Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3neVjlJZ1u4WkggIm3b7ogivDWI.roa
File: 3neVjlJZ1u4WkggIm3b7ogivDWI.roa (raw, json)
Hash identifier: F7Vz1HKi9u738ZjJd50fPyfa6h4e/SGgzVyvFSDbsjY=
Subject key identifier: DE:77:95:8E:52:59:D6:EE:16:92:08:08:9B:76:FB:A2:08:AF:0D:62
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BB828B5B35965DF204B03A4A4A6A5BF04
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3neVjlJZ1u4WkggIm3b7ogivDWI.roa
Signing time: Fri 10 Nov 2023 07:35:57 +0000
ROA not before: Fri 10 Nov 2023 07:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 212.193.27.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:28:b5:b3:59:65:df:20:4b:03:a4:a4:a6:a5:bf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 10 07:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de77958e5259d6ee169208089b76fba208af0d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6b:76:ee:c5:d6:b4:c4:07:fa:c1:98:ea:a1:
85:4f:25:b3:71:19:db:e9:0d:92:4c:2a:0d:58:75:
5f:80:15:80:79:fd:32:35:68:26:9c:52:2f:1d:da:
9f:4a:76:6f:6e:bf:cf:54:3f:56:ff:ee:80:24:b2:
39:e5:6d:c8:e4:5b:ed:03:8b:2d:0a:20:84:e1:ea:
13:28:52:43:35:30:3b:cc:3e:22:55:b4:31:c2:e7:
3d:d7:93:25:b8:26:6f:df:02:71:bb:18:ab:02:42:
fa:e4:f0:5b:7c:85:f8:f8:d6:d2:a6:7f:ab:bb:b7:
33:77:7e:ae:87:ee:5b:28:0d:7a:52:89:12:f0:82:
1e:14:e1:c5:2d:72:be:ca:51:31:b8:3c:fe:c2:0a:
10:00:5e:b1:fb:73:a9:d8:0b:c5:1f:e3:c9:f4:de:
fc:02:f7:be:3d:d2:c4:fc:bc:f6:c9:8e:26:0c:86:
fb:f9:45:4a:7d:75:c3:35:c6:ad:83:bb:e3:6b:ec:
71:2d:cb:5b:f8:91:44:3d:38:aa:ca:ac:32:b5:b2:
bf:55:91:ee:19:4f:94:af:5b:cb:15:80:e8:81:71:
2b:cb:a9:6b:9d:32:7e:8e:9a:ce:9e:ef:3d:f2:09:
7d:a4:65:36:a5:4f:1b:5d:06:8e:7f:fd:ae:d1:e9:
11:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:77:95:8E:52:59:D6:EE:16:92:08:08:9B:76:FB:A2:08:AF:0D:62
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3neVjlJZ1u4WkggIm3b7ogivDWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.38.0/24
212.193.27.0/24
Signature Algorithm: sha256WithRSAEncryption
24:55:63:88:88:00:58:d7:4d:77:6e:49:ea:86:f6:4c:67:e2:
f7:45:34:d1:31:5f:5e:94:39:29:17:bb:33:71:88:7b:00:ce:
76:50:14:04:12:8e:c9:61:63:61:3f:5d:4a:9b:aa:58:3c:94:
34:40:a4:19:9e:ec:bb:a3:ed:a4:dc:30:89:69:02:c7:2b:89:
5a:be:3e:13:2c:5f:5a:8b:26:72:2b:21:41:94:11:5f:2b:94:
b6:1f:2b:0e:0e:62:0c:0f:7d:e6:17:57:1c:6b:68:54:8a:1c:
58:ce:54:bf:9b:63:7d:53:0a:e5:f3:1a:35:fb:f9:2d:59:af:
5f:76:0c:6a:da:53:82:64:8a:92:d4:45:1c:82:1f:00:76:da:
eb:28:1d:77:36:b1:de:65:6e:ea:14:f9:50:2b:c2:b5:99:98:
55:9c:4d:18:95:80:bf:df:b2:82:6f:1d:5c:2f:5d:c8:38:6f:
f3:32:fa:32:c9:36:6b:eb:89:e5:ec:60:69:91:3e:f5:fd:a4:
a7:b0:5f:6d:88:e3:35:8f:d5:e3:95:0e:5d:51:e4:f3:2e:2d:
bb:8e:40:ae:98:1e:6d:d7:2b:c5:45:6f:fa:fa:8d:84:cc:44:
4d:9b:54:d4:5c:8a:cc:5d:5c:ab:1f:2a:2e:48:42:38:88:c5:
cd:6e:b9:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 13:16:23 2023 by rpki-client on console-fra.rpki-client.org