Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJzN9ChSOKi-VFVTfyJ5YqR9yMo.roa
File: yJzN9ChSOKi-VFVTfyJ5YqR9yMo.roa (raw, json)
Hash identifier: rOho23eZBMIRTkX+Nn9Dcq4vldSez2KBMi6Tw6Wm1JY=
Subject key identifier: C8:9C:CD:F4:28:52:38:A8:BE:54:55:53:7F:22:79:62:A4:7D:C8:CA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C86D30912D9199E2C5DF12C7F35C7CF80
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJzN9ChSOKi-VFVTfyJ5YqR9yMo.roa
Signing time: Wed 20 Dec 2023 10:43:46 +0000
ROA not before: Wed 20 Dec 2023 10:43:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 212.193.13.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
194.87.76.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:d3:09:12:d9:19:9e:2c:5d:f1:2c:7f:35:c7:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 20 10:43:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c89ccdf4285238a8be5455537f227962a47dc8ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:0e:fa:35:9c:14:a9:b3:93:be:53:e4:45:
9e:33:5c:64:69:c9:e2:19:b3:69:07:96:b4:a4:2d:
8f:82:f2:e9:62:8a:47:6e:7d:25:95:fe:33:a1:1a:
b6:bf:32:c2:6d:34:f0:40:38:fa:2c:20:57:4b:c1:
b8:d2:2f:a1:d3:eb:e5:81:16:6a:b7:ae:ca:e8:9f:
49:5d:6d:71:36:a8:41:1f:62:04:98:a0:45:50:ff:
4e:e8:57:87:68:b6:93:7f:fb:03:81:74:ed:77:dd:
da:68:ed:0a:f6:f1:39:87:04:20:73:87:b7:b6:9c:
a9:bd:3d:0e:fe:9e:95:cf:99:6f:ad:26:11:26:7e:
c0:3c:be:9a:ed:d8:4a:39:54:07:8f:bd:46:51:a5:
30:69:24:7a:70:09:80:2d:94:8a:27:75:62:6f:d2:
41:4e:71:aa:2b:56:ee:ea:fb:f2:25:b3:1f:ca:1d:
00:6f:e2:d1:0f:8b:f3:b7:f5:7a:86:c5:b9:b0:49:
fe:93:c0:e8:5c:6a:e9:f8:40:ad:61:de:2a:d6:c1:
a6:06:1a:9d:0f:98:d4:23:f5:35:de:f2:93:6d:a1:
d2:a8:34:3c:a3:23:7b:5f:d6:4d:d5:2f:ca:05:54:
35:ce:b8:e0:85:bc:15:dd:64:08:51:6b:1d:d3:b0:
86:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9C:CD:F4:28:52:38:A8:BE:54:55:53:7F:22:79:62:A4:7D:C8:CA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yJzN9ChSOKi-VFVTfyJ5YqR9yMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.202.0/24
194.87.76.0/24
194.87.231.0/24
195.133.81.0/24
212.193.13.0/24
Signature Algorithm: sha256WithRSAEncryption
37:65:76:17:c2:c8:db:f0:e1:ad:8c:06:36:08:32:9d:67:2d:
48:c2:22:fb:c8:52:c4:14:ca:10:be:f7:b9:2a:07:5b:24:3b:
5a:c0:e9:8a:ea:ff:de:c5:27:16:48:f8:b2:fe:0d:1d:88:1b:
af:07:50:df:33:e6:38:0b:5e:c4:45:2b:1b:ec:30:96:72:e9:
65:c2:a8:80:06:84:62:7e:29:e5:65:ad:44:55:28:1c:2f:d2:
0a:fa:00:ff:5e:54:3b:98:ed:ee:8a:74:83:8b:70:80:52:e6:
ca:02:fb:fe:66:dc:12:d3:7d:2f:a1:d0:f4:5d:f3:0e:7e:35:
fa:4c:2b:4c:07:24:1e:13:71:6c:a9:c1:c9:95:75:c2:3e:eb:
54:b6:f2:29:73:4f:cd:ea:71:77:77:6c:93:cd:c6:fe:e7:05:
ba:8c:f1:a7:e4:18:5d:97:8f:6a:98:51:b2:c1:e1:db:0a:04:
95:56:17:86:74:48:b2:ca:77:f5:f1:60:1f:db:80:71:41:08:
08:87:65:e1:ab:2b:ac:b5:00:60:90:f5:6d:08:34:e3:53:c9:
f2:9f:dd:dc:a8:7b:d0:08:80:59:8e:a6:b8:48:aa:8a:d6:43:
9e:f7:a9:1e:71:56:8b:8b:a9:e1:72:c6:9c:97:8e:ea:19:bd:
49:e2:32:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 13:58:46 2023 by rpki-client on console-ams.rpki-client.org