Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5zTr4NrruDklGBaRGSlDbiO5AkA.roa
File: 5zTr4NrruDklGBaRGSlDbiO5AkA.roa (raw, json)
Hash identifier: peY/g7ZJwQ0Ww9Z2bZV6+e4egx47ZGXL5uW9rNYMrB8=
Subject key identifier: E7:34:EB:E0:DA:EB:B8:39:25:18:16:91:19:29:43:6E:23:B9:02:40
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188337411EE4234B8837DAB6B89B6EFAAF6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5zTr4NrruDklGBaRGSlDbiO5AkA.roa
Signing time: Fri 19 May 2023 10:00:24 +0000
ROA not before: Fri 19 May 2023 10:00:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 194.87.120.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:74:11:ee:42:34:b8:83:7d:ab:6b:89:b6:ef:aa:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 19 10:00:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e734ebe0daebb839251816911929436e23b90240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:e6:12:66:19:b0:a3:40:01:88:14:64:d1:
f6:64:bd:c6:78:36:c0:2f:28:61:f2:c9:0e:cc:e0:
ab:71:95:b1:63:05:72:e7:95:ed:5b:51:4b:7d:6b:
58:fd:ee:a6:73:09:f0:fa:e2:45:f7:84:64:5e:c8:
51:07:9f:2a:5a:fc:db:ea:27:5e:e9:c7:e7:3a:41:
5a:9e:9c:a6:38:67:5c:67:af:4b:1b:4b:c5:a1:6e:
30:8b:d2:b1:76:8a:fd:a9:f0:70:bd:c4:36:da:77:
ad:b6:e7:d9:95:45:29:51:7c:38:01:fc:ca:84:01:
92:1c:0b:c8:4a:5f:12:22:9b:bd:44:8a:f2:7f:d9:
7f:db:26:a4:c9:1e:6b:94:6f:af:d7:73:21:84:16:
46:09:76:d4:bb:5b:04:ef:d0:d0:ef:14:6a:e6:10:
4f:ce:3e:61:50:38:17:df:bb:a5:1a:bb:e8:20:9a:
46:39:00:85:34:2c:4d:05:0d:37:67:37:33:e1:47:
7f:cd:e1:6b:61:b2:e6:d9:31:ac:2f:4c:29:b1:6a:
3d:a1:f3:b9:1a:38:dd:25:35:99:2f:5a:a9:bd:5b:
e7:e6:ca:39:fc:f6:11:01:25:f6:f4:95:14:a3:f1:
86:0b:11:1e:af:95:a4:f6:76:55:34:13:a9:74:8b:
8e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:34:EB:E0:DA:EB:B8:39:25:18:16:91:19:29:43:6E:23:B9:02:40
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/5zTr4NrruDklGBaRGSlDbiO5AkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
194.87.120.0/24
Signature Algorithm: sha256WithRSAEncryption
20:92:7d:06:5e:cd:c2:91:d1:1b:d6:90:0f:75:be:f3:1a:65:
75:7b:57:9c:04:7a:1e:5b:10:98:87:78:8c:9b:0a:e3:61:2c:
48:6d:95:19:30:b4:ce:ad:79:78:e5:01:66:be:32:39:3c:a3:
72:31:8c:39:95:ce:9d:4b:08:2d:71:83:6d:fa:52:40:0d:9f:
ba:68:b1:7f:d7:89:50:a1:50:f6:b6:53:17:e4:bb:9e:c2:52:
e6:00:cd:cf:a0:b4:09:40:70:86:2e:c7:d8:33:9f:ea:55:a5:
26:66:d8:c4:06:92:9e:09:16:a1:c2:95:ed:42:f5:72:28:76:
c4:5d:7f:4d:29:67:2b:ce:88:0b:7b:19:b7:bf:07:4f:88:0c:
dc:cd:ec:fd:61:e4:df:30:0a:2c:85:f2:47:e2:a6:bd:d2:1c:
30:90:b9:4a:b5:ca:71:1d:b6:1e:b0:65:c8:58:07:7f:cd:11:
34:06:f9:6f:5f:44:61:3f:45:19:21:79:0c:e7:71:08:12:2c:
20:6a:ca:e8:0c:eb:4e:6b:b6:71:1c:eb:0e:1a:2e:11:23:e5:
82:4a:ff:07:7d:35:4f:21:ac:0c:d4:07:1e:04:30:d2:d5:a1:
39:29:44:2c:cd:12:70:39:4f:f9:17:7e:66:8b:4d:a0:3c:2e:
f4:6c:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org