00:70:c1:c8:af:05:bc:74:67:c8:2f:d3:
5a:71:2e:9e:98:99:80:f3:5c:42:1f:6e:9d:09:c5:c2:6b:45:
80:67:72:eb:08:7a:50:06:d7:e9:bd:2e:2b:c3:c5:c5:56:5d:
2c:3f:3d:ea:9b:89:f2:4f:d2:26:8e:fa:f7:58:13:d5:38:8f:
f5:22:d2:3a:60:bb:b3:9d:dc:97:d7:b6:09:3b:af:c0:a7:59:
58:ea:3f:a7:aa:73:91:83:e5:ae:1f:a0:a3:f5:40:c6:c7:9e:
8f:1c:ec:51:89:b4:44:3a:91:19:37:2e:59:2f:f0:a5:f7:a0:
aa:57:2d:66:44:01:9d:21:3c:0c:a4:04:7b:f2:1e:98:28:5e:
cd:a4:55:b0:aa:ce:15:90:60:8c:15:3d:65:38:48:d9:71:43:
d5:a7:73:a3:a9:c7:a2:4e:43:6a:e2:5c:0c:41:cc:55:02:c3:
87:77:0f:d8:80:bc:70:f9:c1:12:2b:89:df:08:a2:20:4a:7d:
05:26:4c:59:d6:1b:5e:7e:0e:17:fb:0a:e9:31:de:25:59:70:
c3:9f:e9:9f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Dec 13 17:34:34 2023 by rpki-client on console-fra.rpki-client.org