Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GTUYyxXuTX_7bLHb8ezLlDSpPFM.roa
File: GTUYyxXuTX_7bLHb8ezLlDSpPFM.roa (raw, json)
Hash identifier: LAPq8/C69Pyhd91xNthWmHZFnbpulBZiyX+fNEr3ASU=
Subject key identifier: 19:35:18:CB:15:EE:4D:7F:FB:6C:B1:DB:F1:EC:CB:94:34:A9:3C:53
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018756FCD66A0328E411B79C126F3DB47B3B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GTUYyxXuTX_7bLHb8ezLlDSpPFM.roa
Signing time: Thu 06 Apr 2023 14:33:43 +0000
ROA not before: Thu 06 Apr 2023 14:33:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 26383
IP address blocks: 212.192.15.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:fc:d6:6a:03:28:e4:11:b7:9c:12:6f:3d:b4:7b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 14:33:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=193518cb15ee4d7ffb6cb1dbf1eccb9434a93c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:18:ff:83:8f:9d:59:74:97:3d:28:24:69:06:
f5:4a:25:90:8f:0e:d2:6c:5c:18:3b:75:d4:37:84:
28:99:4f:59:03:4d:c5:d0:da:6d:2c:64:0d:b2:d3:
17:dc:b2:c0:2f:de:92:8b:d0:51:7d:d4:8c:5f:f3:
8d:75:6c:2c:ca:2a:75:3d:e2:38:bc:23:63:01:62:
93:99:b9:23:5d:85:06:8a:3a:f4:26:84:ba:45:13:
36:3c:8b:3f:a7:81:04:49:c0:13:75:c9:e3:d4:6f:
28:d1:e1:4e:ea:10:81:be:e5:39:35:c6:61:26:e8:
e7:25:52:1e:db:14:90:9d:1d:5c:ef:89:b0:84:86:
af:f8:11:5a:79:ae:39:94:d4:50:5f:c5:dc:9c:4e:
a8:26:2f:5c:ef:70:bb:5b:f9:b0:88:16:61:46:b3:
e9:78:bf:ac:89:98:fa:fa:97:f3:c2:14:c1:ac:72:
95:88:36:67:26:dc:68:b1:57:7d:4a:6e:b7:f1:8c:
44:19:7c:8c:c2:04:19:9f:94:26:c9:7d:49:5c:cb:
79:0b:c5:27:d1:d6:4d:ab:01:70:ec:a2:06:b7:3e:
c1:fa:7b:ea:f4:44:e9:e6:ed:4f:c5:10:46:d3:a5:
2f:25:60:3b:a0:06:38:8e:e6:0c:75:29:e3:62:d7:
15:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:18:CB:15:EE:4D:7F:FB:6C:B1:DB:F1:EC:CB:94:34:A9:3C:53
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GTUYyxXuTX_7bLHb8ezLlDSpPFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.12.0/24
212.192.15.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6a:bb:a8:22:9f:14:e7:09:85:af:72:db:61:de:fb:73:40:
a3:5b:ae:c8:af:18:64:06:2d:34:a7:d4:cc:4b:47:74:8a:b0:
0f:e0:a2:7a:be:dc:af:d7:c1:2a:35:db:d3:b8:5e:ae:eb:56:
3a:bb:cd:7e:4f:3c:ca:35:9f:02:46:d0:59:bc:01:ff:c1:3a:
99:ef:76:3e:8a:fd:21:83:79:f4:f5:f6:65:93:a6:d2:d0:ed:
55:76:dd:b4:66:d8:62:b7:16:3d:48:97:90:c6:55:db:f8:e7:
fe:43:f5:4e:0b:4c:57:4d:4f:7f:cb:a1:58:1e:69:f2:1b:9d:
76:77:8f:8c:08:e0:3e:99:71:2e:b1:a1:bb:be:4a:07:a7:89:
bf:71:02:27:b1:c0:a2:a1:a4:eb:e2:9f:e5:05:55:3c:e0:37:
c3:6f:ac:f3:b6:c1:3f:c7:d6:ea:ff:e1:be:2b:7d:9c:eb:64:
0b:45:3f:3e:14:b7:f8:c1:21:32:f7:b4:2f:11:c2:ad:40:b9:
3e:33:25:45:0e:22:cc:20:a1:83:ab:db:f9:e2:a5:2f:20:d8:
68:c9:2f:50:60:4e:89:d2:9b:bb:6c:00:7a:43:e4:0c:d7:1c:
28:59:9a:a0:fc:0f:ec:a1:12:49:ca:d3:c9:15:a8:c0:72:85:
1d:6d:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:59 2023 by rpki-client on console-fra.rpki-client.org