Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PY3eimwc_nY70-Llw8CLxAdPeuA.roa
File: PY3eimwc_nY70-Llw8CLxAdPeuA.roa (raw, json)
Hash identifier: AY/cx3WlSz4cglKsWYt6vg45v9UEw/CPOS6/a1eouog=
Subject key identifier: 3D:8D:DE:8A:6C:1C:FE:76:3B:D3:E2:E5:C3:C0:8B:C4:07:4F:7A:E0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018811C8255CE587ACBF6515485AF355A059
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PY3eimwc_nY70-Llw8CLxAdPeuA.roa
Signing time: Fri 12 May 2023 21:05:09 +0000
ROA not before: Fri 12 May 2023 21:05:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 212.192.31.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:11:c8:25:5c:e5:87:ac:bf:65:15:48:5a:f3:55:a0:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 12 21:05:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d8dde8a6c1cfe763bd3e2e5c3c08bc4074f7ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c1:f2:1c:fc:64:17:74:95:55:60:5d:a8:27:
5a:46:83:be:22:c3:c5:2f:0a:a2:42:23:33:9b:ef:
be:9d:bc:ef:a3:3a:8d:7f:de:d2:0a:0d:42:52:95:
12:ec:1d:77:3c:90:cc:59:92:a2:a5:41:9f:b8:6e:
fe:6f:a0:69:16:31:d3:e4:20:fc:ac:e6:54:a0:a7:
d8:af:1a:2c:52:7b:29:73:e3:95:00:a1:d1:64:53:
3d:7d:c0:85:07:ec:49:0d:3d:d2:5c:3a:0e:8a:c2:
57:e5:d4:18:16:76:f0:2c:39:b0:d3:56:22:77:ca:
78:9e:ad:87:8d:db:9c:28:b2:2d:4d:6b:63:88:1d:
4a:d3:4e:4a:e2:76:8c:ad:c4:86:2e:f0:7c:3d:44:
22:c2:c8:9d:c9:0a:92:c2:22:bb:0e:40:50:4c:3f:
93:1a:0d:b0:7e:dc:57:00:4d:f0:79:37:4f:cb:c2:
ee:c1:54:95:5f:4b:90:4d:9a:d7:08:e4:f3:d3:70:
55:a1:4a:ab:a6:4b:f9:e8:61:91:0a:27:a0:e7:af:
c9:82:10:b1:54:4a:ab:ec:4d:8e:5e:67:17:1c:b2:
be:a4:f3:48:ce:61:4f:80:8b:e6:86:72:45:1c:77:
85:9b:df:d5:cf:82:20:a2:e7:b9:d5:c1:99:bb:12:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8D:DE:8A:6C:1C:FE:76:3B:D3:E2:E5:C3:C0:8B:C4:07:4F:7A:E0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PY3eimwc_nY70-Llw8CLxAdPeuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.199.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f8:1f:4f:a1:68:62:13:dc:ba:13:35:6b:47:06:96:25:7a:
ef:6c:88:e8:8f:e4:ed:64:1b:d0:f1:7c:73:86:d5:c0:1e:b3:
c9:c3:85:5a:ae:06:26:cf:21:5b:98:ca:f3:85:d2:2c:31:c1:
c0:ae:9c:59:1b:ed:97:3b:51:e2:61:81:c2:06:a0:99:dc:82:
87:8b:07:5f:de:2a:92:a1:9a:c1:58:0f:3f:f1:2e:39:4a:7e:
56:1e:28:17:62:12:e3:4d:ed:43:93:c0:ab:55:20:eb:91:7f:
10:95:42:7c:e6:7a:22:9e:74:18:5e:f5:c5:97:48:46:52:5e:
a4:2e:fd:c9:f2:25:2c:8e:9f:53:10:fe:04:ea:fc:55:17:9b:
3b:37:26:9b:4d:63:c5:51:fa:06:a6:72:05:aa:fd:3a:ef:aa:
78:d7:d5:95:7e:40:55:ae:cc:cb:4e:30:aa:c7:10:2b:19:f4:
80:5d:73:d9:78:31:37:b8:d9:20:34:4b:62:60:79:3d:cf:2a:
cc:a0:e6:cb:e8:ed:7a:55:16:32:55:00:59:08:4a:69:3b:2e:
31:98:fe:25:cc:5e:11:87:da:9f:35:e5:06:c4:fa:5c:d6:58:
e1:e6:51:a7:e1:e5:9a:d5:62:1e:5d:fb:a7:1f:00:65:13:5c:
39:39:6e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:02 2023 by rpki-client on console-fra.rpki-client.org