Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B4-6gmOGq6Djo1lZE4MK-_jmGQU.roa
File: B4-6gmOGq6Djo1lZE4MK-_jmGQU.roa (raw, json)
Hash identifier: Uufm7qUiqMWnSCYD6FLot10/CBv7PU0k76wL919omz0=
Subject key identifier: 07:8F:BA:82:63:86:AB:A0:E3:A3:59:59:13:83:0A:FB:F8:E6:19:05
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B2D1CFADCB9CD8170ED94B73271330E71
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B4-6gmOGq6Djo1lZE4MK-_jmGQU.roa
Signing time: Sat 14 Oct 2023 07:35:55 +0000
ROA not before: Sat 14 Oct 2023 07:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146943
IP address blocks: 194.87.204.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:2d:1c:fa:dc:b9:cd:81:70:ed:94:b7:32:71:33:0e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 14 07:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=078fba826386aba0e3a3595913830afbf8e61905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fb:58:d0:c3:05:95:59:79:9e:15:12:b6:6c:
41:49:b1:f1:16:eb:f4:f2:5b:90:45:14:c5:42:5d:
1a:cd:e4:f7:7e:df:0d:ed:4e:11:ec:9e:63:95:b1:
f8:ee:3c:3a:98:90:ce:61:e2:9e:89:89:a0:d0:1d:
3f:c3:ea:50:e4:cb:85:c0:f6:ec:a0:08:06:1e:c8:
95:b9:2b:8b:34:9c:da:b1:c3:37:98:98:27:dd:5f:
83:87:b9:97:18:a6:7e:44:fa:29:eb:d5:5c:1c:bc:
8b:be:49:49:ba:71:0b:41:a9:23:e2:99:13:88:7c:
c8:b7:cb:77:b8:7e:97:ca:a9:7f:d7:51:5a:be:2b:
c8:b6:9a:07:30:a0:ce:b1:38:c5:e9:85:9e:7f:10:
4b:3d:0e:59:89:ae:df:d1:91:66:ad:74:0a:ba:a2:
d0:29:5d:75:4b:31:9c:d0:9c:5a:71:c8:96:dc:09:
0d:26:22:9a:10:8d:3b:28:c8:2c:e2:25:9f:33:01:
83:2e:7d:6a:25:c7:39:11:44:9d:01:cb:cf:81:59:
34:db:a8:f7:dc:1b:da:f8:41:4c:95:5e:61:00:dc:
fe:4d:24:61:9d:8f:6b:f9:7d:02:35:aa:45:25:ce:
8d:ac:33:3f:3d:51:11:dd:e5:25:64:45:62:3c:60:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:BA:82:63:86:AB:A0:E3:A3:59:59:13:83:0A:FB:F8:E6:19:05
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/B4-6gmOGq6Djo1lZE4MK-_jmGQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.204.0/24
212.193.24.0/24
212.193.26.0/24
Signature Algorithm: sha256WithRSAEncryption
41:ac:87:59:41:56:7a:b9:08:15:0f:78:bd:0d:b9:39:13:2b:
05:c4:58:43:8b:2b:9a:80:12:a5:b5:2f:04:39:e9:be:e0:2c:
23:64:4e:87:28:5c:52:6f:6e:eb:98:36:c9:74:11:e0:2f:8a:
41:22:cf:c6:36:28:ad:63:f7:34:39:95:17:fb:c5:dc:39:9d:
d3:27:a9:4e:da:af:c7:55:f5:69:06:b9:11:82:f6:0c:10:17:
cb:a4:b2:d8:b3:11:de:35:f8:c9:46:cf:49:3d:1b:74:92:9c:
55:03:43:91:a7:94:9a:db:38:b8:f9:86:c7:04:57:c7:a2:a2:
81:3e:f7:d7:8e:9d:a3:11:e0:6e:e3:69:8a:c8:b5:43:8f:68:
98:35:6a:b2:f8:40:ab:e7:4b:5e:04:db:30:ec:20:d4:13:50:
f7:b5:9f:3f:b8:99:40:ed:0b:db:74:44:de:6c:09:e9:86:24:
03:e2:d3:91:c6:f0:a9:a4:f4:30:6f:87:06:32:5f:0c:7d:c7:
0c:81:9f:b7:f8:0b:ef:ef:e3:8d:13:08:b1:9b:82:ea:d5:b5:
81:ec:19:90:fc:f5:e8:81:0d:82:f6:95:d3:13:73:34:75:71:
72:5e:38:ca:0b:5e:d0:46:0f:81:30:79:68:9b:f7:7c:d1:30:
32:a4:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 19 10:59:30 2023 by rpki-client on console-fra.rpki-client.org