Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CIzPM9YmVMTPBplAHJstNmlK6vc.roa
File: CIzPM9YmVMTPBplAHJstNmlK6vc.roa (raw, json)
Hash identifier: m5BTfbmsWihrtigJL3Y9Ev7M23hz2/MIoVZRDnIEtr0=
Subject key identifier: 08:8C:CF:33:D6:26:54:C4:CF:06:99:40:1C:9B:2D:36:69:4A:EA:F7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018F91FA830960DFCA81C60D6D1E649DA322
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CIzPM9YmVMTPBplAHJstNmlK6vc.roa
Signing time: Sun 19 May 2024 17:51:04 +0000
ROA not before: Sun 19 May 2024 17:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203172
IP address blocks: 194.87.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 May 2024 04:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:91:fa:83:09:60:df:ca:81:c6:0d:6d:1e:64:9d:a3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 19 17:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=088ccf33d62654c4cf0699401c9b2d36694aeaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:25:d1:c6:56:d9:45:4f:57:65:b4:ae:04:
7e:1e:fb:5d:aa:19:95:e5:0f:4c:48:fa:47:38:f3:
ad:17:6a:4d:99:c3:10:f0:87:0a:3e:4c:75:27:18:
12:9e:77:69:6b:9e:9b:91:d6:6d:d8:99:d0:6b:24:
a0:40:79:ec:c5:12:03:50:d5:2e:f7:de:b9:1d:cd:
14:38:5d:ab:9e:90:fb:86:89:c3:34:05:08:e3:99:
79:56:70:7c:9c:06:d0:84:77:aa:ae:d2:85:82:58:
c1:84:69:37:63:54:80:49:f7:69:a9:82:6b:e7:f9:
35:92:34:8c:f2:67:bf:59:97:a6:fe:01:28:ec:66:
21:0b:3f:99:a9:5b:e8:a7:91:57:5f:23:05:82:dc:
d3:f4:65:ca:dd:1f:fa:05:ac:ab:60:94:31:b6:60:
5e:64:75:cd:f0:62:b0:66:22:a0:66:6a:1f:68:8d:
32:65:17:d7:4b:5c:1b:fc:e2:45:c9:2c:ea:0a:f3:
5c:af:8d:5b:86:06:50:8f:2a:56:f3:cf:80:de:ca:
42:28:5c:e0:bd:94:5e:10:09:93:7f:3a:1d:34:df:
89:ed:74:fb:26:ba:3c:6f:7d:f5:64:23:c9:f8:73:
a0:12:6e:db:65:5a:17:67:90:fa:d3:c0:15:de:06:
06:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:8C:CF:33:D6:26:54:C4:CF:06:99:40:1C:9B:2D:36:69:4A:EA:F7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/CIzPM9YmVMTPBplAHJstNmlK6vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c1:b8:b5:d1:d6:33:4d:38:d4:2d:b5:02:21:51:6f:01:c2:
d8:59:79:8a:6e:d8:51:6f:19:06:0d:a3:1c:b7:4c:67:1a:32:
39:c9:df:5f:fb:be:d8:a5:79:7e:bd:fb:73:04:cc:27:4d:fd:
c3:83:cf:af:d3:31:6b:f3:c1:08:08:5e:c6:2d:11:8b:c8:c8:
13:82:9f:e8:18:61:19:8a:4a:6c:1f:0f:19:6d:96:58:c4:30:
b3:c0:fa:20:3d:e7:4f:18:a9:6d:2a:45:57:72:eb:8a:45:da:
b9:d5:36:d3:ed:4d:9a:16:da:ca:aa:cf:51:61:7b:e9:d9:c4:
1a:b8:5f:2b:cf:e3:8d:a7:19:92:e6:1b:e3:3d:98:28:76:c5:
65:56:25:78:3c:e3:9b:58:71:eb:43:e9:ae:f2:48:af:f7:a3:
26:4b:b2:6f:94:e7:8e:06:27:29:19:09:c4:0e:97:11:62:90:
b9:de:bb:fa:b3:18:23:79:a3:87:56:16:af:85:2a:f2:78:39:
32:ef:40:33:3a:49:1d:fb:35:62:27:85:1e:2e:71:42:7c:28:
0f:be:ab:28:0e:09:95:80:03:da:f9:66:fb:ab:95:3c:a3:2a:
b9:af:42:cf:c3:e9:e6:a2:bf:bf:b6:d6:61:92:a9:ae:67:02:
c7:e0:a3:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:09 2024 by rpki-client on console-fra.rpki-client.org