Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yxbibTgnanDsr0HGKK2w-i__wds.roa
File: yxbibTgnanDsr0HGKK2w-i__wds.roa (raw, json)
Hash identifier: 6b4ZkEazlFo0hFnqKyf8D0eatnjZejN5D/CcoJcL3Uo=
Subject key identifier: CB:16:E2:6D:38:27:6A:70:EC:AF:41:C6:28:AD:B0:FA:2F:FF:C1:DB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185BB30E4AB0B8A54D199EF3EC176E249A4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yxbibTgnanDsr0HGKK2w-i__wds.roa
Signing time: Mon 16 Jan 2023 15:27:01 +0000
ROA not before: Mon 16 Jan 2023 15:27:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20773
IP address blocks: 194.87.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Jan 2023 19:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bb:30:e4:ab:0b:8a:54:d1:99:ef:3e:c1:76:e2:49:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 16 15:27:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb16e26d38276a70ecaf41c628adb0fa2fffc1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:58:6f:9d:aa:98:db:9f:e5:cd:19:ca:d4:79:
16:9c:0d:4c:bf:79:7c:20:5f:93:b2:a6:87:34:ad:
76:06:39:bf:3d:d3:51:b6:75:25:3b:c8:7c:fe:1d:
35:f1:30:26:64:63:83:3e:3e:d1:f5:3f:04:02:f8:
dd:bc:09:08:bd:90:8d:db:91:c1:97:0b:7b:5a:51:
bf:cf:47:82:1a:7c:60:06:1b:c8:d5:f7:ff:e8:53:
eb:77:7c:6f:bb:e0:44:a1:cd:bc:16:2a:ae:7d:06:
df:a9:bf:bc:cc:7b:a5:28:a4:8a:88:65:53:5a:1f:
76:ad:c4:3f:1f:30:5f:92:7c:db:b5:21:02:e8:99:
3a:3d:3d:52:62:ff:c1:0b:5a:c0:f9:ea:6b:2b:d8:
92:03:be:28:6e:3b:d9:87:a8:b6:15:16:77:56:44:
25:73:54:17:68:e9:61:35:60:9a:3c:e1:c8:b8:1b:
03:f2:75:45:81:a0:30:29:bb:0f:d9:c3:3c:db:b6:
5d:0b:93:8e:13:4d:67:0b:af:12:c5:a9:45:bb:a7:
69:08:fd:25:d9:a6:37:ba:a0:6e:18:9e:f2:ed:4d:
3b:c0:93:4b:32:91:d9:99:63:3b:18:cd:62:c0:91:
1e:01:12:f9:0a:cd:f0:03:06:e4:38:d0:12:a4:2a:
9a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:16:E2:6D:38:27:6A:70:EC:AF:41:C6:28:AD:B0:FA:2F:FF:C1:DB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yxbibTgnanDsr0HGKK2w-i__wds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:47:ff:8e:66:48:5b:a5:40:de:bc:93:00:98:31:08:ed:84:
9d:70:36:2e:02:4e:d7:f1:0b:53:af:fd:54:69:2e:30:2f:31:
3b:6d:d2:25:93:f1:e3:de:06:21:75:34:cb:fa:99:17:99:40:
f0:8d:97:9e:cd:93:76:2a:79:d9:11:9e:ed:ab:14:2f:4b:33:
b4:47:0c:67:75:60:4d:57:75:e4:4e:45:ee:1c:34:9f:a0:9d:
fd:11:84:2c:ac:73:70:ef:6f:7a:38:78:e3:16:94:51:04:07:
bc:35:6c:d4:91:75:b3:1f:c3:7e:0c:d5:52:58:f8:8b:93:53:
ca:5e:37:14:c0:98:8c:70:da:c4:bd:54:5a:bc:83:fa:3c:e6:
ae:57:87:a8:21:58:57:ea:31:ae:ae:3d:1d:46:8f:79:38:5f:
80:dc:5a:ad:14:34:d2:fa:9c:2d:54:fc:e3:e9:79:3e:cc:e1:
01:b2:b3:de:33:e7:3a:87:b7:da:82:7b:d7:60:d7:4e:29:44:
cb:b8:92:4f:ab:d8:5c:ca:bc:73:ae:a2:77:1e:99:28:f6:21:
bf:d5:62:bf:36:a4:e9:cf:c0:93:bd:87:82:73:1f:da:4a:11:
44:41:14:8e:0c:b0:92:f4:ed:50:2f:30:a4:53:98:fb:39:46:
eb:1d:39:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYW7MOSrC4pU0ZnvPsF24kmkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTE2MTUyNzAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjE2ZTI2ZDM4Mjc2YTcwZWNhZjQxYzYyOGFkYjBmYTJmZmZjMWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFhvnaqY25/lzRnK1HkWnA1Mv3l8
IF+TsqaHNK12Bjm/PdNRtnUlO8h8/h018TAmZGODPj7R9T8EAvjdvAkIvZCN25HB
lwt7WlG/z0eCGnxgBhvI1ff/6FPrd3xvu+BEoc28FiqufQbfqb+8zHulKKSKiGVT
Wh92rcQ/HzBfknzbtSEC6Jk6PT1SYv/BC1rA+eprK9iSA74objvZh6i2FRZ3VkQl
c1QXaOlhNWCaPOHIuBsD8nVFgaAwKbsP2cM827ZdC5OOE01nC68SxalFu6dpCP0l
2aY3uqBuGJ7y7U07wJNLMpHZmWM7GM1iwJEeARL5Cs3wAwbkONASpCqa2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsW4m04J2pw7K9BxiitsPov/8HbMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEveXhiaWJUZ25hbkRzcjBIR0tLMnctaV9fd2RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlciMA0G
CSqGSIb3DQEBCwUAA4IBAQA/R/+OZkhbpUDevJMAmDEI7YSdcDYuAk7X8QtTr/1U
aS4wLzE7bdIlk/Hj3gYhdTTL+pkXmUDwjZeezZN2KnnZEZ7tqxQvSzO0RwxndWBN
V3XkTkXuHDSfoJ39EYQsrHNw7296OHjjFpRRBAe8NWzUkXWzH8N+DNVSWPiLk1PK
XjcUwJiMcNrEvVRavIP6POauV4eoIVhX6jGurj0dRo95OF+A3FqtFDTS+pwtVPzj
6Xk+zOEBsrPeM+c6h7fagnvXYNdOKUTLuJJPq9hcyrxzrqJ3Hpko9iG/1WK/NqTp
z8CTvYeCcx/aShFEQRSODLCS9O1QLzCkU5j7OUbrHTmt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:31 2024 by rpki-client on console-fra.rpki-client.org