Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mYBKzfCwxzvrJGurE5qOp6jIAmQ.roa
File: mYBKzfCwxzvrJGurE5qOp6jIAmQ.roa (raw, json)
Hash identifier: EW0o1ugrQpeashlLTYCYA+Qf9NMg4MLe/lXWElouw1w=
Subject key identifier: 99:80:4A:CD:F0:B0:C7:3B:EB:24:6B:AB:13:9A:8E:A7:A8:C8:02:64
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A2B201D63E5C2ABD62D349F85FC3A5580
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mYBKzfCwxzvrJGurE5qOp6jIAmQ.roa
Signing time: Fri 25 Aug 2023 05:17:19 +0000
ROA not before: Fri 25 Aug 2023 05:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 212.192.208.0/24 maxlen: 24
194.87.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Sep 2023 05:34:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2b:20:1d:63:e5:c2:ab:d6:2d:34:9f:85:fc:3a:55:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 25 05:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99804acdf0b0c73beb246bab139a8ea7a8c80264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3c:d3:68:02:4d:8e:4c:11:9a:ac:81:4c:b4:
4c:ff:f3:5e:a0:02:35:05:f8:49:9b:7c:fa:a7:6e:
79:fe:ab:56:23:cd:3e:ad:ac:5d:39:70:27:e1:11:
35:d4:0c:ba:7b:60:93:e9:23:d4:d8:05:d7:af:8b:
63:82:fa:65:79:75:bc:f4:88:bf:dc:37:f5:97:e1:
87:08:2a:18:d0:9e:0d:68:66:21:09:22:e1:e7:a8:
87:2d:0b:ba:cd:d4:57:fb:95:3f:bf:f4:c9:c7:73:
4a:d3:fb:59:17:ae:1b:16:e3:91:01:a5:e4:37:03:
c3:87:3f:0a:56:33:bd:b1:6a:8c:4a:8f:fa:32:bb:
45:46:a7:ae:25:f8:48:ac:77:ff:53:97:ff:49:1d:
28:4f:78:3c:9a:ec:b4:12:2c:d5:10:02:12:f5:55:
4f:b8:94:ce:24:7e:50:99:7a:5e:ef:ca:92:31:6b:
a6:8d:98:ba:10:d0:4f:9f:9c:e8:af:20:10:94:15:
71:d8:bb:a3:88:67:ce:f9:44:33:fc:1d:8e:30:91:
3f:56:70:15:77:fc:1c:62:9a:50:03:fc:36:1d:6f:
25:df:e0:d9:4a:4f:78:45:c7:59:b3:56:c1:dc:23:
d5:b1:d1:51:7e:c4:c3:86:8d:b5:92:df:ab:00:cc:
75:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:80:4A:CD:F0:B0:C7:3B:EB:24:6B:AB:13:9A:8E:A7:A8:C8:02:64
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mYBKzfCwxzvrJGurE5qOp6jIAmQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.178.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
46:fd:f8:dc:df:2f:e6:8d:66:7a:24:4c:31:37:1e:8b:d4:0e:
bb:9c:43:12:cf:61:1d:f2:03:2e:39:1f:72:5f:2f:35:20:f2:
f7:ea:40:8b:85:19:f4:44:fb:8b:d2:97:2c:d7:eb:d4:a4:8b:
1a:c2:dd:b7:bc:2f:40:92:13:e5:1a:fb:0b:01:9e:8a:a3:41:
10:3a:a7:eb:ce:10:a7:83:5f:a9:2b:6e:bc:1a:8c:15:5b:0d:
92:2a:e1:d4:ed:f5:2c:4b:03:ee:05:fa:11:6f:9e:42:84:85:
14:a4:6b:3a:4f:44:e5:28:fa:29:bb:a5:ff:ee:12:06:0b:8f:
bc:d8:41:56:1f:f2:5e:c3:47:62:6a:4f:11:07:15:cc:5b:36:
f1:8c:ff:14:df:6c:84:e5:13:21:cc:4f:08:47:97:33:06:2c:
46:c3:0b:9d:eb:36:3d:49:e4:2f:97:f8:e9:4e:70:2a:ed:26:
09:2e:ad:4a:0a:a5:b7:59:4b:94:25:17:fb:1d:f7:c1:7c:16:
d4:22:51:14:18:a3:6e:e4:73:50:9e:09:00:3a:ff:d7:09:8b:
98:e0:98:73:46:69:53:4d:65:2e:61:50:37:e7:58:b3:46:de:
5b:54:f7:15:4d:e7:36:c8:e7:81:fe:cc:17:eb:45:6b:86:1a:
7a:6b:9c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org