Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5iHjoyJS6yqn-gC37MjsE7LqBpw.roa
File: 5iHjoyJS6yqn-gC37MjsE7LqBpw.roa (raw, json)
Hash identifier: 6n19A0IZYWV7ZyBs0KZKbyTowgCdifkzW61DKc9ANFQ=
Subject key identifier: E6:21:E3:A3:22:52:EB:2A:A7:FA:00:B7:EC:C8:EC:13:B2:EA:06:9C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018601388B9DDDEAE47B066053DB631D4E56
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5iHjoyJS6yqn-gC37MjsE7LqBpw.roa
Signing time: Mon 30 Jan 2023 05:48:48 +0000
ROA not before: Mon 30 Jan 2023 05:48:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.87.120.0/23 maxlen: 24
195.133.24.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:01:38:8b:9d:dd:ea:e4:7b:06:60:53:db:63:1d:4e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 30 05:48:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e621e3a32252eb2aa7fa00b7ecc8ec13b2ea069c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:21:4a:cf:f5:df:ec:9a:d0:13:2f:df:6e:27:
fa:f9:0a:6a:27:59:41:6e:42:30:f1:00:33:74:ff:
3e:85:1e:83:a0:e4:15:da:5d:b1:95:e4:19:c2:a7:
25:e9:9e:d8:cc:b4:74:0d:da:a9:69:2b:8b:02:ea:
0a:e4:8d:90:0e:b7:b1:c7:39:14:c4:00:f8:49:25:
44:d0:86:93:25:a8:13:f7:91:2d:3c:d4:99:31:19:
65:ff:b1:e1:09:0f:45:e8:08:75:6e:04:49:12:04:
16:5e:fe:5d:31:f6:e0:35:0c:ae:f2:04:ae:1b:ed:
96:e8:fc:5a:21:6a:7e:b1:f7:24:b9:09:5b:df:5c:
bc:0b:93:c7:10:5c:55:d2:89:55:f8:4e:7e:72:90:
eb:0e:97:a5:ce:48:b8:14:77:d5:52:3c:c5:72:d5:
a6:90:d9:98:c1:0c:c3:f2:91:37:20:23:dc:55:fe:
29:aa:06:ba:c0:13:83:d2:3e:6b:21:6f:20:8b:03:
77:17:86:5b:bb:ff:17:52:f1:15:2a:0d:41:7c:75:
e1:b8:79:39:08:cf:9d:cf:f1:59:3d:b8:a5:f2:7a:
38:7e:c0:85:9d:cd:0f:04:61:26:23:c5:7c:86:c0:
d9:39:1a:9a:09:a1:14:24:a7:0c:47:be:c7:61:9b:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:21:E3:A3:22:52:EB:2A:A7:FA:00:B7:EC:C8:EC:13:B2:EA:06:9C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5iHjoyJS6yqn-gC37MjsE7LqBpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.120.0/23
195.133.24.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:24:dc:30:ee:ef:a6:5d:0b:2e:a8:5a:3f:6d:7c:9b:06:3a:
40:97:91:f1:9a:4f:bd:19:3e:78:c6:bb:f6:e6:25:6e:bd:1c:
30:5a:4f:91:91:17:74:a6:52:ec:bd:e2:aa:20:00:88:7d:e5:
b3:0f:00:56:d7:7f:26:bb:50:32:d7:0e:16:f9:71:4f:9a:ad:
17:00:7a:3e:1e:b2:96:ae:b8:3e:af:68:b5:16:1e:63:44:b2:
79:2c:18:66:2d:4d:88:e6:16:5e:ac:60:3b:5d:a7:bc:56:31:
3b:81:3c:31:3c:20:1b:34:0c:fc:05:de:26:28:a8:68:5b:9f:
5f:0e:c3:2d:34:c2:d5:fc:b7:29:ff:84:b9:d5:a3:98:2e:03:
68:22:7e:04:2c:66:51:c9:da:8d:25:9a:ba:8b:8a:8d:12:0f:
5a:45:07:00:79:d3:77:4f:ec:8d:11:de:4d:9b:1c:8c:07:57:
4f:98:f0:cd:17:39:92:f6:43:91:e1:e1:8a:9f:33:1f:4a:b3:
ac:0e:72:0e:69:bd:08:77:60:fd:62:45:82:54:48:dc:6c:5c:
25:ea:7a:60:bb:7d:39:dd:d2:51:b9:99:79:ed:96:14:ec:31:
64:fa:9f:31:76:6d:a6:d3:98:10:43:73:8a:b5:e6:ef:da:53:
b2:3c:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org