Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Ak6_A0D7JDq1fCQYyi1j_M50CY.roa
File: 4Ak6_A0D7JDq1fCQYyi1j_M50CY.roa (raw, json)
Hash identifier: qv9rWjQUAbvkHkJ8aB/I/IuXjJQe87HUp4yTL67O2dI=
Subject key identifier: E0:09:3A:FC:0D:03:EC:90:EA:D5:F0:90:63:28:B5:8F:F3:39:D0:26
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66F8F1968BF67A116B8657D258EA44
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Ak6_A0D7JDq1fCQYyi1j_M50CY.roa
Signing time: Sun 01 Jan 2023 22:14:57 +0000
ROA not before: Sun 01 Jan 2023 22:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51659
IP address blocks: 194.135.38.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
194.87.196.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f8:f1:96:8b:f6:7a:11:6b:86:57:d2:58:ea:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0093afc0d03ec90ead5f0906328b58ff339d026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:b6:4d:d6:10:34:3f:14:fd:da:42:c9:f4:ac:
17:8a:d6:fd:0e:74:a2:ef:39:7c:93:b9:c9:c0:40:
bf:9f:2b:75:1e:ca:a0:0d:e9:ad:9e:f4:c3:82:49:
c1:25:c1:14:36:a8:e3:da:f5:f5:b0:2d:19:f6:af:
f8:4e:65:13:7a:a1:0a:cc:9b:7f:4b:f4:1b:c7:ff:
9f:9c:bf:cb:c1:a8:14:40:9d:27:f0:be:83:05:bd:
1d:19:f4:4c:88:36:f7:57:49:c6:46:0c:8b:50:a4:
e7:c1:66:6c:e5:6b:0a:d8:70:fc:db:36:68:84:d5:
ac:94:bb:da:c4:c7:5c:0c:bb:38:c2:4b:74:e4:3f:
19:c7:d3:5f:54:2e:1f:03:3c:f6:2d:12:08:80:30:
50:3d:c3:6a:7a:5c:71:15:bf:e6:53:67:e0:90:29:
88:1c:a1:02:f8:be:99:7c:65:a4:e8:b6:f7:27:22:
e5:49:e1:04:c0:8e:f6:7c:a3:3b:50:a4:ff:fc:aa:
53:7e:7a:ea:78:d3:c5:54:7b:19:a7:49:be:d3:f2:
30:1f:3e:d1:49:6a:2d:c6:4e:e3:e0:97:21:a3:0d:
01:8a:76:3c:1c:91:33:9c:cc:ae:3b:4b:93:73:c9:
b5:21:40:14:ac:ed:04:c2:f9:40:49:86:24:a3:f2:
40:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:09:3A:FC:0D:03:EC:90:EA:D5:F0:90:63:28:B5:8F:F3:39:D0:26
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4Ak6_A0D7JDq1fCQYyi1j_M50CY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.196.0/23
194.135.38.0/24
195.133.9.0/24
Signature Algorithm: sha256WithRSAEncryption
63:16:ea:72:fd:ce:b4:c0:cb:2f:66:a2:87:01:22:c5:c8:71:
3f:79:bf:9e:d2:eb:66:54:d5:c9:a3:03:5b:37:22:3a:b9:35:
f0:da:8b:59:7b:64:56:4a:ef:71:43:0d:17:c4:47:07:d7:7b:
a2:3e:cc:8e:f1:50:ac:81:a6:29:3c:c7:8d:00:05:1d:dd:7e:
ec:fb:ea:ae:a4:db:e4:c6:e5:b1:24:c1:30:6a:95:7f:38:8d:
e4:58:c7:18:61:75:7b:1c:41:97:4e:0d:43:b6:2c:e0:2b:46:
83:e0:bb:b6:85:23:f4:57:a6:32:3c:6a:1d:99:97:f2:dc:a9:
60:6f:f9:6c:e8:85:ff:8d:35:c2:fb:84:db:70:bd:45:6a:e1:
fe:10:f0:3d:c6:0f:6d:1f:08:b2:9e:c4:71:91:01:41:d4:0f:
fd:2b:36:a2:ce:8d:49:b4:96:77:c0:c9:60:8b:5e:60:d6:00:
1d:fa:4f:a9:bc:8d:9c:17:6e:24:0f:3d:f8:8e:db:ae:ba:c5:
41:02:18:ef:08:9e:aa:70:d0:b3:58:ee:d7:df:2e:02:89:68:
bc:a6:82:40:96:36:da:e2:c4:b5:10:4c:ce:91:69:a7:bb:64:
e0:b8:80:c5:a8:81:d9:6f:81:50:8f:06:03:a0:52:f2:eb:d6:
44:38:2a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org