Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6FcaXuaiwPWAbr0059vcN5_xZW8.roa
File: 6FcaXuaiwPWAbr0059vcN5_xZW8.roa (raw, json)
Hash identifier: 5M3K+kS6xRAINdqVtneJljVvatl2jMGjopBbzCQXko8=
Subject key identifier: E8:57:1A:5E:E6:A2:C0:F5:80:6E:BD:34:E7:DB:DC:37:9F:F1:65:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018F67016ADF2D986E7F1FFBF4A1A14C6FCD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6FcaXuaiwPWAbr0059vcN5_xZW8.roa
Signing time: Sat 11 May 2024 09:34:57 +0000
ROA not before: Sat 11 May 2024 09:34:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49127
IP address blocks: 194.58.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 09:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:67:01:6a:df:2d:98:6e:7f:1f:fb:f4:a1:a1:4c:6f:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 11 09:34:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8571a5ee6a2c0f5806ebd34e7dbdc379ff1656f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:bc:48:6f:35:9a:05:00:c3:7c:c6:1f:32:
28:7f:dc:cd:8f:c6:0d:75:2f:7b:12:7b:de:e3:37:
8e:a2:f3:66:1b:16:96:3e:eb:93:83:62:09:fb:2a:
4b:99:fb:5c:c3:05:f0:41:33:7f:10:ee:16:52:1c:
2b:f6:68:35:ea:af:d5:68:45:44:58:c6:b7:ec:88:
43:78:62:56:cf:2e:9d:e8:dd:83:cc:1b:1c:93:9b:
9e:a7:f2:66:52:90:a5:a3:fe:30:2e:13:92:e7:87:
7e:e3:e6:03:1b:ec:0a:09:3e:06:44:98:a4:43:8e:
46:fe:c9:7f:8c:0e:ac:49:3d:df:16:53:7f:32:ff:
81:be:78:8b:81:89:6d:22:65:3d:b5:00:69:ad:40:
d9:19:68:b7:07:fc:c6:98:c7:05:e6:ed:f4:cc:0a:
ba:fc:e9:7c:9e:8f:16:f8:f7:58:85:e6:aa:36:f4:
20:b4:61:69:b7:aa:41:1d:c5:f5:07:0f:b3:b0:65:
bf:db:b3:84:34:1b:ad:e8:8b:1a:b5:3b:99:75:1c:
1f:b1:39:73:c9:e6:3d:86:a2:40:b4:f3:83:59:c7:
e4:d8:69:97:35:55:c3:43:f3:c5:11:47:e2:59:10:
8e:58:f1:aa:f2:a6:4b:83:5e:e2:84:1c:af:ad:bd:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:57:1A:5E:E6:A2:C0:F5:80:6E:BD:34:E7:DB:DC:37:9F:F1:65:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6FcaXuaiwPWAbr0059vcN5_xZW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.45.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6f:14:14:fc:f9:5d:4a:fa:e8:cb:ab:58:6a:ca:78:4a:4b:
29:59:e3:ab:9d:54:cd:f5:f8:63:74:8f:e8:52:12:40:07:31:
31:3a:b1:af:00:ef:e8:46:93:9a:23:b9:6d:0a:22:7a:62:f3:
2b:c2:14:fc:70:ff:17:ab:aa:c5:be:b9:64:7c:47:8f:b7:fc:
e5:26:68:3b:a8:62:94:f8:34:87:d0:de:bb:8c:ae:e5:6a:80:
34:61:8b:a1:ae:96:df:f2:be:a8:78:cf:c6:b9:cf:5b:cf:39:
9b:8c:99:5d:86:02:7a:41:e8:02:15:d1:9c:33:1a:f0:e5:f0:
89:6d:99:53:7e:44:ff:ac:15:84:9c:02:a2:92:ea:f6:c5:08:
fa:7d:50:42:d0:dd:f7:5e:db:48:93:84:67:14:e0:52:ed:1f:
26:ea:30:b4:2e:45:f5:3e:b7:39:b8:ad:f8:c1:1f:92:77:2a:
19:4f:f6:64:cb:33:d0:1f:01:d7:00:b2:75:ae:f7:57:58:85:
4b:39:a0:77:7a:b0:e0:c6:93:a5:46:61:75:59:a9:ea:1c:37:
69:d5:59:ec:fd:01:71:d1:a8:57:55:d0:3b:b2:ac:6a:5a:8e:
c8:08:2c:e6:dc:ba:ec:2d:ab:b7:18:3a:5b:19:ae:0d:9d:cb:
0f:a8:49:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 11 12:24:02 2024 by rpki-client on console-ams.rpki-client.org