Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EyPCQyiBI0wHdGTjLwEl3cHmZ0g.roa
File: EyPCQyiBI0wHdGTjLwEl3cHmZ0g.roa (raw, json)
Hash identifier: jljADAAGkH9sYxW9wTIb5pC3As0kpCrAZIFFYwcYLZM=
Subject key identifier: 13:23:C2:43:28:81:23:4C:07:74:64:E3:2F:01:25:DD:C1:E6:67:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B2751D3C37C82874F13058879170E6DEF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EyPCQyiBI0wHdGTjLwEl3cHmZ0g.roa
Signing time: Fri 13 Oct 2023 04:35:55 +0000
ROA not before: Fri 13 Oct 2023 04:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213028
IP address blocks: 194.135.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:27:51:d3:c3:7c:82:87:4f:13:05:88:79:17:0e:6d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 13 04:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1323c2432881234c077464e32f0125ddc1e66748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:82:c9:50:aa:b1:69:95:a2:32:92:7f:c3:
b7:9d:19:3f:10:2d:e0:58:cf:75:57:c0:e1:6b:6d:
8c:20:f5:99:0b:12:fc:81:27:b4:16:e7:7c:ae:40:
4f:01:43:b9:cc:56:cb:07:90:08:37:1b:f1:db:2b:
38:9c:3a:74:cc:33:26:7c:ad:74:05:d7:ef:3d:ca:
a8:b5:bf:1d:91:5e:c9:0e:e8:db:e5:16:75:bc:5a:
b2:6a:4c:1c:31:dd:6b:44:5e:dc:10:0f:88:87:08:
e7:f2:63:b7:e8:b8:d5:18:3c:d2:8e:83:6b:c5:d6:
47:ed:93:17:ec:88:3b:b6:89:f7:23:e5:31:83:f9:
bb:c7:43:c2:cd:aa:58:7b:6c:df:b5:87:be:9b:43:
7c:db:7d:22:82:7c:66:21:b9:9a:02:75:df:be:f3:
b9:37:8a:51:75:23:1a:31:a1:45:52:02:21:dc:92:
70:e7:8f:f6:a4:99:57:cd:c3:f3:a2:f9:d3:19:0d:
34:2f:82:d3:61:bf:94:52:60:2d:60:e2:30:a9:9a:
92:59:eb:00:48:38:af:29:4c:e1:7a:58:37:d0:18:
1d:34:59:c7:4b:58:61:7a:3c:1e:86:1d:c6:53:d1:
dd:47:68:69:18:bd:b0:4b:37:e1:20:ca:4f:e9:ce:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:23:C2:43:28:81:23:4C:07:74:64:E3:2F:01:25:DD:C1:E6:67:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EyPCQyiBI0wHdGTjLwEl3cHmZ0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b5:b5:11:9c:0a:5c:8b:43:6c:f7:9e:5d:63:d2:78:3f:ca:
ab:4d:44:a7:a2:f6:e1:08:12:e1:d6:24:a3:4d:37:07:e8:28:
d4:92:02:60:3b:76:67:8a:70:e6:81:22:e1:49:06:33:1a:79:
bf:a7:eb:5b:1a:f3:4d:c1:e2:0e:89:5b:03:dc:e3:c7:4f:29:
27:b0:4a:f7:bd:a4:ec:64:85:b0:47:ab:fc:e9:4d:5d:37:c3:
a7:fa:5b:96:60:57:a5:8a:15:41:16:d9:63:04:3d:6a:c2:a2:
e3:93:6e:b9:36:b5:bd:62:fe:64:51:ef:55:b0:d3:2d:dc:28:
f2:83:f7:a4:a2:59:4d:f1:b3:71:36:29:88:a7:1e:5b:55:e8:
be:94:2b:e9:1d:69:15:b6:21:bc:3c:6c:79:fb:82:23:45:49:
61:8f:49:a2:ab:87:99:6c:db:7f:f8:0c:b4:b6:ce:d8:e5:67:
ea:b2:74:a1:88:25:88:68:09:cf:90:68:91:47:99:0b:0e:59:
20:91:06:1b:36:8e:51:8a:02:49:7c:b1:36:e6:15:10:b3:c0:
7d:5e:5c:5a:ce:65:a4:33:6d:4c:1b:31:6d:c6:a0:29:51:62:
5f:70:2b:0c:e2:61:cd:fa:8b:7f:ca:4c:b9:c0:24:29:07:e8:
af:24:36:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org