Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7c62dO_WammveMUaHbKjNT0ZTko.roa
File: 7c62dO_WammveMUaHbKjNT0ZTko.roa (raw, json)
Hash identifier: Jz7X4DY3vUQWcWtotUw7IEYbvXJp8tAqM6e8QT+lW+8=
Subject key identifier: ED:CE:B6:74:EF:D6:6A:69:AF:78:C5:1A:1D:B2:A3:35:3D:19:4E:4A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01890C076308540115F8C3EAE6539A544AB3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7c62dO_WammveMUaHbKjNT0ZTko.roa
Signing time: Fri 30 Jun 2023 11:19:17 +0000
ROA not before: Fri 30 Jun 2023 11:19:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11938
IP address blocks: 194.87.228.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
194.58.41.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:07:63:08:54:01:15:f8:c3:ea:e6:53:9a:54:4a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 30 11:19:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edceb674efd66a69af78c51a1db2a3353d194e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4e:5a:4d:b8:f6:5a:aa:42:22:d5:85:79:66:
61:ec:62:4e:c5:04:62:1e:80:68:c6:1f:56:43:e6:
3f:dc:5e:75:7a:e0:c4:fe:77:3f:01:8e:77:3c:53:
f3:c4:5a:67:ff:0e:6a:1c:df:db:29:a4:09:51:ac:
77:ea:d6:9e:4f:e5:77:6f:ac:ce:b3:e8:04:6c:ef:
aa:70:8e:f9:9a:e5:2c:53:53:31:b1:36:dd:1e:97:
ed:73:db:93:7c:88:c3:fd:e7:c9:49:89:fc:d7:f3:
1f:9d:f6:c3:72:86:fc:a7:5e:20:f2:71:3a:24:63:
23:c1:90:2f:48:23:69:72:90:22:7e:b9:45:42:be:
c0:84:de:b9:71:43:f3:38:76:a9:87:20:60:7b:68:
ea:45:a8:25:cd:f3:22:eb:ab:7c:8b:83:50:54:28:
0e:32:24:8a:76:72:c6:73:bb:26:83:dc:17:51:e6:
93:7b:fc:73:31:05:07:d7:79:fc:8d:d6:99:04:ab:
4e:74:85:01:0d:52:0d:a8:0f:34:10:cc:2a:d2:1b:
4a:8e:29:ce:f9:88:a1:a7:bb:a9:dc:ff:e4:c0:5f:
76:75:e4:c4:db:7a:68:e1:61:06:4d:19:e8:b5:d5:
67:c0:cd:c6:57:af:97:6c:6c:37:6a:cb:61:92:38:
43:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:B6:74:EF:D6:6A:69:AF:78:C5:1A:1D:B2:A3:35:3D:19:4E:4A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7c62dO_WammveMUaHbKjNT0ZTko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.44.0/24
194.58.41.0/24
194.87.180.0/24
194.87.228.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9c:73:ba:66:eb:be:cc:43:2a:fc:20:7a:7d:ab:a7:29:1f:
d8:91:77:9e:c5:6b:f8:b3:4a:4f:2a:6c:c0:85:4b:00:0a:23:
5e:d3:6d:2e:7a:9f:0d:9d:ae:0d:1d:fc:24:16:0a:4e:71:84:
d4:10:c3:e5:28:b5:d5:22:ba:b7:0f:9e:34:76:df:59:a3:34:
dd:09:9b:a2:64:da:b7:4f:b0:9c:a6:d7:86:6f:35:b5:2d:c4:
9b:0a:61:02:48:bd:c8:22:f2:2c:2b:9a:80:c4:1d:76:93:3d:
8a:08:f0:12:2e:26:95:7e:e0:73:e0:6d:a1:6e:60:62:20:76:
72:ba:48:da:95:66:17:46:67:2c:3e:60:23:ab:55:00:61:08:
af:ec:ea:af:23:7d:6d:06:11:88:ea:b8:3c:30:4d:36:1b:76:
6c:61:4e:55:dc:f0:ba:25:f0:e3:de:6f:6d:eb:c1:3e:8f:2b:
a3:11:06:06:d0:f9:79:16:87:77:59:f6:84:c6:6f:a2:a8:f6:
95:89:c3:e0:5b:54:ec:04:c9:f2:a6:2d:68:99:87:bd:96:85:
45:61:5c:47:91:d2:3a:9b:41:9e:45:5a:a4:38:9a:6c:46:ff:
c8:32:36:85:9f:cc:93:a4:a4:8c:97:76:68:71:42:7c:3b:13:
a0:81:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org