Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yzyc3PolJKGrFe8jwltnNiR4n0o.roa
File: yzyc3PolJKGrFe8jwltnNiR4n0o.roa (raw, json)
Hash identifier: 74iZgv+LjTZnYdwALo7kps1NFK/q8qX3d6HxE0oWhas=
Subject key identifier: CB:3C:9C:DC:FA:25:24:A1:AB:15:EF:23:C2:5B:67:36:24:78:9F:4A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C2133081B452858922E6E62A792659476
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yzyc3PolJKGrFe8jwltnNiR4n0o.roa
Signing time: Thu 30 Nov 2023 17:07:21 +0000
ROA not before: Thu 30 Nov 2023 17:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 194.87.1.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
194.87.11.0/24 maxlen: 24
194.87.12.0/24 maxlen: 24
194.87.21.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
195.58.58.0/23 maxlen: 23
195.58.62.0/23 maxlen: 23
194.87.104.0/24 maxlen: 24
194.87.108.0/24 maxlen: 24
194.87.114.0/23 maxlen: 23
194.87.122.0/24 maxlen: 24
194.87.124.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.131.0/24 maxlen: 24
195.133.0.0/24 maxlen: 24
194.87.134.0/23 maxlen: 23
194.87.56.0/24 maxlen: 24
193.124.80.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.84.0/23 maxlen: 23
194.87.229.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
192.124.178.0/24 maxlen: 24
194.87.179.0/24 maxlen: 24
192.124.189.0/24 maxlen: 24
195.133.40.0/23 maxlen: 23
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:21:33:08:1b:45:28:58:92:2e:6e:62:a7:92:65:94:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 30 17:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb3c9cdcfa2524a1ab15ef23c25b673624789f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:4a:61:2e:1c:0a:48:91:12:ae:df:45:60:
52:b9:2e:6d:08:63:1b:36:27:7a:37:66:f3:26:92:
c9:37:19:ae:fb:54:6e:be:01:e6:a1:49:ac:11:71:
96:bb:66:0b:86:cd:be:8c:fc:db:5a:84:11:5c:43:
21:d7:05:7a:d0:59:ce:be:7e:5d:3f:3e:0e:de:af:
f7:ae:cd:2d:0e:10:53:3b:35:3b:3c:d2:3e:2e:68:
b8:d5:b4:24:16:a2:38:01:4d:a3:29:83:80:71:8c:
27:16:fd:6b:8d:f6:f8:e3:36:3d:a6:5a:10:23:a5:
65:73:21:3a:d7:4a:e3:db:a3:68:03:6e:fb:be:52:
17:90:37:99:28:55:59:d9:7b:86:60:87:cb:9e:36:
ea:d9:b2:b3:f2:cd:d0:bd:d6:4c:b4:a0:40:2f:5d:
ff:55:03:9e:ff:2d:10:52:82:48:fe:9f:52:21:64:
72:c3:f9:06:e3:69:57:8e:5f:a0:61:0c:c5:8a:ac:
f0:0d:1d:9a:cc:fc:28:b4:3b:47:18:fc:90:25:fb:
b3:06:b2:af:1c:cd:ea:16:74:66:04:5a:96:9d:90:
55:64:63:4f:a7:69:e0:3d:c1:e9:3d:82:1d:6e:8f:
62:9f:03:19:4b:56:03:05:cf:12:44:55:3b:80:37:
47:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3C:9C:DC:FA:25:24:A1:AB:15:EF:23:C2:5B:67:36:24:78:9F:4A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yzyc3PolJKGrFe8jwltnNiR4n0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
192.124.189.0/24
193.124.16.0/24
193.124.80.0/24
193.124.133.0/24
193.124.200.0/24
194.58.47.0/24
194.87.1.0/24
194.87.11.0-194.87.12.255
194.87.18.0/24
194.87.21.0/24
194.87.30.0/24
194.87.56.0/24
194.87.83.0/24
194.87.104.0/24
194.87.108.0/24
194.87.114.0/23
194.87.122.0/24
194.87.124.0/24
194.87.131.0/24
194.87.134.0/23
194.87.179.0/24
194.87.200.0/24
194.87.229.0/24
195.58.58.0/23
195.58.62.0/23
195.133.0.0/24
195.133.40.0/23
195.133.73.0/24
195.133.84.0/23
212.192.11.0/24
212.192.214.0/24
Signature Algorithm: sha256WithRSAEncryption
70:04:9e:76:3f:13:22:90:45:9a:50:ba:b5:53:99:52:f6:d6:
9e:fc:ef:40:a1:0b:bb:1c:46:19:af:d9:ef:cd:04:69:ec:d9:
df:29:94:66:44:10:6b:15:a0:d4:54:da:b8:be:48:22:75:fb:
8d:2c:39:69:61:a1:40:00:ab:9f:20:95:99:ad:c6:e5:56:55:
98:e9:44:36:98:42:79:c3:43:84:da:2a:c3:99:78:55:0a:80:
2d:3f:39:42:ce:b0:01:8a:6a:2e:c1:89:e8:53:9a:ed:21:64:
38:9f:ac:3f:74:a8:b3:21:57:ca:43:24:64:82:a8:a3:54:1e:
8b:bb:58:32:b1:82:70:67:ea:fd:07:43:aa:5f:15:64:41:2c:
19:22:fa:99:60:a9:d9:ef:a4:e7:de:ab:89:49:87:cf:01:91:
ea:8e:e3:4f:a8:5e:48:08:6c:d1:03:fe:f7:85:e6:79:1d:a1:
71:64:31:4a:af:a2:01:46:7c:4e:c4:06:5b:10:79:e9:7a:a0:
53:ff:77:32:df:4c:1f:29:2d:77:30:fe:2a:24:32:58:11:27:
b6:48:00:1c:f6:42:6b:25:a7:4a:36:2d:aa:ba:59:7c:6e:27:
90:bc:e2:64:fb:fd:a3:ee:c3:8a:c5:1a:1b:41:34:57:68:44:
7a:8a:c6:cb
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAYwhMwgbRShYki5uYqeSZZR2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMTMwMTcwNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjNjOWNkY2ZhMjUyNGExYWIxNWVmMjNjMjViNjczNjI0Nzg5ZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLtKYS4cCkiREq7fRWBSuS5tCGMb
Nid6N2bzJpLJNxmu+1RuvgHmoUmsEXGWu2YLhs2+jPzbWoQRXEMh1wV60FnOvn5d
Pz4O3q/3rs0tDhBTOzU7PNI+Lmi41bQkFqI4AU2jKYOAcYwnFv1rjfb44zY9ploQ
I6VlcyE610rj26NoA277vlIXkDeZKFVZ2XuGYIfLnjbq2bKz8s3QvdZMtKBAL13/
VQOe/y0QUoJI/p9SIWRyw/kG42lXjl+gYQzFiqzwDR2azPwotDtHGPyQJfuzBrKv
HM3qFnRmBFqWnZBVZGNPp2ngPcHpPYIdbo9inwMZS1YDBc8SRFU7gDdHsQIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFMs8nNz6JSShqxXvI8JbZzYkeJ9KMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEveXp5YzNQb2xKS0dyRmU4andsdG5OaVI0bjBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBzwQCAAEwgcgDBADA
fLIDBADAfL0DBADBfBADBADBfFADBADBfIUDBADBfMgDBADCOi8DBADCVwEwDAME
AMJXCwMEAMJXDAMEAMJXEgMEAMJXFQMEAMJXHgMEAMJXOAMEAMJXUwMEAMJXaAME
AMJXbAMEAcJXcgMEAMJXegMEAMJXfAMEAMJXgwMEAcJXhgMEAMJXswMEAMJXyAME
AMJX5QMEAcM6OgMEAcM6PgMEAMOFAAMEAcOFKAMEAMOFSQMEAcOFVAMEANTACwME
ANTA1jANBgkqhkiG9w0BAQsFAAOCAQEAcASedj8TIpBFmlC6tVOZUvbWnvzvQKEL
uxxGGa/Z780EaezZ3ymUZkQQaxWg1FTauL5IInX7jSw5aWGhQACrnyCVma3G5VZV
mOlENphCecNDhNoqw5l4VQqALT85Qs6wAYpqLsGJ6FOa7SFkOJ+sP3SosyFXykMk
ZIKoo1Qei7tYMrGCcGfq/QdDql8VZEEsGSL6mWCp2e+k596riUmHzwGR6o7jT6he
SAhs0QP+94XmeR2hcWQxSq+iAUZ8TsQGWxB56XqgU/93Mt9MHyktdzD+KiQyWBEn
tkgAHPZCayWnSjYtqrpZfG4nkLziZPv9o+7DisUaG0E0V2hEeorGyw==
-----END CERTIFICATE-----
Generated at Tue Dec 5 11:14:54 2023 by rpki-client on console-fra.rpki-client.org