Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4omHLvyKgHqRCeQ1WwpFvn3IwKs.roa
File: 4omHLvyKgHqRCeQ1WwpFvn3IwKs.roa (raw, json)
Hash identifier: ROOWzdByLSqfW3wKkktrY5e+Xnt+TaIlj9FUDOfsII0=
Subject key identifier: E2:89:87:2E:FC:8A:80:7A:91:09:E4:35:5B:0A:45:BE:7D:C8:C0:AB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01876A21A4252210D2AE1157AEB1F4A66174
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4omHLvyKgHqRCeQ1WwpFvn3IwKs.roa
Signing time: Mon 10 Apr 2023 07:46:42 +0000
ROA not before: Mon 10 Apr 2023 07:46:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 194.87.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:21:a4:25:22:10:d2:ae:11:57:ae:b1:f4:a6:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 10 07:46:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e289872efc8a807a9109e4355b0a45be7dc8c0ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:0a:9c:3a:ac:23:63:ee:31:a7:00:86:bd:
df:70:7b:f6:6c:b9:46:d3:a5:98:39:60:e8:42:c8:
87:d4:a5:38:41:df:25:61:f4:85:52:9d:d0:90:0e:
a7:25:93:03:22:c6:13:ee:b1:67:97:aa:10:67:be:
3e:41:d6:39:de:29:6d:00:9e:10:87:42:7f:a0:23:
30:bc:f8:53:70:a7:9d:66:64:56:75:ed:27:f7:a3:
db:2c:64:bf:c6:c3:89:a1:2c:ef:7f:f7:2d:4b:22:
92:3e:81:fe:9b:cd:31:37:d1:6c:29:ae:87:5b:e4:
73:32:4d:13:f7:06:bd:13:81:58:ac:37:cd:ae:6f:
c0:17:c2:50:83:04:58:94:37:b8:63:86:c0:82:c6:
13:9c:a7:b0:ca:01:d6:98:9b:1d:cc:5c:0c:ea:85:
45:e1:06:f9:0e:1a:03:00:c9:01:7b:7c:26:05:c3:
1a:af:d7:c7:b3:84:9d:98:90:cb:65:2e:a9:b5:20:
1a:49:eb:e1:a1:d9:8a:c4:f0:dc:5f:4e:cf:ec:3d:
f2:c5:46:0a:64:cc:3b:2d:8c:1f:a7:88:73:d8:ef:
25:28:4d:6f:51:ea:b1:2b:4d:00:86:d9:f0:03:6e:
0d:bd:46:1a:3c:ce:22:ca:d9:a7:34:4f:a5:4c:b3:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:89:87:2E:FC:8A:80:7A:91:09:E4:35:5B:0A:45:BE:7D:C8:C0:AB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4omHLvyKgHqRCeQ1WwpFvn3IwKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
21:5e:c8:bb:b8:49:ac:19:81:33:72:f6:b4:51:78:4b:62:f9:
c2:c6:cd:e0:4b:85:2a:45:ae:21:1b:c9:9b:31:f1:95:c6:59:
a0:32:8f:63:fd:59:08:63:ea:d9:7f:b3:a1:23:ed:2e:8c:73:
9e:0a:0a:e7:f1:20:73:ca:05:58:12:32:48:cc:94:fd:6c:2a:
3c:de:ab:20:b8:d0:7f:f0:f3:1a:6e:e7:75:f0:d0:28:d3:cf:
90:28:b2:15:4b:ee:13:a3:7b:19:92:73:b6:ce:92:a6:de:f9:
f9:7e:81:c7:97:ec:5c:c3:9e:c8:c7:73:29:09:6a:35:2f:02:
c6:f8:3c:6b:d7:fe:38:4e:bb:6d:f6:05:3c:0b:f8:76:c4:57:
07:86:e3:81:3d:7d:76:57:b8:b6:c4:50:1a:9c:cf:03:f5:de:
e0:05:1f:c3:59:91:8c:67:15:90:03:40:44:ff:fa:49:d6:48:
15:ee:5e:fc:70:e3:84:e4:b9:bf:db:aa:9d:49:15:ea:9b:2f:
54:b0:6a:45:6c:00:43:f8:de:d7:c7:0d:1c:d0:d3:44:32:32:
8b:e2:df:98:e8:3f:6b:06:ae:95:f0:b1:10:d1:77:dd:2d:d4:
3c:ef:a6:87:3a:fa:d3:7f:70:b4:38:a8:0c:f7:3f:bf:a9:07:
6b:0d:d9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:55 2023 by rpki-client on console-fra.rpki-client.org