Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1wwu7S8ZA0on0Fysn0pWQOoO4CU.roa
File: 1wwu7S8ZA0on0Fysn0pWQOoO4CU.roa (raw, json)
Hash identifier: lfjBpdgfRmvfcjTGzw62+VBa1u5Fj0yJdVo1fN3r52Q=
Subject key identifier: D7:0C:2E:ED:2F:19:03:4A:27:D0:5C:AC:9F:4A:56:40:EA:0E:E0:25
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BB7687198416CC947B11A1BAB4F1AB9DF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1wwu7S8ZA0on0Fysn0pWQOoO4CU.roa
Signing time: Fri 10 Nov 2023 04:05:57 +0000
ROA not before: Fri 10 Nov 2023 04:05:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 194.87.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:68:71:98:41:6c:c9:47:b1:1a:1b:ab:4f:1a:b9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 10 04:05:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d70c2eed2f19034a27d05cac9f4a5640ea0ee025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:a9:1a:ce:40:72:a6:44:d3:f1:d6:d0:f6:
42:6c:9b:0c:0d:a2:1f:99:51:29:98:54:1c:0c:e1:
4e:5e:e4:f9:46:4f:af:3b:eb:b9:ab:ec:b4:07:fe:
d6:9b:6a:88:67:f9:74:7a:4c:6e:49:f4:28:43:80:
01:4a:05:86:9c:60:ed:46:64:21:c6:b8:f8:99:1e:
46:a8:8e:90:04:f2:18:e6:4f:63:27:62:2b:87:dd:
55:20:5e:20:b0:d3:58:31:81:6e:d6:ec:72:c4:5e:
d7:48:72:44:93:0b:65:c0:7b:e6:f7:02:8d:8f:42:
a6:5a:f5:c5:18:8f:ff:a6:8f:0f:92:36:4b:f5:e6:
e9:33:b4:5d:3c:ea:38:72:0a:18:9b:b4:64:b5:cd:
0d:7e:0e:81:70:6c:c6:e5:5a:2b:70:5f:64:64:84:
3e:55:06:94:ba:4d:12:47:45:0c:ee:2d:19:f1:5f:
c4:6f:f7:d7:42:f7:16:cc:d9:95:b4:41:f8:32:be:
e9:9c:93:ff:fd:88:b0:ef:ed:6a:f5:05:b7:67:4b:
01:e1:a4:cb:37:38:af:0f:1b:14:b4:d8:87:3e:e2:
00:9e:7b:24:24:f3:c0:fa:02:f9:ea:c2:c1:ec:d3:
a3:6d:00:ff:5a:ab:2c:04:60:3e:a0:8e:5a:89:a5:
ae:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0C:2E:ED:2F:19:03:4A:27:D0:5C:AC:9F:4A:56:40:EA:0E:E0:25
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1wwu7S8ZA0on0Fysn0pWQOoO4CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.73.0/24
Signature Algorithm: sha256WithRSAEncryption
75:e3:f8:b1:c9:59:3f:04:2c:27:1e:dc:59:2c:c5:af:c7:27:
09:d5:12:d4:9d:71:7b:28:46:cf:d7:ff:b2:4a:e6:f1:87:dd:
48:c6:9d:94:94:9d:1e:40:75:ca:42:8c:66:ba:50:82:4f:70:
1f:00:a1:08:9c:b5:62:bd:a5:80:58:25:17:16:d8:1e:cf:55:
b6:d6:dd:4c:bd:3c:44:69:45:83:78:07:3a:b4:7b:cc:72:b2:
da:da:26:82:95:65:72:4d:13:55:31:02:d7:f8:65:af:5d:e2:
80:6a:ce:a1:48:4c:26:93:39:f5:19:71:f3:bc:65:8b:9c:c6:
a0:c0:b4:9e:cc:d4:d2:c4:20:72:0f:e8:eb:ee:db:22:68:e8:
e2:f7:55:6c:01:2a:6d:44:59:db:9e:bb:75:ac:3b:d9:51:fe:
64:3b:1a:58:17:61:79:39:fe:0d:62:42:f8:98:37:c5:5a:2b:
05:82:7e:2a:a3:6d:65:68:37:29:58:e0:cf:6a:3b:c2:d7:fb:
0f:b8:63:87:f5:cf:d8:6d:fa:f0:91:bf:2f:2c:f2:4f:5b:bd:
ce:fa:45:80:b6:17:08:6d:a3:bc:ab:d1:bb:f8:04:4a:2d:cf:
d9:93:be:c6:58:f8:6c:65:32:b0:36:02:8a:98:18:ab:6d:27:
32:7f:1f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 11:16:57 2023 by rpki-client on console-fra.rpki-client.org