Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ym9mP_KLozoGIKCCWYSut9hrv-0.roa
File: ym9mP_KLozoGIKCCWYSut9hrv-0.roa (raw, json)
Hash identifier: WxzHDWFGwSpqB4foZ5eeHnc1JV2SgYuKnbHjX7yy0s4=
Subject key identifier: CA:6F:66:3F:F2:8B:A3:3A:06:20:A0:82:59:84:AE:B7:D8:6B:BF:ED
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018996B31B3B56A23D40FBD7CE798ECC8426
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ym9mP_KLozoGIKCCWYSut9hrv-0.roa
Signing time: Thu 27 Jul 2023 09:34:27 +0000
ROA not before: Thu 27 Jul 2023 09:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 194.87.119.0/24 maxlen: 24
194.135.30.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.251.0/24 maxlen: 24
194.87.181.0/24 maxlen: 24
212.192.250.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
193.124.201.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:b3:1b:3b:56:a2:3d:40:fb:d7:ce:79:8e:cc:84:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 27 09:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca6f663ff28ba33a0620a0825984aeb7d86bbfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:69:b9:ea:aa:cd:42:a3:fb:c4:bb:a0:8d:
0e:92:ea:6b:4d:45:af:5d:a9:f6:9b:28:60:a9:dc:
b5:ca:dd:f0:24:da:9f:c1:b8:e8:0a:44:e3:eb:fa:
62:ff:9b:1a:5d:fd:3a:4f:5d:67:19:e8:ff:c8:c6:
89:14:f4:ce:d6:e8:d9:32:ce:79:a7:4d:de:5c:e3:
02:09:b1:d9:01:57:57:f8:77:45:30:34:f3:d7:5a:
2e:75:9e:f5:2b:e3:85:f8:de:37:d4:0f:78:3f:05:
ff:f4:8e:22:2c:7f:aa:90:89:43:58:b6:b5:60:7b:
df:e2:29:d4:62:ba:63:58:06:b7:3b:06:a6:31:bc:
13:5f:0e:c4:5b:33:aa:59:32:f0:e9:94:48:f1:cd:
91:a6:63:06:7f:d2:02:03:7e:41:a7:f4:9b:36:52:
e7:7c:64:92:e0:b9:5c:16:61:1c:b5:eb:ff:dd:67:
cf:8f:cc:d9:82:e1:54:74:af:a4:36:67:fa:34:62:
8c:f1:d2:a0:9a:1a:62:d4:15:8e:12:97:74:4e:f1:
1f:d0:4e:c6:1e:e2:94:18:16:05:57:b8:40:2e:06:
fe:82:e5:22:20:19:af:ea:ab:54:d0:6e:63:4a:56:
37:47:2d:78:07:f7:a9:f6:b9:6e:e6:89:7c:fe:78:
5c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6F:66:3F:F2:8B:A3:3A:06:20:A0:82:59:84:AE:B7:D8:6B:BF:ED
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ym9mP_KLozoGIKCCWYSut9hrv-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.94.0/24
193.124.201.0/24
194.87.119.0/24
194.87.181.0/24
194.135.30.0/24
212.192.0.0/24
212.192.248.0/24
212.192.250.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:14:d7:bb:72:21:16:47:f7:e7:1c:9f:2d:8d:41:c6:db:2c:
3c:fd:7d:6a:48:b1:03:70:86:17:05:bc:76:95:5c:3b:f4:e1:
57:f5:88:3e:15:9b:36:23:6a:41:72:b6:17:dd:a7:66:45:ff:
44:2c:89:14:07:7e:96:65:d9:fd:2d:d7:5a:8a:80:00:d7:ca:
40:f4:95:c1:2c:bd:62:0d:75:ff:75:15:d8:eb:9a:3d:ab:04:
03:ba:9f:17:a8:4d:b8:0c:c7:f9:69:1f:d8:8a:bf:84:e8:f5:
31:2e:c7:60:59:40:6d:fc:76:25:fb:a7:6b:cf:d5:60:95:f5:
c4:c6:d5:0d:0d:90:58:59:e4:96:6c:29:cd:75:a3:71:7a:34:
e6:6d:96:72:d4:a5:e3:dc:a0:43:d5:7c:9e:6e:87:31:d8:78:
16:87:ff:df:36:3e:b4:81:3e:d3:2f:63:45:61:17:5e:27:3f:
9b:77:8a:d7:64:5d:e3:bf:07:b6:95:ec:99:67:8d:26:79:9d:
97:94:38:12:72:58:18:79:31:dd:5e:3b:6b:64:03:b2:18:6b:
69:3c:ea:26:c1:e6:e0:36:39:e4:eb:4a:98:15:a5:21:f2:af:
58:9a:6b:5f:97:38:4b:6a:64:ff:92:92:71:9c:04:f6:8e:67:
fc:76:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 15:30:49 2023 by rpki-client on console-fra.rpki-client.org