Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/naIO7d303r-KRn0MMwe9mZUIh9Y.roa
File: naIO7d303r-KRn0MMwe9mZUIh9Y.roa (raw, json)
Hash identifier: sllfMkV7GrhNNuCzr1xcBVnE5R/hAapUQyIWYXloALQ=
Subject key identifier: 9D:A2:0E:ED:DD:F4:DE:BF:8A:46:7D:0C:33:07:BD:99:95:08:87:D6
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018C006E0ECF41011CD4DB09CD5A1E4E51EB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/naIO7d303r-KRn0MMwe9mZUIh9Y.roa
Signing time: Fri 24 Nov 2023 08:24:21 +0000
ROA not before: Fri 24 Nov 2023 08:24:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3301
IP address blocks: 193.181.74.0/24 maxlen: 24
193.181.72.0/24 maxlen: 24
193.181.73.0/24 maxlen: 24
194.14.155.0/24 maxlen: 24
194.68.127.0/24 maxlen: 24
194.14.156.0/24 maxlen: 24
194.14.154.0/24 maxlen: 24
194.103.240.0/21 maxlen: 21
194.103.240.0/20 maxlen: 20
194.103.252.0/22 maxlen: 22
194.103.249.0/24 maxlen: 24
194.103.250.0/23 maxlen: 23
192.165.229.0/24 maxlen: 24
193.182.190.0/24 maxlen: 24
194.68.72.0/22 maxlen: 22
194.68.76.0/23 maxlen: 23
194.68.79.0/24 maxlen: 24
194.132.95.0/24 maxlen: 24
192.36.96.0/24 maxlen: 24
194.14.245.0/24 maxlen: 24
193.180.7.0/24 maxlen: 24
192.121.40.0/24 maxlen: 24
192.121.50.0/23 maxlen: 23
192.121.52.0/24 maxlen: 24
192.176.124.0/24 maxlen: 24
194.132.188.0/23 maxlen: 23
194.132.190.0/23 maxlen: 23
193.183.230.0/23 maxlen: 23
193.183.228.0/23 maxlen: 23
192.165.95.0/24 maxlen: 24
193.183.236.0/23 maxlen: 23
192.165.12.0/24 maxlen: 24
192.165.31.0/24 maxlen: 24
192.121.115.0/24 maxlen: 24
192.165.173.0/24 maxlen: 24
192.121.229.0/24 maxlen: 24
192.165.180.0/24 maxlen: 24
193.182.152.0/23 maxlen: 23
193.182.152.0/24 maxlen: 24
193.182.153.0/24 maxlen: 24
193.180.176.0/24 maxlen: 24
193.180.175.0/24 maxlen: 24
193.182.107.0/24 maxlen: 24
193.182.126.0/24 maxlen: 24
193.234.185.0/24 maxlen: 24
193.234.184.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:6e:0e:cf:41:01:1c:d4:db:09:cd:5a:1e:4e:51:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 24 08:24:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9da20eedddf4debf8a467d0c3307bd99950887d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:6a:ce:c7:8b:f9:ca:92:80:9e:c8:c0:49:
1b:d4:d9:8c:bf:80:de:d4:35:91:68:d3:be:9b:43:
0f:7c:4b:7f:2c:99:c8:f0:4f:2b:cf:0b:52:88:a6:
50:93:33:4e:24:3f:f3:f1:c1:ec:77:0a:23:e4:61:
e4:01:8b:08:4d:8f:03:1e:d1:7f:92:39:6c:95:18:
83:dd:17:fc:b6:d3:1e:14:1e:7d:88:8e:27:ea:ad:
ef:da:29:f8:8f:6e:e4:11:dd:a3:ab:68:6f:c0:93:
a9:a0:fe:2b:84:bf:34:8a:22:ac:4f:ad:e1:72:d0:
44:16:35:94:fd:51:73:01:1e:35:5f:6c:50:5d:46:
8e:6f:0d:e3:cd:02:e9:e8:46:be:41:bf:3b:0e:51:
63:15:8c:a0:69:18:40:24:49:79:92:0d:33:1e:16:
8f:00:2f:39:a1:16:5a:99:23:50:d3:10:c0:00:98:
f5:54:86:73:47:58:2d:69:6c:07:37:78:60:e0:ed:
8c:76:96:46:5f:3f:e9:03:c7:e0:22:12:d7:79:d3:
15:9d:f5:6a:67:a2:2c:bb:3a:9d:f6:af:7b:23:b1:
0a:83:02:56:27:80:74:c2:a7:ea:8b:28:9c:cc:90:
21:96:89:66:0f:0a:85:30:40:68:28:10:cf:d6:92:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A2:0E:ED:DD:F4:DE:BF:8A:46:7D:0C:33:07:BD:99:95:08:87:D6
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/naIO7d303r-KRn0MMwe9mZUIh9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.96.0/24
192.121.40.0/24
192.121.50.0-192.121.52.255
192.121.115.0/24
192.121.229.0/24
192.165.12.0/24
192.165.31.0/24
192.165.95.0/24
192.165.173.0/24
192.165.180.0/24
192.165.229.0/24
192.176.124.0/24
193.180.7.0/24
193.180.175.0-193.180.176.255
193.181.72.0-193.181.74.255
193.182.107.0/24
193.182.126.0/24
193.182.152.0/23
193.182.190.0/24
193.183.228.0/22
193.183.236.0/23
193.234.184.0/23
194.14.154.0-194.14.156.255
194.14.245.0/24
194.68.72.0-194.68.77.255
194.68.79.0/24
194.68.127.0/24
194.103.240.0/20
194.132.95.0/24
194.132.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:38:4a:9e:29:f8:d0:26:6e:b1:1c:12:55:ac:87:ae:f6:b3:
2a:a8:1d:02:c6:28:23:1f:61:37:d7:49:10:f9:ea:04:16:86:
ab:34:84:19:d7:e0:06:04:f4:f6:7e:22:61:39:34:5a:e0:de:
d0:20:0e:7d:a6:ea:e9:8d:3f:7f:ec:ee:26:49:2a:fe:80:2e:
76:6a:20:2f:d0:af:cb:aa:65:ad:1d:80:cc:d9:a6:2d:e4:99:
34:33:83:85:12:97:c0:87:e7:74:ac:ae:58:0d:5c:78:6d:42:
af:48:76:a8:5a:f4:d6:fc:af:78:d2:11:e8:da:3c:fa:db:47:
ac:ff:54:f8:76:32:a7:e3:d9:23:bc:cd:00:dc:1c:cb:80:fd:
8a:8e:ad:5d:e2:5d:57:90:e8:68:38:2e:c6:c6:f8:e7:79:0d:
0f:cd:5e:cf:2a:11:af:ee:a5:ef:29:ce:e6:15:61:f5:75:ba:
3e:af:31:96:f9:82:f6:98:9b:fe:e1:43:08:13:53:e6:4c:2c:
2e:53:01:87:0d:74:64:84:13:e0:f2:6e:50:27:36:9e:3c:df:
7e:da:97:94:2c:e1:4d:ae:56:ec:f8:96:9b:ff:86:18:bc:a8:
66:e9:f5:2e:e9:00:0f:e4:1d:0b:2a:34:67:2d:c4:24:a8:18:
1c:f6:38:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 14:03:43 2023 by rpki-client on console-fra.rpki-client.org