Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-GB88ES0eWch9mlE1xOaDXFwwJk.roa
File: 1-GB88ES0eWch9mlE1xOaDXFwwJk.roa (raw, json)
Hash identifier: P+k+tmtEYHKkciSXr+bwEkVChd5aGXkaC4TyBrt1+yc=
Subject key identifier: F8:60:7C:F0:44:B4:79:67:21:F6:69:44:D7:13:9A:0D:71:70:C0:99
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186492E307A73B1E37A2705318F8DED1B7C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-GB88ES0eWch9mlE1xOaDXFwwJk.roa
Signing time: Mon 13 Feb 2023 05:10:09 +0000
ROA not before: Mon 13 Feb 2023 05:10:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202512
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:2e:30:7a:73:b1:e3:7a:27:05:31:8f:8d:ed:1b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 13 05:10:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8607cf044b4796721f66944d7139a0d7170c099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:ee:33:99:b6:40:69:57:7b:f3:32:1a:a4:
77:00:5f:98:d0:ac:61:ba:c0:be:ec:e9:51:2d:76:
f2:14:91:63:f8:33:cb:85:c1:e6:df:ac:84:e9:61:
18:eb:cc:f1:c7:c8:f5:1a:7e:14:4c:48:12:cf:a2:
be:96:a7:f5:d1:3a:3f:e8:c0:a5:98:ed:31:d1:d6:
76:89:c6:98:b9:09:60:51:34:e9:8d:d5:23:9e:5e:
7e:96:be:4d:52:5f:ec:9f:7c:6f:82:12:75:f7:ce:
e6:07:eb:90:14:eb:6d:19:48:7b:9e:b2:db:3d:4b:
0b:9a:87:e3:c5:ed:0c:0b:69:fd:f0:d4:4c:67:1e:
86:3e:99:84:73:20:8e:25:7d:56:4c:7c:47:4b:5e:
6a:b1:de:ff:4a:1e:a1:3c:26:e5:36:f5:35:6b:69:
a6:46:a4:e5:ef:d8:cc:1f:43:e9:7f:bd:8f:32:0f:
45:d2:ac:8e:70:08:30:70:2c:47:83:f4:3b:c4:6c:
56:90:ad:00:68:30:e0:96:6b:04:20:f9:08:c6:82:
b2:fa:30:b4:de:e8:fc:a5:ae:b6:b8:75:8b:1b:e4:
a8:91:8c:e3:df:a7:d2:1f:e5:00:85:58:d7:09:9b:
24:48:fd:74:5d:9a:8e:57:67:13:5b:89:38:10:c5:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:60:7C:F0:44:B4:79:67:21:F6:69:44:D7:13:9A:0D:71:70:C0:99
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1-GB88ES0eWch9mlE1xOaDXFwwJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c2:ed:76:2c:26:f2:ff:7b:46:79:d7:be:d5:e3:b1:49:a5:
23:68:91:df:df:69:ef:0f:8b:81:db:ac:a2:d8:00:bf:49:eb:
be:92:34:04:e3:ae:07:a8:ad:2d:c5:e3:9b:c9:5a:90:ad:7e:
1e:24:21:76:a6:50:8a:f3:ef:a1:e1:6b:90:5c:2d:81:d5:71:
d4:2d:18:6e:c8:a8:35:fa:de:d9:b2:f2:58:38:29:cf:a8:44:
56:89:e0:18:e5:65:33:97:42:94:bd:74:bb:ac:c5:1d:fb:98:
74:b7:7c:27:d2:a7:d3:ac:73:c0:b7:cf:2f:2a:79:ef:cb:de:
e2:6d:16:86:52:fe:93:40:60:4e:cf:4a:68:96:f2:bd:dd:27:
02:5b:7c:e6:9e:db:a5:c0:07:9f:f4:69:2d:00:8c:b3:c6:a1:
85:a6:17:35:b0:3d:e2:c8:c2:12:4f:c6:89:9c:6d:fe:97:ef:
53:e7:f1:35:20:0c:a1:c4:52:72:9e:db:f2:8a:5d:80:f3:55:
42:0f:4f:4e:25:bb:ff:d5:d6:73:5e:fc:e0:57:8a:8b:d2:31:
75:56:de:6a:97:79:f6:63:1b:5e:02:ad:e2:81:4f:f4:bc:83:
6d:ad:ba:23:b1:89:90:cd:30:d1:b7:6d:a1:e2:08:20:6b:b6:
2d:73:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:54 2023 by rpki-client on console-fra.rpki-client.org