Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FODor0A7fOhqE0pFQiwogfd4yfk.roa
File: FODor0A7fOhqE0pFQiwogfd4yfk.roa (raw, json)
Hash identifier: nONk2nfdfB2o6zWNcZEtt6Go2NJmKkSmHnbyjmDi6tg=
Subject key identifier: 14:E0:E8:AF:40:3B:7C:E8:6A:13:4A:45:42:2C:28:81:F7:78:C9:F9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A6F4C6E391C3D2C4D11BFE2FCC7F49294
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FODor0A7fOhqE0pFQiwogfd4yfk.roa
Signing time: Thu 07 Sep 2023 10:59:54 +0000
ROA not before: Thu 07 Sep 2023 10:59:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 195.58.38.0/24 maxlen: 24
194.87.51.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:4c:6e:39:1c:3d:2c:4d:11:bf:e2:fc:c7:f4:92:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 7 10:59:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14e0e8af403b7ce86a134a45422c2881f778c9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:6a:6c:78:71:ab:cf:4c:6d:da:1e:0e:d6:
03:80:15:2e:11:89:67:cc:1f:f7:7d:93:02:62:f5:
1f:ec:f0:05:fe:7d:11:74:5c:09:87:6a:87:40:49:
59:1d:35:fc:70:f4:82:3a:d6:2b:3b:8c:94:3f:ac:
fb:cc:81:a4:3a:90:f6:1e:66:b7:a6:8b:fc:cb:7c:
35:88:bc:e9:2e:70:09:38:90:a7:0c:4a:8e:28:c9:
f7:29:97:25:94:ae:e8:d1:43:28:3e:ec:3c:ea:6e:
64:1b:70:76:ba:0c:02:d0:3e:96:7c:6c:28:41:24:
ed:76:9d:3f:4c:50:01:19:30:94:d0:fd:8d:bb:35:
2e:f6:c5:49:1c:46:cf:c7:0f:15:b3:4d:0c:de:2c:
6c:3e:e1:7f:e3:b0:a6:55:e7:5e:71:7d:a9:9d:c4:
9a:0b:5e:90:a1:0c:32:a3:d7:28:77:c8:a6:11:80:
64:85:9d:b3:89:28:7a:5b:b9:a3:b5:28:8d:48:e7:
cf:92:79:66:26:0f:85:12:5b:b8:c6:43:e2:f8:3e:
5f:cd:6b:d5:aa:ce:48:de:af:53:39:ef:1c:e9:61:
ae:bf:35:8d:6d:e8:ee:07:2a:fe:ad:c1:a7:63:5f:
04:e1:b7:a4:44:b1:85:57:68:ef:07:de:d5:39:d7:
3e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E0:E8:AF:40:3B:7C:E8:6A:13:4A:45:42:2C:28:81:F7:78:C9:F9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FODor0A7fOhqE0pFQiwogfd4yfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.44.0/24
194.87.51.0/24
194.87.54.0/23
195.58.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ce:3e:4c:d5:23:67:d5:af:3b:40:42:6e:37:54:a0:35:b0:
bb:d1:d6:1f:48:2b:7d:c0:ca:9c:61:56:a4:23:97:4c:58:44:
8d:9c:0e:73:5b:2c:c2:bd:c7:52:e2:a2:39:ec:98:81:30:e2:
0e:96:6d:49:97:3f:e9:4b:a6:d9:e5:39:a7:f2:f6:55:f3:b3:
5c:90:4d:26:c7:cf:8c:57:b1:83:6e:f6:d9:d5:9f:3a:50:d3:
47:4a:88:fb:e5:1e:71:ed:45:bc:77:2b:40:ed:6c:25:8a:f3:
77:7e:db:92:af:39:4e:48:f2:52:c9:12:eb:1e:2f:c4:72:3b:
c1:31:75:45:5f:f8:36:e7:89:67:c6:a4:4d:b1:bd:92:79:c8:
34:8c:d4:9c:57:fa:da:8b:fa:7a:4a:cd:a1:d4:95:a7:a9:8f:
61:b2:de:c9:24:99:ba:ae:d9:ca:f8:5d:3f:8c:64:c7:f4:81:
2b:ee:87:c3:09:35:a9:73:2b:09:ae:09:bd:85:d5:e8:fe:ff:
1a:85:16:06:dd:73:3a:9f:dc:22:49:89:3b:b3:ba:0e:7e:79:
39:d7:f3:5e:f8:a0:e0:14:16:63:8a:a6:94:60:12:6f:8f:97:
7b:c9:f4:16:ab:10:63:e8:ff:1d:1b:3c:97:c1:a6:c9:31:9b:
bc:c1:19:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 06:11:31 2023 by rpki-client on console-ams.rpki-client.org