Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yocgGA7ebaa0KAmUWh_5nl5v51E.roa
File: yocgGA7ebaa0KAmUWh_5nl5v51E.roa (raw, json)
Hash identifier: EBWKNZ3MeahC3Dj0QeB+ZcFkNbfols7RknAEhkVUMnQ=
Subject key identifier: CA:87:20:18:0E:DE:6D:A6:B4:28:09:94:5A:1F:F9:9E:5E:6F:E7:51
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018953B4E86650F95DBA81BFFE24CF51CE56
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yocgGA7ebaa0KAmUWh_5nl5v51E.roa
Signing time: Fri 14 Jul 2023 09:21:52 +0000
ROA not before: Fri 14 Jul 2023 09:21:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203639
IP address blocks: 212.193.14.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.231.0/24 maxlen: 24
212.192.4.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
192.124.180.0/24 maxlen: 24
193.124.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:53:b4:e8:66:50:f9:5d:ba:81:bf:fe:24:cf:51:ce:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 14 09:21:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ca8720180ede6da6b42809945a1ff99e5e6fe751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:44:c5:53:88:c5:4a:01:f9:82:31:f8:8c:8c:
01:f9:90:5e:46:7f:9f:0b:62:0c:65:23:77:4b:bd:
92:72:78:8c:5c:ab:94:0b:56:d0:64:90:c1:db:37:
b6:00:d1:cd:f7:71:6e:fc:4b:6e:59:3b:72:04:77:
89:60:5c:15:44:02:34:ac:41:8b:1e:fc:89:eb:45:
2d:6d:de:b6:3a:49:d8:61:cc:f0:bc:42:46:db:8e:
c6:30:5f:ce:ad:eb:e2:0d:fb:2e:f8:f4:e8:05:7a:
fa:6c:bd:fe:fc:44:2c:b5:e3:6c:b5:18:63:1d:ab:
05:f4:ff:90:41:1a:7b:39:b0:a7:52:8f:c3:67:11:
2d:05:56:56:76:ee:a2:93:a0:4e:0d:70:4b:11:ed:
93:7f:ae:45:1c:fb:e2:74:d3:0b:c3:37:20:79:e2:
bb:cc:33:a4:15:7a:72:92:14:b0:6f:cf:51:9a:f6:
5b:c6:9e:bd:8d:85:41:64:c7:af:2f:31:03:05:43:
2e:9a:26:86:df:d0:7f:4d:3a:b0:24:a6:cb:2d:96:
36:b0:20:5d:bf:c4:da:72:93:3c:31:e9:84:e7:7a:
9f:91:69:77:f2:cd:aa:7a:a8:d5:8c:d3:a4:90:d0:
73:ca:e5:ef:bf:7a:bc:42:af:2f:8e:a0:82:e9:9f:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:87:20:18:0E:DE:6D:A6:B4:28:09:94:5A:1F:F9:9E:5E:6F:E7:51
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yocgGA7ebaa0KAmUWh_5nl5v51E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.180.0/24
193.124.90.0/24
194.87.208.0/24
194.87.226.0/24
194.87.231.0/24
195.133.15.0/24
195.133.25.0/24
195.133.27.0/24
212.192.4.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:07:93:97:50:71:f8:a7:25:86:f4:52:d5:70:19:57:8d:9c:
39:58:0e:23:66:10:b2:c7:6a:01:c3:3f:9f:53:a9:1f:0a:fc:
7d:cf:25:eb:65:a5:a8:08:7f:3a:72:67:1a:e8:af:4e:59:77:
ce:6e:1b:26:ac:34:c8:11:65:59:cf:89:05:70:39:68:20:ab:
55:f0:21:b3:a3:3b:b4:d7:07:85:dd:2b:b2:41:26:04:c7:09:
cf:c4:63:73:62:7c:91:b9:63:0e:da:97:09:15:f2:02:fa:5e:
9f:60:b3:f5:2b:8a:cf:42:15:da:4b:c2:48:31:05:39:4f:8b:
72:13:4e:09:60:68:ec:85:9d:9c:95:50:9d:d0:b6:93:1c:a3:
e2:06:8c:47:5e:d3:39:ae:c5:db:6a:2e:13:dc:d5:5c:16:02:
e7:9e:e7:ff:e8:ac:8d:00:05:64:55:c2:b9:72:53:c2:a3:a7:
15:b0:5e:f9:bf:de:a4:9e:93:61:bf:b8:5e:c6:6c:f5:74:e6:
8f:0f:94:41:de:06:05:53:b1:b5:d8:52:bc:24:3f:a6:09:00:
6a:7c:ad:33:9e:92:8f:58:59:7f:f7:5e:d2:c0:98:25:ed:78:
a8:cd:af:49:41:98:51:4f:61:5b:47:c2:a9:d7:99:6e:36:ac:
a6:31:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:52 2024 by rpki-client on console-ams.rpki-client.org