Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJsuZ1qJQkhL3s4Z3iBFrdTba48.roa
File: yJsuZ1qJQkhL3s4Z3iBFrdTba48.roa (raw, json)
Hash identifier: +WFOSqAFhUwOvfSzZnqpjjmdZbe41AVAiggjvcVHBIo=
Subject key identifier: C8:9B:2E:67:5A:89:42:48:4B:DE:CE:19:DE:20:45:AD:D4:DB:6B:8F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A1CCB158054BF0B1670BF84B235CA8852
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJsuZ1qJQkhL3s4Z3iBFrdTba48.roa
Signing time: Tue 22 Aug 2023 10:29:45 +0000
ROA not before: Tue 22 Aug 2023 10:29:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 212.193.31.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:cb:15:80:54:bf:0b:16:70:bf:84:b2:35:ca:88:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 22 10:29:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c89b2e675a8942484bdece19de2045add4db6b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:8b:b6:f9:98:da:60:63:f2:43:28:8e:e7:
78:85:ec:d0:7c:c5:6c:56:10:ed:b3:14:de:9f:ba:
ce:37:6e:9c:55:ac:71:72:82:09:40:0e:4e:76:05:
65:68:e4:a4:df:08:f0:b1:85:ac:38:cf:8c:5c:fe:
26:b1:f6:5b:db:cb:1b:73:8e:f1:58:4b:55:6f:49:
c6:56:40:6b:b9:b3:4b:e7:9a:a6:18:fb:42:1c:87:
ed:42:4e:d6:ed:8e:ed:1c:02:ac:1f:3f:0c:cc:cc:
9c:00:31:69:08:31:92:4d:cd:e8:60:0b:30:04:7e:
e3:f0:cd:4e:49:e6:31:0a:0f:db:28:ad:c9:0e:87:
db:bf:7d:fc:72:d4:da:fb:21:9c:ce:aa:38:2f:9f:
1b:3a:da:f8:bf:23:13:39:d7:0a:cb:1f:58:a0:02:
77:a9:00:4a:0a:1c:da:8e:7b:9f:45:c1:ee:aa:71:
91:1a:9c:12:bf:59:b9:6b:fc:e8:84:e3:e6:f2:3b:
b3:e6:4f:60:ad:6f:1f:d6:19:91:b3:f0:d4:42:e9:
ca:f8:15:98:c7:aa:0a:82:fb:62:0f:d1:b3:c4:f2:
6e:b8:cb:d5:01:34:cd:dd:05:18:cd:87:06:c7:4a:
b0:59:ab:d3:da:eb:05:3d:e7:0c:02:0e:32:bc:4c:
3d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:2E:67:5A:89:42:48:4B:DE:CE:19:DE:20:45:AD:D4:DB:6B:8F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJsuZ1qJQkhL3s4Z3iBFrdTba48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.180.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3f:aa:2f:39:7c:c7:58:14:57:be:53:f6:29:c9:c9:0d:5c:
67:e6:b3:2f:99:74:20:84:76:73:65:fd:c9:31:cb:d6:e3:d2:
9c:e5:26:79:b6:1a:80:66:66:bc:18:74:66:87:f6:e4:ec:61:
bb:ff:36:44:f5:f1:e0:7f:77:6f:00:1b:49:53:2c:3a:b0:6c:
76:0b:87:46:d9:bf:4a:24:d1:1b:65:2e:cd:a2:16:2c:2c:e0:
e3:d9:e0:51:d7:90:79:66:60:25:d0:ca:28:ce:d4:8f:bd:36:
fe:9f:0e:99:66:c5:fb:2d:2a:c2:b1:49:5e:18:31:76:d4:ae:
3e:f2:03:36:ae:5a:53:0e:2b:79:fd:83:d0:12:1d:56:f8:a2:
b9:2f:ed:99:c9:1e:02:11:9f:32:59:e6:51:b0:ce:58:28:ff:
46:b7:ff:52:4a:dc:32:bb:bf:c2:cf:88:37:f9:45:ec:0e:d8:
8b:59:63:3b:8c:a8:2c:79:57:48:5e:2c:70:ab:d3:e4:65:59:
c1:d2:0a:f7:ee:34:b7:c9:68:31:2e:a6:ca:62:ed:66:f5:b3:
4e:2a:12:f2:38:0d:02:c2:4e:f8:1b:fa:c7:af:53:b2:ed:45:
e5:62:61:ba:d0:e8:22:2c:4e:83:27:eb:f3:07:ad:2b:24:bf:
49:1c:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 13:48:51 2023 by rpki-client on console-fra.rpki-client.org