Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yhU92GBOFWjVuCBtmfdWuqsk3Uc.roa
File: yhU92GBOFWjVuCBtmfdWuqsk3Uc.roa (raw, json)
Hash identifier: N3Mia+ICL+Qe5BmDv6t22A4x35be8YCBQP6egjffeF4=
Subject key identifier: CA:15:3D:D8:60:4E:15:68:D5:B8:20:6D:99:F7:56:BA:AB:24:DD:47
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018595EAFB1462D43CD75F7F0A70F4252188
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yhU92GBOFWjVuCBtmfdWuqsk3Uc.roa
Signing time: Mon 09 Jan 2023 09:44:42 +0000
ROA not before: Mon 09 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
193.124.47.0/24 maxlen: 24
194.87.162.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:ea:fb:14:62:d4:3c:d7:5f:7f:0a:70:f4:25:21:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 9 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca153dd8604e1568d5b8206d99f756baab24dd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1f:42:82:01:be:c3:d3:7d:d0:1a:9a:30:46:
af:74:70:7b:38:08:73:73:34:97:47:c9:28:29:47:
04:94:41:c5:e0:e8:a0:35:f6:4e:a5:a2:2f:77:bd:
40:b7:f4:e4:da:d1:f7:76:06:bc:e5:88:e1:c7:68:
5a:c4:98:b2:6b:60:5a:f6:f2:cc:fd:43:83:f8:a8:
dd:ef:20:80:a0:05:d2:ba:38:4b:fe:42:f0:d2:e5:
8d:4f:ce:e0:14:16:bd:be:0e:d2:4d:47:20:59:27:
ba:2e:27:6e:aa:b9:9c:e1:ec:3c:16:ce:f6:bb:52:
0f:40:99:59:d3:d0:b5:aa:3e:1a:97:9f:0e:1a:f2:
32:4e:10:a5:40:41:99:6f:e1:e6:da:c5:07:3d:e9:
be:76:ef:1a:5e:ba:26:f2:7d:c9:64:62:62:24:f0:
7f:9e:06:7d:a2:70:97:5e:a9:d9:42:7b:3e:b7:09:
86:4d:34:27:bb:c8:02:68:43:29:c2:17:d1:b0:45:
b4:49:a3:96:05:a1:ef:12:f0:e9:17:fe:b9:7b:11:
26:b5:ea:aa:8a:c6:31:ec:be:62:04:a3:37:e5:c5:
6f:fb:72:80:39:63:32:3c:28:fc:25:f6:84:37:b9:
6d:5e:f4:4f:98:6d:a4:c2:3b:78:6e:bb:98:87:3f:
70:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:15:3D:D8:60:4E:15:68:D5:B8:20:6D:99:F7:56:BA:AB:24:DD:47
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yhU92GBOFWjVuCBtmfdWuqsk3Uc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.47.0/24
194.87.162.0/24
194.87.200.0/24
195.58.63.0/24
195.133.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4f:9a:0a:8f:83:c6:ba:9f:24:98:88:41:9a:b5:ce:1b:86:
54:bd:40:fd:4b:65:55:6f:28:ba:23:21:ba:46:05:fb:07:8b:
af:e4:4c:99:2f:ac:03:c6:98:63:1c:84:66:1e:e1:f4:08:13:
73:2b:8f:70:60:76:15:fb:9b:6c:8f:6c:8f:c4:9a:8a:12:c2:
fe:99:2d:65:95:f7:c3:d6:62:48:57:32:02:7a:f5:f5:e0:a5:
81:a9:41:83:19:d3:c7:1d:ae:f5:75:2e:0b:db:de:0a:64:82:
6d:f9:9b:5b:ce:d2:94:8a:93:ef:4c:bc:89:16:52:06:6b:48:
ca:e0:71:5d:5d:e6:9d:bb:a2:13:ef:0a:82:e6:60:f3:e1:97:
d8:25:1f:1d:29:ab:fa:f7:fb:46:75:51:05:2b:ba:d8:a6:1f:
ca:da:da:ef:e1:a7:2e:89:f0:33:ba:fa:90:ba:45:ea:b8:19:
b2:5f:d7:ef:d9:6a:75:26:cc:e0:e3:d7:8d:fd:8c:ec:1c:27:
5f:c9:14:a6:8a:bf:33:eb:74:7d:ec:9f:3b:57:e8:29:83:44:
a1:eb:05:07:45:54:b0:e3:e4:2f:41:a1:43:9e:6d:74:8e:93:
49:03:17:78:c2:b3:ce:91:76:05:01:b4:81:d6:b6:4e:d2:07:
2d:64:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:15 2023 by rpki-client on console-fra.rpki-client.org