Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vkBLXk9SQqctEBJGVgZIzuxVkR4.roa
File: vkBLXk9SQqctEBJGVgZIzuxVkR4.roa (raw, json)
Hash identifier: yn2IaLbe42WPPREEyiLN+P4yGs6oJa8dwYhKMfhWf6A=
Subject key identifier: BE:40:4B:5E:4F:52:42:A7:2D:10:12:46:56:06:48:CE:EC:55:91:1E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189B58EBEAA605C1D09AD66D1DDE7E157AF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vkBLXk9SQqctEBJGVgZIzuxVkR4.roa
Signing time: Wed 02 Aug 2023 09:22:58 +0000
ROA not before: Wed 02 Aug 2023 09:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.24.0/22 maxlen: 24
194.87.26.0/23 maxlen: 23
194.87.36.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.40.0/24 maxlen: 24
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.73.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
195.133.30.0/24 maxlen: 24
195.133.35.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
212.192.241.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.58.223.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.222.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
192.124.191.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:8e:be:aa:60:5c:1d:09:ad:66:d1:dd:e7:e1:57:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 2 09:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be404b5e4f5242a72d101246560648ceec55911e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:1c:8d:ba:f4:a0:6f:35:eb:26:d5:85:20:
8a:a0:34:31:fa:b3:6b:d8:b4:4c:e2:cd:5e:53:02:
37:31:c3:d5:73:7c:17:ee:0d:78:14:af:5f:7a:76:
57:c1:46:fc:f7:e4:57:2e:98:7b:60:c1:4c:07:e0:
e9:47:94:56:0f:a8:75:c7:64:4d:8a:5c:e8:1e:ef:
c2:a8:6e:34:8f:81:4d:57:ca:bf:28:e7:94:d2:cf:
92:44:dc:f0:40:f2:8b:21:ca:9c:d9:06:ad:95:8e:
79:39:ab:a3:e7:bb:a7:ef:4b:23:c7:49:52:ba:4f:
18:b1:dd:df:21:bf:2a:f6:d6:2c:2d:d3:0d:72:eb:
0d:1e:7e:60:e4:8d:42:84:57:44:19:3c:00:0e:28:
3b:0c:af:7f:ca:36:7d:c8:d6:7c:f1:c6:27:81:0f:
88:cd:a6:46:64:b2:c5:78:47:83:57:8d:f8:2f:8c:
e5:75:c3:7c:c7:5c:5e:57:25:25:43:85:d7:02:e2:
52:a8:aa:17:6b:39:10:1d:1e:7e:10:8e:56:cf:1b:
03:53:13:a3:7e:cd:32:e8:c1:b8:2e:72:d0:11:88:
dc:3b:81:f3:b2:8b:70:f0:fe:0c:96:79:05:6f:f7:
11:ca:66:b7:77:27:36:eb:df:5d:be:95:4a:5e:7e:
fe:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:40:4B:5E:4F:52:42:A7:2D:10:12:46:56:06:48:CE:EC:55:91:1E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vkBLXk9SQqctEBJGVgZIzuxVkR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.182.0/24
192.124.189.0/24
192.124.191.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.58.154.0/24
194.58.223.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.24.0/22
194.87.36.0/24
194.87.40.0/24
194.87.56.0/24
194.87.73.0/24
194.87.83.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.130.0/23
194.87.134.0/23
194.87.151.0/24
194.87.162.0/24
194.87.168.0/24
194.87.179.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.222.0/24
195.58.36.0/24
195.58.54.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.6.0/23
195.133.30.0/24
195.133.35.0/24
195.133.73.0/24
195.133.84.0/23
195.133.194.0/24
212.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
76:55:66:59:27:ee:59:62:78:d8:30:0e:6e:08:49:ab:78:44:
47:b7:7a:c6:46:c5:9c:47:c4:31:04:59:1e:0d:29:b0:d5:22:
10:2b:9e:f7:aa:78:40:8b:73:b1:58:6f:9d:f1:54:98:e0:46:
14:fe:cc:92:7c:eb:e6:7d:08:c5:35:03:c7:9c:40:13:3b:fb:
93:7c:29:e7:6f:3c:f5:1c:18:83:9a:ec:f2:2a:9b:61:f2:ac:
a5:e2:5c:fc:2f:78:1d:14:34:90:ef:e9:a8:a2:7f:12:b7:1c:
d5:0f:a7:f7:9a:22:b3:fb:a6:21:b3:d5:2d:72:2b:b0:9a:21:
6c:1f:a0:d9:ea:b4:ca:29:c9:06:c5:65:31:1f:67:58:71:d6:
a1:5d:cf:b0:c2:ce:f1:cd:91:46:4c:b6:fd:f7:e2:be:c3:a2:
b4:56:1c:e1:37:23:77:2d:3c:80:0b:b3:ca:a7:2f:61:fc:51:
08:81:bd:74:3a:a7:59:bd:d0:2f:7c:20:9b:d9:a2:9f:18:1c:
da:44:81:19:b9:27:d5:fa:18:1e:9c:7b:b6:82:e1:c8:9b:ce:
51:36:03:d3:ad:d7:37:b1:c3:b0:53:b3:d6:f9:2a:21:70:9f:
95:d2:4d:fe:87:5a:e0:63:37:37:b7:3b:ae:01:22:76:2f:85:
44:92:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 07:16:39 2023 by rpki-client on console-fra.rpki-client.org