Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-8MfamldJR3apgC6bSh8vgKWUtA.roa
File: 1-8MfamldJR3apgC6bSh8vgKWUtA.roa (raw, json)
Hash identifier: hAj0VLN02O812mGiWxrHQjOFMcDrNZxI8oCzuQA0T0w=
Subject key identifier: FB:C3:1F:6A:69:5D:25:1D:DA:A6:00:BA:6D:28:7C:BE:02:96:52:D0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01865508997868CBDE460F5CB9BF45B65B27
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-8MfamldJR3apgC6bSh8vgKWUtA.roa
Signing time: Wed 15 Feb 2023 12:24:32 +0000
ROA not before: Wed 15 Feb 2023 12:24:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200113
IP address blocks: 194.87.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:08:99:78:68:cb:de:46:0f:5c:b9:bf:45:b6:5b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 15 12:24:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbc31f6a695d251ddaa600ba6d287cbe029652d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:38:9e:f7:13:08:eb:35:c6:8a:58:61:61:45:
63:c7:07:0a:d0:57:f3:af:10:bf:04:32:d9:d2:b4:
bd:8c:f3:2b:63:72:0d:ef:b7:df:fd:de:85:e6:6a:
2c:d1:2d:a7:2e:ec:69:c9:4a:53:b6:e0:eb:d4:28:
c8:e5:a8:30:b7:28:25:54:1f:59:ba:3f:0f:cb:62:
46:80:49:f6:8e:47:b6:69:3d:9a:a4:2e:09:10:d3:
06:bc:66:62:64:45:5f:e4:d2:7e:49:9a:02:42:fe:
e4:0e:69:19:e7:dc:28:4f:76:99:a8:a1:59:ec:22:
a7:59:ff:57:a5:e4:0a:9c:0c:29:75:b2:29:34:95:
15:29:23:13:88:f6:93:3c:45:41:db:9c:09:da:e9:
a4:8c:8d:b7:d5:a1:d2:0d:88:0b:c2:a1:24:da:d6:
0a:5e:ec:e4:29:77:7f:5f:a1:77:26:6c:00:f0:ca:
c2:29:ec:c7:9b:b5:bf:9a:93:b2:3b:39:e6:8b:3d:
ec:a0:50:f6:01:f1:c3:c0:ce:76:a0:67:45:09:57:
22:6c:e1:fb:b8:32:75:96:e0:9a:48:72:97:bb:44:
02:88:99:a8:37:49:70:8c:54:4b:e8:4c:18:47:b8:
ff:2b:6e:dd:c3:41:c1:bc:64:e9:b5:23:1e:de:37:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C3:1F:6A:69:5D:25:1D:DA:A6:00:BA:6D:28:7C:BE:02:96:52:D0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-8MfamldJR3apgC6bSh8vgKWUtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:11:3d:4d:84:de:ba:1e:67:91:84:a3:8d:dd:b4:66:4a:e0:
29:f5:46:aa:db:8c:7a:82:18:e4:6f:f3:0d:88:05:38:67:62:
7f:34:2d:6d:6b:ce:43:9d:8e:57:f6:a4:b7:10:35:16:ae:96:
81:a4:9d:6b:49:f5:78:42:1f:85:b0:f8:2f:c6:e3:4e:84:bd:
77:fc:63:b3:19:9c:0d:e6:85:76:3d:c6:ff:13:4c:75:e0:05:
f5:f7:b4:97:e8:4f:07:54:0d:ee:ae:af:25:4c:d6:32:9d:9f:
8b:e6:65:77:31:2f:a4:5e:35:4d:5f:12:41:19:b8:d7:24:ea:
1c:37:fb:88:c9:0e:23:d7:a5:d8:e2:7a:9f:ba:f2:18:ff:81:
88:a1:f7:89:b4:3e:80:cf:0b:d2:3b:0a:10:f1:87:a2:0f:dc:
fb:eb:7a:06:65:5a:d8:51:02:36:ba:e1:35:69:36:b4:38:b3:
6b:03:f6:8b:78:b5:5f:a5:9c:fd:ea:cd:08:0e:e6:27:ad:e5:
f5:29:30:61:7c:6b:dc:5b:25:87:c2:00:da:27:be:fa:c7:f6:
57:61:dd:34:4d:84:fd:04:a6:69:50:b5:30:88:d1:bc:68:71:
ec:d3:d4:bb:02:b1:42:37:67:d0:72:b3:f3:50:c9:f6:5c:2a:
77:ab:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:54 2023 by rpki-client on console-fra.rpki-client.org