Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YUX7npYs7l34I_vIzKQtv5KQ6JI.roa
File: YUX7npYs7l34I_vIzKQtv5KQ6JI.roa (raw, json)
Hash identifier: jKIYJL9qhuUi2nLz3XvzwsnReEUdt3HNhsmMnklR4x0=
Subject key identifier: 61:45:FB:9E:96:2C:EE:5D:F8:23:FB:C8:CC:A4:2D:BF:92:90:E8:92
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01876A2E78044052BEE764DDD54B1F16024D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YUX7npYs7l34I_vIzKQtv5KQ6JI.roa
Signing time: Mon 10 Apr 2023 08:00:42 +0000
ROA not before: Mon 10 Apr 2023 08:00:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.124.224.0/23 maxlen: 23
194.87.41.0/24 maxlen: 24
212.192.16.0/21 maxlen: 21
194.87.61.0/24 maxlen: 24
194.87.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:2e:78:04:40:52:be:e7:64:dd:d5:4b:1f:16:02:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 10 08:00:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6145fb9e962cee5df823fbc8cca42dbf9290e892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:9c:96:ac:76:07:68:e5:bb:58:31:7d:ef:
95:98:5d:e9:05:42:52:7e:34:c7:15:39:89:5d:d2:
9b:28:6d:e7:d5:38:d1:bb:a5:71:f3:3e:8f:8c:c3:
8b:9b:31:13:15:8d:cd:b1:5d:ce:1b:15:68:c6:ed:
c6:17:bc:01:39:8f:81:c6:c1:8e:7a:10:f0:f1:48:
04:7b:30:ca:db:0d:55:41:61:fd:c5:3f:8a:48:47:
09:20:8b:8a:34:ac:20:80:b0:14:4e:f0:cb:c3:e3:
a7:aa:fb:ae:bd:f6:1a:ed:ad:dd:75:8a:67:4f:93:
fa:f8:d8:d0:41:80:9c:c7:9b:94:6a:52:15:8e:ef:
af:d8:b8:a1:9a:ee:4e:6c:e2:cd:7b:7f:56:68:4e:
a3:07:e3:68:ff:bc:16:5e:47:5f:d0:84:44:9a:ce:
8b:27:2f:e1:80:db:da:c3:0c:13:16:51:b0:03:9b:
2b:f3:64:b2:de:c7:5f:92:04:21:83:0f:b6:47:83:
45:1b:ad:4e:16:61:2b:f7:23:e2:21:fc:c9:e4:af:
9b:9d:2f:67:53:43:ae:6c:ad:1e:fc:ac:d9:88:01:
b4:73:e1:8d:0e:2a:3e:1d:f0:d4:02:99:8b:4d:e1:
28:9d:36:1e:a0:7b:ae:70:9a:73:d3:62:0b:cd:25:
a1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:FB:9E:96:2C:EE:5D:F8:23:FB:C8:CC:A4:2D:BF:92:90:E8:92
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YUX7npYs7l34I_vIzKQtv5KQ6JI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.224.0/23
194.87.41.0/24
194.87.61.0/24
194.87.192.0/22
212.192.16.0/21
Signature Algorithm: sha256WithRSAEncryption
80:14:8b:9b:c2:2f:ef:1b:54:9b:ab:02:4d:a9:0a:97:80:1f:
4b:ee:da:fb:99:b9:61:c3:79:27:bc:e4:a5:9c:16:12:94:18:
bd:e7:56:49:fd:5d:00:a5:bf:58:2a:24:50:d2:79:25:1e:22:
0a:f9:44:6a:aa:99:bc:b5:77:fb:8b:c0:17:76:af:59:d0:1a:
83:62:38:af:b7:4d:8f:bf:e7:3f:97:fc:e5:47:86:be:78:e6:
f8:40:46:80:96:ec:59:78:9a:90:54:3f:e7:aa:82:81:7b:fd:
a9:e9:31:bf:20:1c:f3:02:8b:cb:cb:72:58:01:91:3b:2d:6d:
fc:b9:6a:ad:23:cb:9d:bb:55:3a:68:3f:62:a3:9b:e0:a8:86:
3a:5a:5c:c5:80:f9:f0:36:27:ab:48:bb:1a:33:15:f1:68:7b:
26:fd:a5:e5:18:6d:2d:01:50:65:f3:21:44:b4:d8:8c:04:3a:
5e:de:c1:6e:b2:33:01:e1:5d:70:55:d6:00:f8:ec:56:c4:95:
84:4b:5c:28:e1:af:b2:c1:6a:45:f8:88:fa:59:b3:2c:f7:8e:
4a:7f:6b:9c:4b:e6:4a:13:22:b9:e6:fa:74:f6:9e:e9:ce:8f:
3e:f7:3f:78:4b:89:0b:6a:4c:ae:77:f7:ef:2a:8c:ba:71:dd:
c9:f1:c5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 06:42:54 2023 by rpki-client on console-ams.rpki-client.org