Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ky8BIbNkNsB2dy-IqyFNTYCPQ_E.roa
File: ky8BIbNkNsB2dy-IqyFNTYCPQ_E.roa (raw, json)
Hash identifier: sCKmzlE+eoJ73WMx/k9nJDL3DJP1AdxRjob0MIuQDYU=
Subject key identifier: 93:2F:01:21:B3:64:36:C0:76:77:2F:88:AB:21:4D:4D:80:8F:43:F1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018756E7C4A3EB973C866901FEAAF83731AF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ky8BIbNkNsB2dy-IqyFNTYCPQ_E.roa
Signing time: Thu 06 Apr 2023 14:10:42 +0000
ROA not before: Thu 06 Apr 2023 14:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 194.87.118.0/23 maxlen: 24
195.133.10.0/23 maxlen: 23
195.133.26.0/23 maxlen: 24
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 14:12:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:e7:c4:a3:eb:97:3c:86:69:01:fe:aa:f8:37:31:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 14:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=932f0121b36436c076772f88ab214d4d808f43f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:89:1e:cc:ed:c6:97:41:71:78:75:06:5b:
43:d5:85:24:d8:f8:5e:44:d9:8f:b1:ea:ed:bb:c0:
d6:63:27:d2:05:40:b3:01:30:65:1c:47:e1:fe:bd:
d5:ce:2c:79:e2:ed:fd:4e:75:c2:5b:fc:f5:0c:3b:
c6:e1:a0:13:70:df:9c:a2:ea:15:39:16:ca:6d:55:
1d:89:61:7a:75:57:e2:d3:04:8e:84:22:a7:ff:3a:
48:48:5f:ab:89:10:bf:3d:05:01:71:12:81:ef:06:
18:d5:db:7b:43:1d:25:2d:3c:99:b5:ee:a2:87:5c:
19:af:ca:31:f8:6a:cf:bd:d1:de:0c:c1:c4:7e:98:
c8:b3:b8:47:aa:86:e3:d3:17:e0:76:d6:94:03:e3:
92:85:43:87:e1:87:25:c0:4b:cc:6f:ae:53:bc:24:
6c:5e:da:55:af:88:5e:16:ff:7c:2a:91:21:e9:5a:
4d:0f:f6:07:72:f0:77:43:46:73:e4:ad:36:03:35:
a0:7f:ea:a5:09:3a:63:5b:60:39:88:78:7b:6f:1b:
52:b2:97:10:6b:1b:fc:f1:06:fe:e0:36:32:66:39:
c5:f4:5e:59:2b:f6:5b:4b:3b:e7:b3:88:d2:0e:db:
0f:6f:9a:52:1b:03:f0:fd:29:7d:37:e7:c2:00:9f:
4d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2F:01:21:B3:64:36:C0:76:77:2F:88:AB:21:4D:4D:80:8F:43:F1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ky8BIbNkNsB2dy-IqyFNTYCPQ_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.118.0/23
195.133.10.0/23
195.133.26.0/23
195.133.59.0/24
Signature Algorithm: sha256WithRSAEncryption
84:75:9f:9e:e2:b4:f9:6b:7e:73:96:b7:34:58:91:bd:80:34:
4b:d4:84:ab:68:a8:4b:a1:23:06:d0:36:84:a1:0e:e9:51:c6:
b0:d4:fb:5d:04:ae:27:ef:2b:e5:99:b6:83:6e:13:7a:ec:b8:
41:e1:c6:85:72:c9:2c:8f:9a:67:cb:d7:ad:46:b8:8f:f4:7f:
2b:fa:4a:af:f8:a9:5f:23:b5:38:86:44:2c:51:9e:91:1f:1c:
ee:db:83:39:0e:cc:33:b7:d4:3c:f7:02:2d:95:d1:d0:3d:c6:
2d:89:ca:b0:cc:ce:a1:ee:91:d4:7e:2b:74:41:5f:0b:fb:eb:
b7:df:93:f9:f9:b3:aa:f8:c9:c1:18:79:02:74:19:78:3d:de:
71:31:25:61:0c:6b:89:e5:c7:0f:0b:d8:a5:38:b9:5b:38:9b:
6b:47:6f:1f:37:b6:12:a2:96:21:aa:ca:5b:85:55:cd:8b:5a:
aa:db:89:91:82:b9:a3:0b:ec:b4:37:d3:95:95:84:61:a6:91:
ff:6e:0f:89:de:68:df:ac:b5:4f:58:5f:11:65:b1:14:7d:87:
89:52:6c:bc:e6:45:41:d2:01:58:ff:dc:b6:87:02:49:18:0c:
45:64:36:5e:b5:dc:d8:1b:83:d2:4d:09:a2:60:a3:f2:8b:8c:
21:83:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:44 2024 by rpki-client on console-ams.rpki-client.org