Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1tvRuq5_gRmBTcxqVhk5rbAqkho.roa
File: 1tvRuq5_gRmBTcxqVhk5rbAqkho.roa (raw, json)
Hash identifier: IghoPTFGavX/Oadgh7yt4FqwRSi6/M5U41qrv4EwoGs=
Subject key identifier: D6:DB:D1:BA:AE:7F:81:19:81:4D:CC:6A:56:19:39:AD:B0:2A:92:1A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B8F546D032AA176FCF9D5F06AEC20E720
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1tvRuq5_gRmBTcxqVhk5rbAqkho.roa
Signing time: Thu 02 Nov 2023 09:19:16 +0000
ROA not before: Thu 02 Nov 2023 09:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210107
IP address blocks: 194.87.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:54:6d:03:2a:a1:76:fc:f9:d5:f0:6a:ec:20:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 2 09:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6dbd1baae7f8119814dcc6a561939adb02a921a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:46:ea:d0:0d:ca:f9:d2:6e:90:dd:84:be:
9b:97:53:a9:3c:4e:a5:c4:18:37:69:25:ec:a4:99:
53:85:84:64:13:c5:d5:67:35:b3:11:d3:3d:da:9b:
be:bc:a9:4e:b2:8d:79:6c:7c:ad:e7:14:be:57:a3:
3b:79:88:0f:09:04:f9:12:58:19:7e:72:1a:6c:5e:
e2:5e:1a:a9:0b:26:63:98:7c:87:4f:11:b2:b5:d9:
4b:1f:b9:ad:7c:cd:67:fa:fb:ad:b8:df:6c:66:6d:
ef:06:c5:ff:9f:59:14:17:ba:8b:57:2d:ed:b4:8e:
d3:83:6b:5a:98:01:fe:6a:41:f8:5c:23:02:21:1e:
11:30:4f:65:8e:49:e4:d9:36:6a:e4:4a:45:c0:88:
e2:47:5c:b1:c9:0e:1d:14:92:89:49:a8:82:c1:60:
b0:45:49:ad:14:f4:9e:46:8f:c9:2a:da:95:9f:fc:
10:a6:01:9e:5e:b3:6a:4a:55:e5:11:90:ec:00:c9:
be:55:d7:aa:23:da:f9:59:d3:4f:94:99:31:23:0a:
76:a9:b1:b0:41:23:f1:5f:23:d3:20:f4:62:f1:a9:
e7:64:b1:e2:9e:ef:56:2b:f2:82:e3:ba:48:1c:21:
b4:96:c8:94:83:d3:88:e7:16:de:cc:fa:78:01:d8:
9f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DB:D1:BA:AE:7F:81:19:81:4D:CC:6A:56:19:39:AD:B0:2A:92:1A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1tvRuq5_gRmBTcxqVhk5rbAqkho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.81.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9b:7e:d2:90:c2:a6:f8:5d:ec:9f:40:ec:d1:50:34:10:27:
31:99:10:9a:c2:6d:ee:65:68:45:c6:0b:c1:66:02:15:64:f5:
e5:43:fb:c8:83:9a:80:7f:67:4c:0d:d1:05:b7:97:54:42:0a:
6b:8b:f2:71:50:f9:fe:8c:a9:41:82:b5:62:aa:6c:5b:e2:1f:
67:e7:e0:a7:58:f5:8b:97:3c:55:2b:bb:f4:2c:45:8c:8c:a2:
1b:36:dd:5e:21:c0:e5:dc:95:6f:b8:d0:74:1c:a3:e5:3f:7f:
7d:39:4b:d7:7f:82:90:f7:6e:e6:6f:5a:03:14:cc:31:75:94:
63:a1:aa:e7:72:17:0b:46:df:ee:d2:da:6d:9f:3a:80:78:7d:
93:f2:f9:3b:2c:1f:98:31:26:6c:1d:75:74:eb:ae:af:94:12:
c2:d3:9f:39:83:05:4b:8a:a8:dd:01:5e:c8:3b:ed:14:e5:07:
4c:6e:d7:1e:24:07:bd:a5:a9:21:3c:bb:8b:b6:83:bc:dd:c5:
98:b1:01:e7:db:9f:7d:3f:0b:fd:67:1e:b7:4c:5d:ae:9d:5d:
d1:1b:ba:d0:d4:6a:0b:01:08:20:73:9a:ec:63:28:2d:0e:77:
fb:9a:07:07:83:dd:93:60:d7:70:18:3d:8d:79:b4:29:7c:a3:
1b:43:1b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 12:13:00 2023 by rpki-client on console-ams.rpki-client.org