Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbYrAvn4UH9q6sS-jEa1-Ai2sAg.roa
File: PbYrAvn4UH9q6sS-jEa1-Ai2sAg.roa (raw, json)
Hash identifier: sJnhm2YbCpTg4zXL47nuD4Q05UrRJV9D5HbmsGx2Rug=
Subject key identifier: 3D:B6:2B:02:F9:F8:50:7F:6A:EA:C4:BE:8C:46:B5:F8:08:B6:B0:08
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A6B789CA7F2CDB12A70EC51232D94
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbYrAvn4UH9q6sS-jEa1-Ai2sAg.roa
Signing time: Tue 02 Jan 2024 12:33:46 +0000
ROA not before: Tue 02 Jan 2024 12:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.128.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6b:78:9c:a7:f2:cd:b1:2a:70:ec:51:23:2d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3db62b02f9f8507f6aeac4be8c46b5f808b6b008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:55:fc:9a:47:9a:1a:02:37:41:e8:ae:af:
1a:ba:72:ef:26:9b:18:44:a8:7e:97:be:8a:5f:7d:
af:86:6b:b8:24:e5:38:01:cd:8c:3a:63:0f:45:7a:
fb:1e:3f:4c:d6:3e:68:c7:b4:61:7b:ec:cd:88:27:
52:0f:bc:be:59:f3:13:cb:43:fd:d0:bb:f2:67:63:
49:8f:89:8f:68:0e:b5:38:d8:39:d9:75:b3:d1:2c:
78:3e:ad:20:19:18:ef:ee:8e:85:11:c0:c0:f2:5a:
53:6e:96:80:dc:43:f2:08:89:9b:e9:64:97:33:d8:
46:37:e0:80:f4:da:63:d4:63:64:ae:6e:9f:ef:6f:
72:44:c5:93:da:27:ac:2c:22:52:33:a4:e1:70:e1:
cb:01:36:de:3c:f3:48:27:9b:24:d9:99:26:b4:28:
d5:c6:46:32:6c:e9:4c:d5:09:67:97:7a:c2:f8:bb:
97:fc:1e:18:0b:60:1d:3b:6a:b2:34:bf:2c:33:f3:
ed:c8:f0:16:df:cc:20:99:7c:74:9f:b4:83:82:fc:
26:d3:e0:b7:95:fd:a1:fd:51:13:47:22:18:fe:9f:
39:43:f1:fb:dc:06:74:89:ee:99:5c:ab:b6:4d:d9:
56:63:db:5d:0b:ec:5b:28:38:4f:fd:fa:d2:97:9e:
e9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B6:2B:02:F9:F8:50:7F:6A:EA:C4:BE:8C:46:B5:F8:08:B6:B0:08
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PbYrAvn4UH9q6sS-jEa1-Ai2sAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
194.87.26.0/24
194.87.128.0/24
212.192.214.0/24
212.192.222.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
58:55:5c:08:23:66:41:20:a5:7e:01:95:2f:e3:6b:cd:3f:25:
41:7c:56:75:c3:b2:da:82:86:90:84:52:b6:71:42:b1:9d:ff:
74:f1:af:ee:eb:38:76:9f:5e:5b:5a:5e:4a:d6:22:a2:04:b3:
13:a2:1f:a1:84:53:22:56:91:af:fd:2c:7e:b6:6a:ed:9c:c1:
84:f7:2e:8e:49:88:d1:f2:53:56:fc:0e:1d:54:b2:78:bc:30:
96:86:c7:15:1b:75:35:41:4f:80:28:65:5b:fd:97:37:1f:d6:
8c:47:95:e9:9a:d8:17:3f:be:32:a1:d1:00:19:ac:10:4d:e3:
33:43:a1:3e:0c:0c:1b:93:98:a1:33:5e:8a:95:d6:16:1f:2d:
dd:52:35:19:6f:d5:6b:69:8d:cf:8a:bc:b2:1d:4f:cd:8f:26:
03:75:35:e6:b4:8f:a9:1d:33:1b:82:b7:d7:b6:c2:f2:56:91:
2d:54:44:bd:58:8b:f7:56:f5:67:7b:03:e0:14:aa:3b:69:30:
4d:11:8b:1c:ff:7d:ed:b1:ec:ad:ae:db:60:8f:45:99:83:af:
88:36:e8:66:30:80:bc:9d:e1:c2:55:89:a1:57:e4:b1:42:34:
8d:42:5a:cd:6b:bf:54:2e:98:fc:cd:27:32:a9:af:1c:d5:e1:
8d:16:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 05:30:59 2024 by rpki-client on console-ams.rpki-client.org