Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7pxJdCywEE4rKwe802HmA0Qjhac.roa
File: 7pxJdCywEE4rKwe802HmA0Qjhac.roa (raw, json)
Hash identifier: j8q7an+ulyV16V/GcqRto4676BtHCvL2xZO2kU18FqY=
Subject key identifier: EE:9C:49:74:2C:B0:10:4E:2B:2B:07:BC:D3:61:E6:03:44:23:85:A7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BADC9FDE3838C6DF70490CEA3B625883B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7pxJdCywEE4rKwe802HmA0Qjhac.roa
Signing time: Wed 08 Nov 2023 07:16:17 +0000
ROA not before: Wed 08 Nov 2023 07:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203172
IP address blocks: 194.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:c9:fd:e3:83:8c:6d:f7:04:90:ce:a3:b6:25:88:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 8 07:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee9c49742cb0104e2b2b07bcd361e603442385a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:ef:45:2b:f4:cb:f1:3f:a4:d7:c1:fd:06:
e0:61:0b:15:5c:3b:db:4f:d7:fd:e9:e0:11:76:35:
6a:1f:30:3c:83:8c:e9:98:d8:9c:05:01:bf:90:88:
2a:80:2a:91:9a:b5:a8:97:88:2f:e4:76:3f:ff:2b:
4b:08:f5:a4:8e:a9:81:da:a7:a4:c2:1c:01:6e:e7:
a1:65:76:c8:a1:08:ba:cc:61:52:a5:de:d9:37:60:
7f:27:36:26:53:ed:00:1a:a4:8d:66:6c:dc:91:c2:
03:fd:d0:a6:6a:a8:86:0a:a2:9f:81:19:d8:23:eb:
4d:21:c2:cc:aa:d4:da:ca:f5:df:08:28:10:c8:48:
4b:7d:bd:c5:18:65:a5:93:ae:17:f2:a6:19:43:2f:
6a:36:2d:77:65:24:59:0b:ae:53:7e:bc:ba:84:7f:
b9:2b:1e:97:e7:75:74:a6:77:64:c5:1c:10:8e:4e:
97:65:88:6c:65:d3:79:1b:5b:cf:fe:0d:79:7c:8a:
29:0e:18:5f:2a:d0:be:91:de:db:32:d5:22:72:ed:
a7:f0:2a:59:7b:2e:3f:e3:d6:28:b8:19:d4:91:37:
e4:f9:7f:30:c9:6c:63:4d:34:b7:70:66:98:e2:86:
05:da:43:72:87:3e:1a:eb:98:0f:81:5c:ae:92:d2:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9C:49:74:2C:B0:10:4E:2B:2B:07:BC:D3:61:E6:03:44:23:85:A7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7pxJdCywEE4rKwe802HmA0Qjhac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:26:08:9d:95:ab:f9:e1:04:60:2b:1b:34:30:74:03:ca:46:
36:bc:97:55:54:df:54:49:d2:33:6d:c2:b8:d2:a6:8b:1b:25:
15:77:6c:03:e0:2f:ef:b2:a1:c0:01:77:40:c1:85:cd:46:6c:
55:dd:0b:94:ae:92:44:51:7a:bf:ae:9a:87:9a:d7:0f:36:5f:
8c:48:02:e2:26:83:72:f3:84:d7:86:93:8b:1a:42:8d:6d:56:
7f:8f:59:af:a7:2f:c4:0e:d8:29:f8:c8:7d:99:ec:28:35:8f:
ce:4d:3f:c3:8f:d5:02:79:82:a3:42:20:bc:8f:66:9e:11:c3:
61:2c:63:54:b1:f8:72:6c:8f:4b:ac:c7:13:41:d6:7c:c4:cf:
af:e3:80:ea:dc:ed:f7:17:a0:d9:7f:c3:f6:3f:9f:d8:d8:b6:
bc:b7:32:c2:11:d1:ef:6d:c8:ee:29:c3:18:86:03:17:2c:78:
6a:c8:35:3c:af:78:41:b4:98:ab:a5:9a:60:70:7f:64:ff:f8:
59:9c:5c:04:20:3c:2b:f0:f1:ab:06:3f:c5:8b:82:5e:8e:57:
8a:74:ef:64:34:b8:4e:9f:dd:a7:9a:dd:5c:48:bb:02:ec:c9:
a1:a8:45:3c:68:2f:5f:dd:c9:97:87:1c:c2:cd:5a:3e:2b:a6:
b5:03:d1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 9 11:48:12 2023 by rpki-client on console-fra.rpki-client.org