Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/62PWt8FuKFRmdivYSoYj-OHjDJ0.roa
File: 62PWt8FuKFRmdivYSoYj-OHjDJ0.roa (raw, json)
Hash identifier: LBtcYgGCZqgvWJ/1D9Mhw/SDIv79fcgyzXROB9bFbfQ=
Subject key identifier: EB:63:D6:B7:C1:6E:28:54:66:76:2B:D8:4A:86:23:F8:E1:E3:0C:9D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DE679F60C5F63C868CF3F1712AAE303B9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/62PWt8FuKFRmdivYSoYj-OHjDJ0.roa
Signing time: Mon 26 Feb 2024 17:32:48 +0000
ROA not before: Mon 26 Feb 2024 17:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205663
IP address blocks: 194.87.201.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 17:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:79:f6:0c:5f:63:c8:68:cf:3f:17:12:aa:e3:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 26 17:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb63d6b7c16e285466762bd84a8623f8e1e30c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:dc:5d:63:f1:df:86:08:6d:f3:27:ab:31:
ba:7d:d3:20:bd:05:32:c2:57:20:b7:56:0c:ea:8f:
49:94:6c:dd:74:cf:b2:b4:00:d1:6b:19:96:8c:a0:
1a:50:61:8c:a9:ea:ed:9a:ef:bf:68:0b:e7:4a:3a:
ec:be:27:ab:e4:a2:67:00:1b:2b:6b:60:0d:d8:22:
8b:d8:4b:57:56:41:8c:9b:ef:66:7d:60:c9:59:da:
a7:14:e4:5e:e9:a5:48:c6:46:0d:f7:40:60:c4:ee:
0b:97:a9:26:6e:18:47:74:3a:90:93:b7:fe:67:f0:
fa:a8:5a:0f:a1:6f:f7:50:f3:4f:40:4b:87:36:cf:
c5:6e:44:5c:d9:e5:5e:57:e8:c5:04:40:4f:d3:44:
c9:83:a0:82:dc:dd:bb:a4:f7:6e:dc:c4:c2:80:72:
18:76:30:e6:5e:29:66:d0:cd:45:df:5b:7d:2f:54:
32:3d:45:80:58:9f:67:1f:13:99:50:5d:87:a5:c6:
f2:77:71:9a:c4:fb:ed:03:4d:3f:ec:1a:bf:3c:43:
f2:b9:8f:2e:53:30:67:f6:fd:11:b9:c1:09:bf:ed:
bb:03:1c:de:58:35:5a:88:30:73:33:63:bb:c2:df:
ce:3b:70:be:75:3d:8f:3d:80:63:bc:c9:73:fe:95:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:63:D6:B7:C1:6E:28:54:66:76:2B:D8:4A:86:23:F8:E1:E3:0C:9D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/62PWt8FuKFRmdivYSoYj-OHjDJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b3:a1:31:a7:7f:f6:3c:d4:72:11:47:eb:05:9d:05:66:25:
d8:1a:c0:35:09:63:c0:af:35:8d:a7:12:e3:ff:9f:75:d2:d7:
49:a1:d0:79:53:1e:d2:0e:cd:f6:eb:cd:ee:73:76:56:f6:7e:
f7:95:21:f2:51:b7:84:b0:51:ba:97:03:59:27:a1:5e:5e:3b:
3f:05:b0:9c:f6:99:a2:52:09:70:79:e3:67:35:99:95:79:06:
fb:55:10:72:f8:2e:47:f0:9f:b1:df:3e:9e:a2:da:74:f9:b5:
25:d8:6a:55:49:6f:a0:2b:b9:ec:28:41:4c:af:c8:87:f8:2e:
3f:33:b1:74:df:2d:be:01:1d:d0:20:de:c9:79:38:8d:0f:8a:
8d:af:79:87:8a:f3:64:d6:2f:06:9b:69:7d:49:16:78:5d:14:
04:89:d7:35:90:e6:43:09:79:35:f3:28:5a:47:7c:9e:1a:ae:
1a:c2:06:3b:8d:29:dd:d1:0a:6f:02:11:f8:cd:5f:2d:28:cf:
9d:34:95:ed:4f:af:2c:d9:83:5b:e4:f3:62:5c:e0:02:f4:2c:
4a:84:f5:37:74:d7:25:71:32:1f:b2:f9:05:9e:5c:81:a0:ed:
9b:e0:12:6f:ac:c9:0a:7b:91:c3:5c:11:da:9a:f7:ef:9a:6b:
d8:7b:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 25 20:37:35 2024 by rpki-client on console-ams.rpki-client.org