Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YyUcLGROKE6E4u4j7Zpp1rqvbIM.roa
File: YyUcLGROKE6E4u4j7Zpp1rqvbIM.roa (raw, json)
Hash identifier: aUc1cPRCr7s3BIPzEjMT74UazgpeaiptnbqAij4RmXQ=
Subject key identifier: 63:25:1C:2C:64:4E:28:4E:84:E2:EE:23:ED:9A:69:D6:BA:AF:6C:83
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189265E261816E6F59797EB05FC70635D86
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YyUcLGROKE6E4u4j7Zpp1rqvbIM.roa
Signing time: Wed 05 Jul 2023 14:04:11 +0000
ROA not before: Wed 05 Jul 2023 14:04:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 212.192.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:5e:26:18:16:e6:f5:97:97:eb:05:fc:70:63:5d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 5 14:04:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63251c2c644e284e84e2ee23ed9a69d6baaf6c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:bf:2d:1b:5b:71:74:4b:33:4e:c8:3b:a7:
40:df:86:1d:7e:a0:44:35:a7:4c:ce:4b:59:e4:39:
a7:85:67:20:5e:c3:9a:40:3b:29:75:14:45:42:bd:
9b:55:2a:4b:8b:89:19:ca:ae:49:43:ee:b8:f9:e9:
14:2b:64:27:a9:4e:90:fc:34:41:d9:e0:fe:ae:0e:
02:4f:b9:3c:2e:0f:f1:20:cb:4c:43:43:dd:44:6e:
49:c1:01:c6:7a:f7:33:d4:38:fc:87:c7:dc:3f:e6:
fa:e0:f0:b5:b3:11:09:5d:74:57:bc:6b:6b:d4:b4:
ca:d9:8c:1b:d0:bf:2f:b1:62:2d:0e:cf:08:4b:52:
af:0c:9c:dc:07:7a:00:4c:5e:0e:39:d4:4c:87:b0:
9f:78:7b:29:8d:62:02:85:e0:97:a2:50:f5:18:53:
fd:8b:09:65:62:3c:16:b3:85:07:da:70:48:2f:73:
52:bc:0b:b0:c2:fd:fe:6c:cf:4b:91:ca:55:d5:53:
74:29:55:0c:48:c1:2c:fc:19:25:d9:90:0a:8f:29:
08:c5:d6:4e:99:31:48:48:ed:24:6a:6d:92:dd:e3:
fe:2a:7f:72:ab:93:12:a8:f0:0d:bf:9d:37:4f:5e:
b0:a9:22:57:ee:90:10:e8:57:39:8a:87:ab:91:a9:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:25:1C:2C:64:4E:28:4E:84:E2:EE:23:ED:9A:69:D6:BA:AF:6C:83
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/YyUcLGROKE6E4u4j7Zpp1rqvbIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.192.5.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:28:cc:c1:2d:a6:8c:c0:f3:05:26:ac:67:b6:b2:04:b5:bd:
76:3c:58:ed:70:ce:8f:e1:1b:b0:ce:1a:9b:58:a5:f3:79:c4:
23:db:ec:87:65:8d:23:78:a2:f0:d9:b4:77:74:45:9a:f1:6b:
64:b3:ab:18:90:f8:1a:07:83:10:06:53:67:fa:c0:2b:ff:97:
b7:89:24:1a:bf:ee:5c:6b:d9:ef:85:10:e5:54:a0:4a:c4:cb:
d1:62:68:f6:63:d3:80:86:ae:51:6a:b7:9a:25:b8:32:27:50:
47:8c:ed:5b:20:dd:7d:46:2f:d9:48:c2:88:12:c0:c1:28:07:
23:c7:11:b9:c1:b3:cc:4a:50:df:aa:20:8c:36:ee:dd:02:31:
5f:7e:94:d0:fe:72:41:3e:f2:9e:33:50:30:60:03:ef:b8:43:
68:21:6a:1a:9b:bb:0a:86:f1:27:41:e3:9b:9e:ca:92:a8:45:
48:dc:1f:82:f3:aa:a9:4b:79:06:5d:4b:93:2e:10:04:df:a0:
21:23:a8:30:84:59:53:8e:52:8e:11:0d:ff:31:02:ec:eb:77:
ad:26:06:24:42:a3:65:98:4c:46:77:c0:5f:8c:f8:31:20:e9:
67:4b:72:bd:8d:ff:dc:e2:e5:8d:13:3a:bc:87:19:7d:86:3b:
20:f2:d9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 03:55:47 2023 by rpki-client on console-ams.rpki-client.org