Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9wxlwBWu8PKL_lzSJh_omZ0efMc.roa
File: 9wxlwBWu8PKL_lzSJh_omZ0efMc.roa (raw, json)
Hash identifier: oBMk0QtrpeAZkON1VFLrCQYNm7dOtXRcVZKEc+ZEabw=
Subject key identifier: F7:0C:65:C0:15:AE:F0:F2:8B:FE:5C:D2:26:1F:E8:99:9D:1E:7C:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186EA4490FCDDD82982444BFF1398146265
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9wxlwBWu8PKL_lzSJh_omZ0efMc.roa
Signing time: Thu 16 Mar 2023 11:53:27 +0000
ROA not before: Thu 16 Mar 2023 11:53:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15083
IP address blocks: 194.87.121.0/24 maxlen: 24
194.87.120.0/24 maxlen: 24
212.192.209.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:44:90:fc:dd:d8:29:82:44:4b:ff:13:98:14:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 16 11:53:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f70c65c015aef0f28bfe5cd2261fe8999d1e7cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:90:f6:68:2b:1c:ef:ea:b8:e3:47:43:a9:
9a:83:c1:b8:8c:21:f8:e4:2a:2b:2a:5d:56:de:15:
19:6b:4e:00:40:20:83:f5:2a:fa:e4:cb:2d:c5:e8:
ab:0a:ba:1d:89:96:f1:d5:ff:63:52:4c:8b:be:e9:
f5:d9:e5:1a:d4:c9:bb:19:4b:62:c1:0f:10:9e:e0:
9a:a8:20:64:7c:13:f5:6f:be:06:c7:96:b0:ab:ef:
1a:41:7c:90:d1:80:7d:3d:fa:b0:d3:19:82:83:4e:
8a:85:13:6a:c0:e2:d7:2e:24:58:3b:4e:b2:22:f1:
7c:0f:6f:bc:6a:6f:7e:0d:c0:17:48:ee:7f:ba:ab:
a1:82:58:ce:f7:e4:66:89:97:8b:3b:9c:1a:8d:51:
72:f0:07:54:a2:24:f9:ff:52:5a:6b:92:d9:b7:56:
d4:19:91:2f:31:07:68:8f:42:db:04:a2:b1:57:7c:
18:47:01:a0:ab:6b:c8:42:b1:89:ff:63:ed:36:21:
f7:46:89:14:09:5e:1c:61:62:ef:1a:59:12:b9:ae:
cb:dd:77:94:42:eb:79:e7:f0:27:1b:db:d5:bc:e8:
5a:6a:60:5f:93:f2:3e:ee:6d:ec:a6:3c:03:38:d8:
73:e7:34:6d:81:59:0a:1a:ac:d3:1f:8e:cf:fa:e3:
a7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0C:65:C0:15:AE:F0:F2:8B:FE:5C:D2:26:1F:E8:99:9D:1E:7C:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9wxlwBWu8PKL_lzSJh_omZ0efMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.120.0/23
212.192.208.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:db:b0:b5:e7:32:07:cd:bf:bc:60:37:5d:1d:36:c4:89:94:
84:e9:35:65:76:61:9f:74:bc:2c:73:b5:2a:cf:aa:70:42:b6:
f8:ce:82:55:a9:23:f1:be:db:3b:38:88:9b:64:94:7d:34:c4:
48:74:7a:19:f4:d6:a8:76:54:8d:84:25:a1:95:00:82:2e:95:
4c:ca:cc:ea:ee:96:e7:1f:12:7b:72:9a:70:13:e3:b0:7b:3f:
a9:58:e8:b0:44:f6:5e:3b:1f:bd:85:06:31:61:b4:9b:71:95:
3e:e0:41:bb:89:61:c3:33:cc:77:f0:cc:dc:7a:e7:1f:65:e6:
49:2b:7e:38:b4:26:6f:17:a8:dd:49:d0:91:b0:a1:eb:03:f8:
8c:10:2f:4d:2c:b9:43:3f:5a:61:79:94:2f:88:76:8c:9a:7b:
cc:02:70:76:74:07:7d:b9:ef:85:a9:94:6c:f8:27:02:83:c6:
85:ab:3d:b0:b5:ae:e9:bb:16:9f:1f:60:3c:73:62:33:dc:28:
67:28:4e:6f:29:33:b1:60:a5:12:3a:85:8a:0f:ae:30:67:17:
79:97:60:2e:1a:f7:1f:fd:ec:75:36:f4:11:e1:d4:a4:71:b6:
fb:96:e5:10:6b:a2:0c:46:d5:2d:85:43:dd:76:ec:62:5f:ce:
96:81:c6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:51 2023 by rpki-client on console-ams.rpki-client.org