Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yB5a8-p7-eQOR-Bh20ustLJrscA.roa
File: yB5a8-p7-eQOR-Bh20ustLJrscA.roa (raw, json)
Hash identifier: XNO4wXijIeHIO9I+5E+r5TrIMMt+Qoi6532b8ChdAdk=
Subject key identifier: C8:1E:5A:F3:EA:7B:F9:E4:0E:47:E0:61:DB:4B:AC:B4:B2:6B:B1:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01892E93797B0DE63F1AC59EFB268A167EB4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yB5a8-p7-eQOR-Bh20ustLJrscA.roa
Signing time: Fri 07 Jul 2023 04:19:24 +0000
ROA not before: Fri 07 Jul 2023 04:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 193.124.226.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.254.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
212.192.13.0/24 maxlen: 24
195.133.52.0/23 maxlen: 23
195.133.56.0/22 maxlen: 22
195.133.59.0/24 maxlen: 24
194.87.118.0/23 maxlen: 24
195.133.10.0/23 maxlen: 23
185.72.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2e:93:79:7b:0d:e6:3f:1a:c5:9e:fb:26:8a:16:7e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 7 04:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c81e5af3ea7bf9e40e47e061db4bacb4b26bb1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:10:a7:bc:fa:57:0c:2b:d8:a3:48:3c:26:36:
2b:c3:07:c8:4c:a5:0d:da:1f:5b:c2:3f:4f:28:ca:
0f:06:d6:35:dd:65:de:44:e2:15:d3:5c:9f:fd:07:
cd:77:44:2d:21:69:70:63:96:07:4f:c4:5c:1d:99:
40:a7:84:2b:b2:e4:c4:5d:de:d5:4b:64:b7:3f:20:
2c:33:83:d9:36:32:8e:81:c0:7d:ea:db:22:16:b6:
0c:46:3d:7e:9d:5f:84:28:86:be:3c:da:aa:02:7d:
be:d6:bc:9d:d6:f2:40:98:04:9e:b5:3f:c5:15:36:
4e:06:24:3e:21:6d:2b:52:c7:1c:74:c1:7a:03:6a:
75:01:08:a8:51:e4:ee:e0:aa:5b:b7:e4:45:36:06:
62:5c:dc:19:bd:76:8a:e7:0d:f0:e0:d5:89:89:af:
4c:24:37:1a:db:cc:e7:1e:ff:0b:22:96:51:3f:3b:
9e:00:b1:0d:47:a1:7d:7d:e4:a4:22:25:04:9a:9c:
ba:18:46:ab:56:fa:70:d8:39:5f:dd:d4:d1:20:25:
eb:a2:9b:33:cf:3f:1c:e5:55:00:11:03:ea:4e:02:
20:10:b9:09:53:e6:31:1b:52:b1:39:40:ae:27:c7:
20:63:37:31:cd:66:fa:f4:8d:ae:7d:7e:d9:a0:9d:
37:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1E:5A:F3:EA:7B:F9:E4:0E:47:E0:61:DB:4B:AC:B4:B2:6B:B1:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yB5a8-p7-eQOR-Bh20ustLJrscA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
193.124.36.0/24
193.124.226.0/24
193.124.254.0/24
194.87.118.0/23
194.87.221.0/24
194.135.32.0/24
195.133.10.0/23
195.133.26.0/23
195.133.52.0/23
195.133.56.0/22
212.192.13.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ff:8c:48:88:50:3d:13:5c:1e:d0:cb:cf:5d:bd:3a:4b:a0:
c1:f7:26:74:33:f2:45:ba:0a:da:91:ad:db:ca:fb:be:00:43:
b2:fe:a9:5e:f5:04:90:4b:a0:a8:6e:c8:37:11:6f:f2:6b:fe:
e8:b0:c9:42:fd:35:d3:34:8f:b7:7e:f5:c3:61:4a:07:6e:13:
0d:ab:bc:bb:83:96:2a:10:38:be:a6:2d:e1:ae:d9:06:38:c6:
aa:37:03:57:d2:f9:51:cb:10:74:1d:92:6e:15:b9:ca:ce:27:
b6:a8:42:73:cc:da:0c:ff:3d:8a:0c:1b:ea:de:1d:a8:83:c1:
bb:14:59:c5:f4:88:09:cd:f8:fe:03:15:90:a8:3e:43:67:35:
d3:6d:53:f7:d4:13:79:ed:ed:25:6d:44:ab:03:cc:cd:9d:c4:
b8:03:6b:45:6c:7d:5b:98:50:fe:60:7c:44:60:ef:6a:b0:fd:
77:36:6a:73:d5:9f:0b:fe:c5:62:98:0c:49:15:22:1a:9b:05:
93:4f:2c:49:d7:7e:d9:6c:f4:c7:a0:76:3f:84:3f:68:72:90:
80:92:e5:a5:51:eb:99:7a:b5:4e:cc:c3:11:96:35:8b:82:3f:
c6:21:f4:b9:b9:1c:b4:b4:ad:a7:60:90:ef:4c:a4:1d:29:53:
7c:a2:a0:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 6 15:11:59 2023 by rpki-client on console-fra.rpki-client.org