Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YnysLwatDPxbFzA0DpNfIebUFvc.roa
File: YnysLwatDPxbFzA0DpNfIebUFvc.roa (raw, json)
Hash identifier: Ngh3GTb9KO8Y8qdzCLOV8PATgBwRCN2XMJ2wdfNjyKU=
Subject key identifier: 62:7C:AC:2F:06:AD:0C:FC:5B:17:30:34:0E:93:5F:21:E6:D4:16:F7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BB90F6ADE01AEE5F2096DA0355ED56AA7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YnysLwatDPxbFzA0DpNfIebUFvc.roa
Signing time: Fri 10 Nov 2023 11:47:57 +0000
ROA not before: Fri 10 Nov 2023 11:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210107
IP address blocks: 194.87.81.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:0f:6a:de:01:ae:e5:f2:09:6d:a0:35:5e:d5:6a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 10 11:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=627cac2f06ad0cfc5b1730340e935f21e6d416f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:bf:73:bd:60:5c:6d:38:49:50:c4:53:f3:
e1:98:34:a7:c0:ff:3b:f8:7e:4c:a8:b7:40:0f:e9:
65:a2:12:25:aa:f9:8a:03:07:74:d1:b0:bc:88:53:
83:ed:24:11:da:8b:f9:3c:59:8d:9c:d7:28:bc:3f:
77:aa:1b:26:10:7c:2c:86:df:14:8b:21:d0:17:6a:
b6:61:6d:49:3e:9a:94:86:26:aa:84:b0:e4:8d:58:
ed:7f:82:fd:33:3c:05:81:7e:a0:c9:cb:1a:17:23:
97:ea:af:d1:63:32:65:b8:08:03:54:96:7a:42:fc:
43:34:68:68:f6:75:d0:96:a5:14:2b:70:d5:33:8c:
52:f9:6a:17:48:48:32:00:fd:98:56:63:15:86:e5:
4f:fa:6d:89:bd:b7:01:d8:65:ae:e1:b1:5b:71:f6:
0d:a0:3c:ef:88:7d:2a:72:af:6d:28:e0:fa:ab:d4:
fe:2f:95:ce:00:37:89:ca:92:cb:04:c8:51:b4:fc:
50:76:4b:dc:ea:c8:8d:b2:e5:e2:70:a6:7d:6c:f3:
27:27:fe:3c:02:32:7e:c9:13:ab:e0:9a:77:16:e6:
f7:c9:42:40:95:a0:10:c6:9e:91:2d:52:4d:db:44:
85:30:49:e1:c0:7d:d6:5e:d6:9c:fb:cf:c4:08:19:
5a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:7C:AC:2F:06:AD:0C:FC:5B:17:30:34:0E:93:5F:21:E6:D4:16:F7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YnysLwatDPxbFzA0DpNfIebUFvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.81.0/24
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
67:11:96:40:17:11:d1:44:f3:49:0d:30:9e:12:67:10:9f:66:
24:d2:86:14:53:78:a1:ce:0e:88:de:4c:ba:2e:56:92:db:86:
f8:98:34:f2:c4:28:86:5c:37:29:4b:6c:c1:fa:22:0c:6b:50:
b5:37:b3:0c:73:a2:df:5d:c5:e3:26:8b:ee:dc:1c:55:7a:a4:
7a:d4:43:ca:25:2b:dc:14:f4:34:a7:d2:3b:c4:0d:39:de:51:
48:f7:3a:9a:27:7c:d9:df:e5:84:62:ca:7a:11:46:ad:1c:53:
a1:46:90:2b:27:48:49:d4:7d:04:05:d5:6b:05:ad:ef:7e:0e:
37:e4:cf:6f:a0:84:65:83:53:be:ef:19:9a:64:24:fc:e3:0d:
00:81:2d:08:cf:df:f2:8a:35:cb:ba:7d:6b:31:fd:88:2c:32:
72:5e:88:80:9b:66:06:59:e3:7f:b1:e0:00:c6:46:08:6d:0e:
06:ce:ad:f0:07:39:69:b3:68:4a:77:54:f5:f6:0f:fb:1a:79:
e2:ba:b9:13:0d:8e:7e:40:9b:95:f7:62:b6:9f:41:4f:47:9b:
fd:20:26:4a:d8:b7:45:03:22:ae:43:68:4d:fb:f1:7f:03:c2:
54:fa:49:26:fd:98:e3:41:7f:e1:40:75:fb:ec:a4:21:da:46:
68:a9:b4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 26 13:20:16 2023 by rpki-client on console-ams.rpki-client.org