Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3s3l6mu0VdZGJtE6OSt7EIfEGqg.roa
File: 3s3l6mu0VdZGJtE6OSt7EIfEGqg.roa (raw, json)
Hash identifier: J67RAUP44ZMgrlx8cMDXklUF0hQ6rBE+QzgouUXpgic=
Subject key identifier: DE:CD:E5:EA:6B:B4:55:D6:46:26:D1:3A:39:2B:7B:10:87:C4:1A:A8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F67177C09168188320016A703B71EED
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3s3l6mu0VdZGJtE6OSt7EIfEGqg.roa
Signing time: Sun 01 Jan 2023 22:15:05 +0000
ROA not before: Sun 01 Jan 2023 22:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212607
IP address blocks: 194.87.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:17:7c:09:16:81:88:32:00:16:a7:03:b7:1e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=decde5ea6bb455d64626d13a392b7b1087c41aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e2:60:dd:69:50:50:f2:de:96:ca:28:2f:35:
c4:d5:94:43:a2:61:cf:e1:1e:9c:86:e4:3d:8c:18:
a5:16:fd:90:57:35:f2:a0:01:ef:e4:90:8a:ca:b4:
94:65:2a:38:80:72:91:55:e0:86:17:e6:63:df:4d:
cc:fd:ab:13:f1:66:61:0c:a7:39:da:23:1a:c1:f8:
83:eb:72:5f:4e:12:fe:08:c8:f7:24:35:6c:f3:60:
6a:48:5f:96:0a:5d:0b:ff:b8:1a:52:c0:af:f2:27:
b2:c7:a3:5c:38:d6:3c:8f:39:25:b2:ae:c9:bc:59:
fb:ea:cd:6a:3a:91:90:be:d1:2e:6c:b0:f7:68:7c:
6b:51:88:d1:68:6d:a0:e1:da:d2:36:b9:51:5e:15:
90:f8:21:b6:63:96:ae:4b:ba:f9:99:50:16:8b:cd:
c3:9b:05:79:81:4a:79:89:9d:dc:f2:5b:94:05:26:
4c:23:fe:88:94:7d:bc:96:30:cb:5d:b0:84:71:bb:
e0:04:d5:2b:f1:10:e4:96:4b:7c:c0:31:8d:2d:cf:
c4:c0:ba:b3:dd:75:e5:2b:18:d5:1e:87:59:7d:42:
69:4a:51:a6:ac:0a:d5:33:04:30:08:35:b1:0c:e2:
7f:e1:7e:11:c3:41:28:49:23:d9:e9:a6:f8:12:87:
b2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:E5:EA:6B:B4:55:D6:46:26:D1:3A:39:2B:7B:10:87:C4:1A:A8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3s3l6mu0VdZGJtE6OSt7EIfEGqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2f:01:e3:ef:b0:b3:f4:cf:5d:54:c1:c1:a9:d2:36:ed:57:
3b:e1:ed:f3:5d:9d:1c:5e:d7:c6:d1:a2:40:9f:3d:c8:64:a7:
ed:e9:5f:9a:93:d6:3c:bc:a6:f2:bd:0f:18:d7:79:d8:b3:43:
29:92:ec:31:0a:bb:56:04:b0:39:5c:a1:9f:aa:24:21:af:0b:
e0:32:2a:11:76:cb:b2:4a:2a:0b:59:e1:b2:e1:84:c4:34:e2:
3c:c4:9e:21:8d:ea:17:c5:35:ef:e1:8d:37:6b:72:b4:ea:17:
bf:35:b0:fb:e8:9b:0b:43:cd:5f:cf:3c:87:52:53:ef:9c:72:
12:0d:90:fc:54:d8:80:06:c0:c1:3a:fb:8c:66:71:55:91:dc:
ff:a3:2e:c1:8c:34:ac:26:e5:ac:eb:e1:e3:a9:b4:9b:8f:1c:
7e:ad:2d:df:e2:e7:55:e6:ab:1d:ee:48:dc:c8:10:6e:60:b2:
0b:42:a0:b1:96:73:a9:96:93:7c:92:be:dc:27:d4:59:5f:93:
2f:90:22:45:14:ce:ce:3d:bf:4f:da:74:86:12:a6:64:a6:ba:
e3:e5:f3:15:9c:c4:fa:f9:4c:f0:7a:89:f0:e8:3a:c4:1d:0a:
35:1e:df:42:a3:c0:fb:ab:f5:17:2a:c3:da:be:4c:a4:f0:60:
be:94:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:49 2023 by rpki-client on console-ams.rpki-client.org