Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/42IobRAUiwGgdlO5g5vqmUiXZIs.roa
File: 42IobRAUiwGgdlO5g5vqmUiXZIs.roa (raw, json)
Hash identifier: mbrv6UF+r4r2xeZxMoAHpA6rv3lcGKBDWaG8xB4/XRU=
Subject key identifier: E3:62:28:6D:10:14:8B:01:A0:76:53:B9:83:9B:EA:99:48:97:64:8B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B03A8EB42B38406BAD04A826432390C0E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/42IobRAUiwGgdlO5g5vqmUiXZIs.roa
Signing time: Fri 06 Oct 2023 06:24:43 +0000
ROA not before: Fri 06 Oct 2023 06:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 194.87.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:a8:eb:42:b3:84:06:ba:d0:4a:82:64:32:39:0c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 6 06:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e362286d10148b01a07653b9839bea994897648b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:32:58:14:f9:af:0d:63:2e:d9:52:ea:fc:
4d:ae:45:02:59:90:56:ab:ee:94:3c:15:40:e7:d6:
25:d9:57:a9:4f:02:6c:6a:fb:bd:fa:ea:b0:41:a9:
cd:64:a9:86:30:e6:98:4c:4c:f6:26:54:71:c1:61:
a4:cb:ee:61:33:b9:9b:6d:33:47:fc:53:7e:4e:6f:
00:60:bd:2d:f4:f8:ba:a8:cc:58:8c:65:3f:5e:52:
3d:9d:8a:26:de:1b:02:d8:0f:9c:1c:55:57:91:18:
e5:79:04:a9:1c:19:a8:f4:14:dc:47:6e:7a:dc:9a:
eb:5c:07:1f:ae:d4:fb:62:36:6d:26:1e:62:47:08:
98:91:de:dc:c4:ee:98:95:c0:07:d0:a2:4f:cc:d9:
b6:ae:66:66:29:cd:1c:99:7a:f7:c6:30:f7:4a:13:
02:1b:35:23:ef:6a:08:d7:f4:cb:b9:a3:06:30:ff:
6e:88:2e:48:c7:38:e1:cb:1f:d1:ad:f9:0c:32:bf:
d9:1b:49:d4:3b:11:8e:d3:2a:2c:36:62:a4:f0:7b:
b6:e4:ad:72:3a:fc:7a:71:d1:da:ef:48:97:e4:01:
e1:07:8a:83:d0:59:22:e6:09:05:e0:fe:0c:8d:c5:
38:60:e5:22:48:91:78:4d:d2:b2:7c:c9:56:06:1f:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:28:6D:10:14:8B:01:A0:76:53:B9:83:9B:EA:99:48:97:64:8B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/42IobRAUiwGgdlO5g5vqmUiXZIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.233.0/24
Signature Algorithm: sha256WithRSAEncryption
28:72:a2:66:2c:60:5a:4a:ca:cf:30:d6:44:a5:39:e7:5d:11:
ba:de:d6:a3:52:a2:92:9d:70:a2:14:2f:2c:5c:ac:dc:24:a1:
2e:f0:38:f4:c7:51:c9:d3:91:e9:97:cc:fd:98:05:06:c4:cd:
f0:9b:c9:c1:b7:87:9e:1d:ad:ae:0e:a0:70:c0:e6:47:3b:82:
94:36:65:17:91:f3:0d:b7:bd:87:df:25:3b:66:bc:4c:d5:87:
9f:35:8f:76:ee:c1:b9:e9:a4:77:6b:f8:33:0b:e1:f7:ab:89:
74:8d:30:e1:71:9d:56:58:7b:dd:4d:10:7e:4f:06:18:a9:ed:
6b:c1:37:be:df:26:2c:4f:52:a8:2f:e1:5a:e2:be:21:15:06:
53:03:1d:a3:05:e2:b1:ad:c1:7e:e0:ce:22:50:50:b4:51:08:
2e:45:c8:ff:fe:c2:f1:4a:d2:7a:6b:31:f1:db:06:cf:b0:d9:
67:b6:78:7e:8c:2c:7f:f4:4e:a9:36:79:8a:39:f2:9a:3c:18:
e1:41:07:12:dd:f2:13:35:7e:89:86:6f:67:97:57:cc:84:5f:
e5:19:b8:72:37:4e:35:a6:47:7b:dd:91:89:a6:53:aa:cc:d2:
29:94:67:0c:7d:9c:cf:4c:fb:83:04:50:9a:c5:19:55:87:9c:
cf:0c:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 14:17:58 2023 by rpki-client on console-fra.rpki-client.org