Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/84FFNBcvb_6W_fFIJAzpcLwdp7Y.roa
File: 84FFNBcvb_6W_fFIJAzpcLwdp7Y.roa (raw, json)
Hash identifier: 7F88X1ZqSpLxKWWm7YdkytNbUh8VzRA6seDxW0eeHrI=
Subject key identifier: F3:81:45:34:17:2F:6F:FE:96:FD:F1:48:24:0C:E9:70:BC:1D:A7:B6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A980A0E330B395F6D6F940464AF4EA14F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/84FFNBcvb_6W_fFIJAzpcLwdp7Y.roa
Signing time: Fri 15 Sep 2023 08:51:50 +0000
ROA not before: Fri 15 Sep 2023 08:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 194.87.130.0/24 maxlen: 24
194.87.246.0/24 maxlen: 24
212.192.222.0/24 maxlen: 24
195.133.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:0a:0e:33:0b:39:5f:6d:6f:94:04:64:af:4e:a1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 15 08:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3814534172f6ffe96fdf148240ce970bc1da7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:ec:44:cb:39:e4:3d:cc:98:5c:b3:f7:e2:
24:79:c5:c7:1b:bf:09:9f:04:93:32:aa:87:bd:e7:
af:71:8f:62:10:fc:47:2b:42:60:4c:74:a0:fb:25:
59:f6:b6:77:50:46:23:10:fe:0c:15:c3:8a:a1:4c:
98:f3:66:9f:06:3e:07:01:65:58:e5:c8:6a:ad:0f:
dd:2c:e0:d9:29:32:11:3b:58:67:99:82:cf:5c:7d:
92:8e:1a:ee:7b:f7:4e:29:f0:70:1f:d2:cd:4f:bb:
ee:7f:d1:69:ee:36:d0:79:18:d9:7c:54:2a:44:d4:
cf:d9:e5:36:2e:88:88:2c:e2:f8:35:2e:57:cd:17:
78:a2:3a:13:af:35:4e:ec:0b:9e:50:8c:b5:d3:14:
39:52:c4:5b:7c:a7:ab:9a:e7:82:d5:c6:31:d7:59:
6f:af:57:34:cc:56:4a:3e:e3:33:96:25:9e:d1:8e:
b7:b5:ad:e8:b5:86:0d:ed:15:2f:27:22:b7:6b:2a:
d0:c4:0f:ce:8f:4e:d5:b7:93:43:15:a6:ae:3c:8b:
a4:73:2e:a1:74:18:20:05:7c:55:71:d7:2f:c1:41:
3c:b7:18:d6:24:78:46:39:87:ff:3f:e0:71:08:4a:
a3:84:4a:36:31:ba:9b:94:c6:f4:7d:50:40:20:7f:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:81:45:34:17:2F:6F:FE:96:FD:F1:48:24:0C:E9:70:BC:1D:A7:B6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/84FFNBcvb_6W_fFIJAzpcLwdp7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.130.0/24
194.87.246.0/24
195.133.43.0/24
212.192.222.0/24
Signature Algorithm: sha256WithRSAEncryption
24:3b:f1:a6:43:e9:aa:3e:d5:1f:37:44:12:54:98:8d:e2:97:
93:4e:82:51:ae:be:8c:e6:d4:47:64:26:86:5a:e3:f7:c1:76:
d7:da:99:b7:48:03:70:df:03:3e:60:ef:fe:4b:92:c9:01:fa:
09:0c:79:0c:b2:30:3e:a1:be:96:b5:7d:24:55:1b:fc:71:80:
fc:57:4e:65:9d:d7:b2:3d:01:a0:a0:b1:e7:1e:d7:da:c1:d4:
af:2a:f7:5f:24:f3:90:df:c7:e7:33:6b:40:fa:ee:bf:56:1c:
4b:b7:e3:f4:e0:f9:e0:03:6e:ca:48:50:ad:67:97:26:c2:35:
39:8c:50:9f:fc:dd:10:b8:89:05:bc:07:d9:4a:91:08:39:c7:
6e:bc:6b:1c:7c:fd:e6:f1:8c:c7:84:6c:a3:f5:14:0f:71:ed:
35:55:27:fb:c1:16:05:21:0b:70:bc:2b:13:73:d7:19:1e:41:
2a:69:97:9b:0d:23:ab:8a:3c:fc:88:ca:23:9e:5d:2a:c1:00:
bb:f6:96:2f:48:91:4f:54:e7:98:7b:3e:e1:7d:d0:bd:e4:04:
75:db:af:ba:90:1a:93:3b:72:7b:36:23:bd:07:d7:c7:27:f6:
89:84:66:50:24:20:2e:9e:42:2c:a5:03:f2:ce:ef:85:b2:ae:
1d:7a:da:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 13:12:01 2023 by rpki-client on console-fra.rpki-client.org