Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YS33YBHIkU1WtqATrh_oQ9YVZ6k.roa
File: YS33YBHIkU1WtqATrh_oQ9YVZ6k.roa (raw, json)
Hash identifier: WFUJwnplUL0cKdsHpfQmP/FNIGN/gqiwpkTKTH26L6M=
Subject key identifier: 61:2D:F7:60:11:C8:91:4D:56:B6:A0:13:AE:1F:E8:43:D6:15:67:A9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BBA3CA129178D91571C0D5F0BB8ECC781
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YS33YBHIkU1WtqATrh_oQ9YVZ6k.roa
Signing time: Fri 10 Nov 2023 17:16:57 +0000
ROA not before: Fri 10 Nov 2023 17:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 212.192.215.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 09:11:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:3c:a1:29:17:8d:91:57:1c:0d:5f:0b:b8:ec:c7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 10 17:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=612df76011c8914d56b6a013ae1fe843d61567a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:a6:82:cb:c4:58:dc:68:cd:0e:47:1b:84:
cb:53:f0:43:02:9b:6f:5b:a7:13:ee:89:06:3c:f1:
7d:7b:2f:0f:23:ff:fe:a8:aa:50:66:87:7c:7a:c0:
9c:d3:dd:2a:41:dd:4d:37:4b:07:e9:d4:b2:9a:a6:
54:cb:3d:3d:c7:55:76:aa:af:a6:c6:8b:d3:29:08:
0a:95:67:ba:89:2b:9e:67:91:bc:7b:1a:7f:50:9d:
5e:b3:71:4d:ad:eb:ac:11:2a:2f:a2:29:36:60:b9:
b8:c0:6a:a0:1c:52:cf:69:41:9e:0b:b6:1b:90:98:
f4:ad:4d:1f:28:6b:2f:e1:b7:c0:2e:c4:85:fa:4a:
ff:33:86:de:b2:07:b9:df:99:97:ec:51:18:1a:98:
e4:ea:2f:52:76:b3:06:cf:d2:a6:01:80:c2:e5:4e:
13:0b:44:b5:1b:e6:3f:fc:44:c6:9f:6f:3b:cb:62:
4a:78:59:3a:1c:97:dc:b7:83:e4:a1:8d:f9:ce:ce:
2a:6a:c2:cb:8c:84:9b:e5:02:fd:5e:80:01:1e:c7:
2e:a8:a7:ba:2d:c7:2f:c9:a6:2f:6d:72:3b:5a:74:
1b:d4:62:b5:3b:28:59:ef:38:fc:ba:62:36:17:50:
d1:63:20:28:8f:70:b3:6c:3b:2f:86:69:ed:7d:8a:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2D:F7:60:11:C8:91:4D:56:B6:A0:13:AE:1F:E8:43:D6:15:67:A9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YS33YBHIkU1WtqATrh_oQ9YVZ6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.54.0/24
194.87.90.0/24
212.192.215.0/24
Signature Algorithm: sha256WithRSAEncryption
47:cf:54:d4:23:db:32:5e:f4:fe:a7:b7:e8:26:52:5d:b4:09:
4f:68:0b:fe:ef:80:96:d6:c5:72:3b:e2:08:6c:f4:db:6d:ab:
06:22:c5:85:5d:64:b7:cb:b7:21:95:07:c2:04:cc:51:c1:e1:
e1:38:be:94:dc:5e:a0:cf:0f:07:50:6c:c3:c7:39:d3:cc:cb:
6f:f0:91:32:3c:01:59:b9:55:2b:40:75:3e:94:d9:a0:a1:8f:
14:f3:b6:32:4c:a2:8f:6d:b9:9f:51:01:cc:04:cf:89:dd:90:
3a:7d:0c:7d:50:c0:31:9c:70:64:47:6e:9d:21:c2:90:75:92:
24:c2:27:96:e8:34:37:7f:b2:52:2b:2d:ed:b9:e1:e0:b1:07:
20:62:a4:2b:a3:3b:cb:09:8b:36:74:fe:85:56:c0:e6:1b:b0:
a9:44:09:6a:0e:26:92:86:38:0b:9b:a6:1b:6c:64:4b:6b:89:
41:52:ba:fd:68:22:a9:42:d9:1d:68:02:9e:6b:6d:56:f6:e8:
ad:57:cf:66:24:cd:bd:4b:06:42:f6:16:f1:85:f6:6c:49:d9:
8f:8c:74:ed:62:d8:c6:19:2c:52:ac:ca:06:e0:01:f9:e8:36:
a7:4b:b8:05:be:bf:0f:38:e6:0c:00:59:95:a0:59:80:57:2d:
86:36:e1:9d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYu6PKEpF42RVxwNXwu47MeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMTEwMTcxNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTJkZjc2MDExYzg5MTRkNTZiNmEwMTNhZTFmZTg0M2Q2MTU2N2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl86mgsvEWNxozQ5HG4TLU/BDAptv
W6cT7okGPPF9ey8PI//+qKpQZod8esCc090qQd1NN0sH6dSymqZUyz09x1V2qq+m
xovTKQgKlWe6iSueZ5G8exp/UJ1es3FNreusESovoik2YLm4wGqgHFLPaUGeC7Yb
kJj0rU0fKGsv4bfALsSF+kr/M4besge535mX7FEYGpjk6i9SdrMGz9KmAYDC5U4T
C0S1G+Y//ETGn287y2JKeFk6HJfct4PkoY35zs4qasLLjISb5QL9XoABHscuqKe6
LccvyaYvbXI7WnQb1GK1OyhZ7zj8umI2F1DRYyAoj3CzbDsvhmntfYq5wQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGEt92ARyJFNVragE64f6EPWFWepMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvWVMzM1lCSElrVTFXdHFBVHJoX29ROVlWWjZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwlc2AwQA
wldaAwQA1MDXMA0GCSqGSIb3DQEBCwUAA4IBAQBHz1TUI9syXvT+p7foJlJdtAlP
aAv+74CW1sVyO+IIbPTbbasGIsWFXWS3y7chlQfCBMxRweHhOL6U3F6gzw8HUGzD
xznTzMtv8JEyPAFZuVUrQHU+lNmgoY8U87YyTKKPbbmfUQHMBM+J3ZA6fQx9UMAx
nHBkR26dIcKQdZIkwieW6DQ3f7JSKy3tueHgsQcgYqQrozvLCYs2dP6FVsDmG7Cp
RAlqDiaShjgLm6YbbGRLa4lBUrr9aCKpQtkdaAKea21W9uitV89mJM29SwZC9hbx
hfZsSdmPjHTtYtjGGSxSrMoG4AH56DanS7gFvr8POOYMAFmVoFmAVy2GNuGd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:19 2024 by rpki-client on console-fra.rpki-client.org