Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ywFWkBcjMb1AiArkWupGRvz77Ao.roa
File: ywFWkBcjMb1AiArkWupGRvz77Ao.roa (raw, json)
Hash identifier: afbnosWkYOJDJh/KqspqOq2t942KBpxcfFTKufQsbKE=
Subject key identifier: CB:01:56:90:17:23:31:BD:40:88:0A:E4:5A:EA:46:46:FC:FB:EC:0A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187108383F6A4C76C07BE7B62E3E3621E0D
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ywFWkBcjMb1AiArkWupGRvz77Ao.roa
Signing time: Thu 23 Mar 2023 22:07:46 +0000
ROA not before: Thu 23 Mar 2023 22:07:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.28.156.0/24 maxlen: 24
194.28.158.0/24 maxlen: 24
194.104.4.0/24 maxlen: 24
212.69.132.0/24 maxlen: 24
194.104.5.0/24 maxlen: 24
194.104.6.0/24 maxlen: 24
212.69.133.0/24 maxlen: 24
212.69.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:83:83:f6:a4:c7:6c:07:be:7b:62:e3:e3:62:1e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 23 22:07:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb015690172331bd40880ae45aea4646fcfbec0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:54:81:22:e3:d8:aa:0d:5c:13:d9:e2:f2:ce:
b6:d0:eb:27:6c:1c:33:5d:8d:21:55:26:c4:33:59:
89:64:fa:53:dc:71:07:da:bf:ee:1a:17:f8:b6:fa:
83:b3:d3:ef:0c:8e:2f:90:aa:5e:60:ad:19:3c:f4:
1f:b1:dd:26:3b:3e:71:b0:10:9b:57:0c:9a:d8:cf:
f0:63:3e:07:65:5f:4b:f2:8c:59:2b:27:c9:cd:81:
75:ae:23:b1:d1:5c:79:0f:03:d2:5b:42:e5:f9:4f:
28:f5:65:2a:36:d8:1a:e0:ea:01:c8:a4:f0:6e:8c:
c7:6e:15:b5:d8:64:9a:fb:ee:63:1a:55:5c:fe:64:
b0:98:b4:de:ec:a4:59:da:7d:df:81:ed:23:26:34:
fc:14:82:92:c4:79:5c:0d:2e:7c:56:41:ef:3c:2a:
f7:1f:41:cb:f7:90:f7:3e:17:2f:d7:22:d8:5c:a6:
43:21:77:2f:61:c0:a3:af:a4:70:e8:88:de:0f:5b:
73:ae:5d:4a:1f:f9:9f:3d:72:0a:0b:40:3b:9a:84:
df:60:0c:a5:89:d2:17:0d:88:bf:9e:09:73:c1:f8:
b8:a8:e2:cc:3e:e1:17:d5:8b:ef:74:09:17:8f:ca:
92:2c:2c:e0:8c:8d:01:25:aa:55:56:ab:02:0b:b9:
35:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:56:90:17:23:31:BD:40:88:0A:E4:5A:EA:46:46:FC:FB:EC:0A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/ywFWkBcjMb1AiArkWupGRvz77Ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.156.0/24
194.28.158.0/24
194.104.4.0-194.104.6.255
212.69.132.0-212.69.134.255
Signature Algorithm: sha256WithRSAEncryption
3a:d2:8c:5e:aa:28:c8:65:80:c2:74:76:92:7e:7a:98:60:cd:
e9:bf:2f:d0:b8:dd:b3:1e:23:17:36:01:18:58:bb:06:75:4f:
ea:be:b1:85:7e:56:9d:54:df:b4:b9:c9:40:d6:20:2e:ec:93:
1a:79:a8:6b:06:69:f9:9a:11:ce:df:95:aa:2e:15:80:a3:05:
c4:25:5a:2a:c1:72:ed:57:9e:72:f9:ea:ac:b1:4d:c0:36:82:
2f:c1:17:58:06:c3:ba:6e:6a:12:55:33:05:69:75:ae:6d:23:
7d:20:0e:69:0a:55:d1:6c:7f:6b:8e:2c:bf:db:4a:06:96:e1:
97:6f:4a:48:20:72:9d:5c:54:c8:a9:07:b4:6e:6e:ca:c3:06:
42:7e:2d:4e:af:72:04:06:54:69:02:f5:97:39:93:bb:33:0d:
a8:50:fe:9c:8e:01:98:87:7c:4c:ec:2a:6e:81:e6:0a:93:88:
b0:cf:e5:c9:1c:53:6b:44:22:49:f6:da:dc:08:29:a3:84:23:
cf:5e:f0:3e:74:dc:6c:bc:66:81:76:c3:e3:14:c8:92:a3:cd:
d5:78:3b:c0:77:41:99:fe:b6:80:e3:d8:d9:ff:06:9a:11:02:
29:35:ce:f0:c6:33:be:a7:c0:eb:25:f7:bf:19:58:79:b7:d1:
50:d4:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:24 2023 by rpki-client on console-ams.rpki-client.org