Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7qFQnd9aOafcPw3lcdfHuZZr58g.roa
File: 7qFQnd9aOafcPw3lcdfHuZZr58g.roa (raw, json)
Hash identifier: 4gVlsA+RyEZBkSVE/5SVawNOIvIg+qgEUYv5MuqJupc=
Subject key identifier: EE:A1:50:9D:DF:5A:39:A7:DC:3F:0D:E5:71:D7:C7:B9:96:6B:E7:C8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66EE3822B66557134E27D6545A1587
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7qFQnd9aOafcPw3lcdfHuZZr58g.roa
Signing time: Sun 01 Jan 2023 22:14:54 +0000
ROA not before: Sun 01 Jan 2023 22:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 193.124.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:ee:38:22:b6:65:57:13:4e:27:d6:54:5a:15:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eea1509ddf5a39a7dc3f0de571d7c7b9966be7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:28:f5:2a:c4:67:6e:98:5a:9f:98:a8:cc:
88:ad:91:9a:96:ae:fd:cb:b8:06:03:d1:8b:0a:33:
0d:a4:da:53:f0:ff:92:5b:61:63:a8:8e:28:39:ac:
6f:1a:5c:7b:e5:07:5d:b8:89:81:d4:86:00:4b:d2:
c5:44:45:53:ff:4c:15:f6:cb:7f:11:87:3d:99:d0:
ed:11:83:1f:93:09:fd:04:96:fd:0c:52:76:fb:50:
7a:a1:53:77:f6:02:bd:2f:e9:b3:6a:9a:5a:08:63:
84:45:01:b6:e7:12:a3:aa:a9:26:60:df:ae:31:ea:
57:ab:6b:5c:8f:c6:5b:37:7c:26:ac:c0:1e:44:97:
0a:24:49:80:c0:d5:ea:c3:5c:8e:cb:9b:e2:d4:b9:
20:28:b8:9e:88:da:49:9d:27:96:de:4a:0f:54:dd:
40:21:69:73:97:07:8f:46:84:1a:d4:9a:3c:75:5c:
33:ac:fe:d7:c4:3a:0d:c2:c4:8a:62:13:58:09:48:
dc:82:f5:fc:14:4e:b7:f3:6d:89:33:60:36:1b:f8:
bc:6c:1f:fe:ca:9c:2f:c4:b1:41:6b:9d:b1:24:14:
c7:9c:1f:fa:f0:b0:87:de:1f:09:df:4c:b1:fd:7a:
5f:61:d0:2b:a2:bc:52:1a:d1:26:ac:f4:a4:75:6f:
02:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A1:50:9D:DF:5A:39:A7:DC:3F:0D:E5:71:D7:C7:B9:96:6B:E7:C8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7qFQnd9aOafcPw3lcdfHuZZr58g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.89.0/24
Signature Algorithm: sha256WithRSAEncryption
17:bf:c5:96:f6:52:b4:32:e2:ca:be:73:9c:ab:8e:e8:98:dd:
4e:af:5e:50:ce:20:40:31:a8:51:90:63:c7:da:6c:b4:56:cb:
ce:d4:31:03:ee:97:79:9a:e0:a0:73:0b:50:1d:d7:01:31:c8:
7b:72:86:75:55:98:af:b7:9f:f8:bb:af:85:0a:6f:d0:de:c6:
0d:bc:87:1f:c5:18:f6:f3:e8:08:61:c3:a9:fc:32:90:7f:13:
7b:2d:ca:39:19:bc:03:89:ed:a5:d9:c7:a1:2b:fc:1a:14:ea:
9f:3f:6b:c3:0c:14:b1:17:9d:6d:9c:ce:a8:6e:2d:cb:52:bd:
7f:31:16:e9:bd:f1:2b:c1:87:b3:86:33:23:21:5f:b4:06:fb:
8d:60:03:81:ef:1e:f7:e1:5e:4b:6e:40:72:32:68:05:a2:0a:
e8:dc:73:1e:fb:33:0e:8c:f3:00:df:85:1d:64:54:eb:d6:ae:
3d:2f:09:e5:d4:ef:18:6b:01:79:eb:30:f3:b5:f6:d2:61:83:
b6:88:78:07:08:77:22:e2:ea:9f:20:e1:cc:45:e0:c1:90:ba:
39:e7:0a:ed:44:56:11:04:0f:96:4f:ef:ea:4e:e2:07:75:ae:
07:93:05:de:fd:85:b1:b0:47:59:b1:aa:b9:1b:02:f5:9f:58:
f3:87:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org