Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Of8Z95lMJN8742ivZbwX94Ia6E.roa
File: 6Of8Z95lMJN8742ivZbwX94Ia6E.roa (raw, json)
Hash identifier: jAsd8Zi8wEipFJm9o1PFkBHL6n/Qcxw9DMlUrlqJ3D4=
Subject key identifier: E8:E7:FC:67:DE:65:30:93:7C:EF:8D:A2:BD:96:F0:5F:DE:08:6B:A1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186890646C3E8BA747F94E0F3FE4FF9B391
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Of8Z95lMJN8742ivZbwX94Ia6E.roa
Signing time: Sat 25 Feb 2023 14:42:15 +0000
ROA not before: Sat 25 Feb 2023 14:42:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 194.87.255.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
212.193.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:06:46:c3:e8:ba:74:7f:94:e0:f3:fe:4f:f9:b3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 25 14:42:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8e7fc67de6530937cef8da2bd96f05fde086ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:01:87:3a:e7:4e:0f:15:44:21:a3:ad:ed:69:
16:5c:44:83:6f:7d:4b:45:4d:2b:d7:f9:d0:96:62:
8a:4c:78:6c:56:ec:8f:e0:f6:24:56:81:e8:9f:d9:
4d:71:d1:f6:de:c6:68:50:f2:1d:10:ff:37:fd:54:
c6:d0:22:80:e6:27:f8:f7:e0:6d:91:65:07:a0:0a:
1b:9c:22:51:1e:af:1f:11:f4:95:ac:42:b4:80:03:
6c:d2:56:8e:55:04:88:40:74:34:d4:81:f2:e1:11:
96:0f:7b:2d:ca:b0:89:50:03:64:ea:d2:69:8e:6e:
48:6a:64:61:54:df:1b:03:c5:a8:75:54:52:c4:09:
81:fc:99:e4:cf:64:82:3c:e8:44:f8:23:ac:bc:88:
3e:6a:7d:02:e4:a2:f2:10:2a:dc:b2:ac:36:74:d2:
12:f3:f6:be:8b:be:19:ea:83:f4:c6:e5:00:6b:8c:
21:a0:5f:14:74:26:19:d2:26:5f:66:1a:06:e8:bc:
12:e3:87:aa:94:6c:70:37:4f:f1:58:29:49:3a:a4:
33:43:2b:d6:3b:4b:e3:7c:cd:bf:72:c2:0f:a9:e1:
a7:d5:fe:e1:09:7e:1f:69:ce:1c:c9:12:41:49:f5:
98:ef:46:79:b9:0d:9b:92:6b:bc:ec:f7:55:a4:d5:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E7:FC:67:DE:65:30:93:7C:EF:8D:A2:BD:96:F0:5F:DE:08:6B:A1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/6Of8Z95lMJN8742ivZbwX94Ia6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.61.0/24
194.58.154.0/24
194.87.180.0/24
194.87.255.0/24
212.193.5.0/24
212.193.9.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1e:a2:b6:e9:d9:7b:2a:48:3d:bc:2b:49:ac:94:19:8c:7b:
87:8d:8a:d5:a7:99:49:e1:bb:92:07:9d:a6:2d:b2:31:de:96:
4d:47:5e:18:fb:98:84:5d:08:db:b6:f1:56:35:4e:d1:64:38:
01:46:a1:9d:e0:02:75:43:d3:3e:4b:84:42:74:09:8d:4f:56:
af:3f:5d:25:17:b6:12:2a:62:5f:85:2f:32:62:95:8f:a4:61:
aa:7f:57:e6:84:3d:e0:74:ac:b7:e5:5d:66:81:2f:36:d0:20:
6d:25:1d:f0:67:61:a2:84:d2:dd:97:05:11:f0:5a:37:94:59:
b0:85:50:23:79:1f:c8:64:7b:52:d3:8f:80:d3:43:95:cb:27:
ec:ff:73:5d:bb:26:9b:fe:09:97:19:87:4b:2f:90:24:b8:fb:
ac:05:0c:65:79:20:ae:ea:24:12:21:be:91:f2:6e:35:4f:be:
41:d8:18:d1:c8:32:c2:ab:f9:1a:53:65:79:45:71:b8:e1:3b:
e8:d8:03:a8:8f:e9:53:c2:90:dd:8b:54:a6:40:80:27:e9:58:
a5:93:1e:d6:a8:9e:5f:ad:fd:1f:58:b0:65:81:03:e9:60:d8:
aa:2c:c9:12:e3:ea:1e:8e:5a:d5:0d:38:0a:26:56:4e:ec:a0:
8e:d2:e5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:56 2023 by rpki-client on console-fra.rpki-client.org