Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m-OYC_YzUdRraWuEP6TLJ7BY2LI.roa
File: m-OYC_YzUdRraWuEP6TLJ7BY2LI.roa (raw, json)
Hash identifier: mxUY7seEE+oTMsmrCgXqrukAzldurieKYWl09d7A9e0=
Subject key identifier: 9B:E3:98:0B:F6:33:51:D4:6B:69:6B:84:3F:A4:CB:27:B0:58:D8:B2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188BFA7093CEF7A3D90F5A60FD057B79234
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m-OYC_YzUdRraWuEP6TLJ7BY2LI.roa
Signing time: Thu 15 Jun 2023 15:22:54 +0000
ROA not before: Thu 15 Jun 2023 15:22:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 194.135.18.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bf:a7:09:3c:ef:7a:3d:90:f5:a6:0f:d0:57:b7:92:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 15 15:22:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9be3980bf63351d46b696b843fa4cb27b058d8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:60:ba:6d:92:8c:aa:bd:20:6d:1e:a6:a5:
6b:b9:3f:60:c9:e2:95:74:22:8f:7e:53:6f:e6:c8:
88:a2:f5:14:8f:3b:be:d9:e1:07:e2:b7:a3:da:4a:
db:63:06:02:b5:f2:99:df:1c:d6:2a:f4:df:02:75:
bf:06:bb:57:71:4b:9a:e6:f8:80:23:43:7e:69:91:
59:a1:13:e8:fd:52:08:80:5f:53:58:66:94:50:10:
46:65:86:9b:5c:45:75:23:2f:e7:00:8d:85:7d:f6:
52:4e:cb:f2:4f:e2:0c:9e:e0:7a:22:dc:9f:e0:c3:
05:cf:49:d2:68:74:ef:fa:64:01:2a:ca:38:59:12:
4c:bd:8a:ab:67:b6:d9:78:9e:97:fe:92:5e:fc:04:
12:bb:7b:32:03:e9:5d:d5:12:f1:0e:4f:7f:c8:57:
66:9c:8c:4e:61:b8:52:a0:c6:c6:17:a7:5d:dd:e8:
af:44:4a:78:4e:5b:39:09:bd:1b:3b:b9:90:a8:e7:
74:eb:61:e6:fd:e6:ab:a2:2a:61:93:fd:54:62:6a:
c8:80:8a:a3:4f:56:38:24:a0:2a:36:4f:2a:c5:9c:
87:82:d5:f7:5a:ec:90:da:8f:35:4e:4a:89:dc:fb:
85:7b:c0:10:80:a2:d4:de:24:95:3b:0a:ae:ce:27:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E3:98:0B:F6:33:51:D4:6B:69:6B:84:3F:A4:CB:27:B0:58:D8:B2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/m-OYC_YzUdRraWuEP6TLJ7BY2LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.44.0/24
194.87.180.0/24
194.135.18.0/24
Signature Algorithm: sha256WithRSAEncryption
97:1e:8c:b8:b4:0f:7f:be:24:23:c6:10:d8:68:f5:bd:e2:a6:
fb:7c:93:78:99:6d:bb:a5:aa:71:d6:0a:67:81:87:79:a9:78:
b5:4e:4e:1a:f9:f3:87:fd:9c:84:10:3f:5d:07:2d:62:90:43:
00:71:11:c9:b8:f3:23:4d:3d:4f:69:53:11:af:1c:40:46:9c:
ed:58:ef:82:40:8b:3d:1c:30:2b:aa:0b:db:17:ae:33:47:64:
9b:d2:ab:66:ec:c6:31:97:1e:9e:0b:81:c7:77:24:c2:8b:c4:
eb:47:7e:80:71:e3:34:23:e2:9f:fd:95:e1:cb:6a:67:fc:9e:
9e:d2:ff:9f:48:66:11:a6:aa:13:3d:c7:d0:44:a9:b4:94:a0:
71:61:97:79:03:04:6c:9c:7a:50:fd:4d:cc:f0:43:45:0a:9f:
ea:29:14:ec:46:36:0a:8b:5f:46:bf:e7:fe:b2:c5:76:43:66:
99:09:5b:32:93:2e:0c:9f:ea:e6:2c:80:da:68:e7:2e:ab:65:
c2:ba:77:c0:42:69:bd:63:a9:ad:b3:3f:53:69:d8:cc:e3:90:
90:10:1a:51:dc:26:bf:74:8f:62:c3:b1:88:09:9d:73:4c:40:
59:66:2e:4b:95:b2:00:90:f5:03:d4:20:c4:aa:c6:7f:e0:21:
b2:78:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:05 2023 by rpki-client on console-ams.rpki-client.org