Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yQAt3Zx86dwVTfMY0Ws3geisSxA.roa
File: yQAt3Zx86dwVTfMY0Ws3geisSxA.roa (raw, json)
Hash identifier: jcepbMHdO9x9KM3inbqnzrQobj08NyhCpNZ/HoIUabU=
Subject key identifier: C9:00:2D:DD:9C:7C:E9:DC:15:4D:F3:18:D1:6B:37:81:E8:AC:4B:10
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A975B3093D82375C5E80B8A80F950A965
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yQAt3Zx86dwVTfMY0Ws3geisSxA.roa
Signing time: Fri 15 Sep 2023 05:40:50 +0000
ROA not before: Fri 15 Sep 2023 05:40:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.4.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
194.87.2.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
195.133.94.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.192.253.0/24 maxlen: 24
212.192.254.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:5b:30:93:d8:23:75:c5:e8:0b:8a:80:f9:50:a9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 15 05:40:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9002ddd9c7ce9dc154df318d16b3781e8ac4b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:eb:18:69:d2:92:c7:2a:cf:c7:85:88:0c:
74:f3:af:70:9b:ed:a4:0a:6f:e5:a5:55:28:b8:b4:
92:96:fc:51:da:23:59:15:9a:33:84:80:b7:27:2c:
3c:68:c5:64:75:32:09:07:4f:de:96:b6:eb:00:1e:
94:4f:64:34:97:ef:d9:b2:5e:e2:8a:d5:74:ce:fe:
5a:64:5f:08:bd:6b:3e:84:72:49:ec:4e:05:c0:d7:
bd:16:5b:39:1c:07:99:50:1c:35:72:73:01:b3:25:
77:af:84:e2:2a:ae:30:b8:82:f8:09:cc:cd:3e:87:
1f:56:d9:6e:cd:c5:de:c2:16:46:54:1e:1e:8b:16:
b4:8a:a6:19:53:91:65:f3:c8:dd:3a:d7:af:34:05:
38:dc:1b:6a:90:27:cf:b5:86:76:90:1a:9d:80:98:
94:05:e1:b4:65:f5:3b:59:e5:c9:5e:0f:a5:a8:b7:
e3:d5:f4:cd:2e:a7:6a:d8:28:d0:31:15:d7:08:0e:
3a:be:17:b8:3f:7c:2b:96:c9:3e:0f:f4:0b:fe:32:
c0:e0:99:1e:7e:2a:1a:3c:9e:a2:2b:24:59:38:a7:
3e:8c:dd:88:ef:92:b4:f0:92:83:ae:79:da:52:0f:
ff:6f:e1:f3:67:d7:a4:72:3a:b7:d2:98:d5:15:9e:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:00:2D:DD:9C:7C:E9:DC:15:4D:F3:18:D1:6B:37:81:E8:AC:4B:10
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yQAt3Zx86dwVTfMY0Ws3geisSxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.4.0/23
194.87.2.0/24
194.87.30.0/24
194.87.44.0/24
194.87.142.0/23
194.87.221.0/24
195.133.94.0/24
212.192.8.0/24
212.192.212.0/24
212.192.215.0/24
212.192.248.0/24
212.192.252.0-212.192.254.255
Signature Algorithm: sha256WithRSAEncryption
7b:1c:8b:f6:14:e3:64:58:7a:c4:1f:7c:50:ea:e3:ee:5a:0b:
0d:6a:59:0c:f5:98:d6:64:6f:7c:15:eb:41:78:35:f4:3f:30:
0a:1c:32:4c:56:49:59:43:ee:7a:43:2f:1e:a6:76:4e:aa:93:
9e:a7:ff:59:72:59:fe:8a:06:2a:0b:9e:e9:ce:21:8b:b2:de:
58:8e:80:e7:68:de:fe:05:82:24:ef:5b:06:45:9b:d3:46:2d:
59:04:3c:eb:cb:32:a1:c3:73:ca:b8:db:12:10:fe:bc:26:8f:
4b:d8:23:d8:6c:1a:e5:35:9c:18:cb:b7:51:47:56:97:32:f8:
3c:00:ad:24:f2:46:0d:3a:22:36:5f:ae:60:4e:fb:76:20:9d:
4d:23:a8:ba:0b:98:90:37:8f:e1:0e:71:ad:54:02:47:69:b2:
ac:47:a7:f8:a1:5f:67:58:79:ae:7a:23:4b:a6:32:5a:dc:ab:
54:fb:a8:9e:a6:6b:c3:8b:fb:66:76:93:41:70:ce:ad:80:68:
19:24:46:b1:e1:b3:7a:da:78:d8:53:27:74:ab:41:21:b9:94:
c3:52:4a:ba:cf:e9:6e:8b:15:83:44:8d:1e:a2:bb:bb:5a:fb:
ef:7c:07:13:31:ee:4b:bf:91:f6:c7:f1:10:10:b1:c1:0b:11:
3e:55:33:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 06:24:56 2023 by rpki-client on console-ams.rpki-client.org