Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FfwOuwGm008pWlrhB2dVwQuL-JQ.roa
File: FfwOuwGm008pWlrhB2dVwQuL-JQ.roa (raw, json)
Hash identifier: AFN7Q2k77FcAA4keMD1u05KVZwZrXnp/lOOKQ7a9PSY=
Subject key identifier: 15:FC:0E:BB:01:A6:D3:4F:29:5A:5A:E1:07:67:55:C1:0B:8B:F8:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BD36ADCCEAFF6B97B19BFA7648F78261B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FfwOuwGm008pWlrhB2dVwQuL-JQ.roa
Signing time: Wed 15 Nov 2023 14:37:57 +0000
ROA not before: Wed 15 Nov 2023 14:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146943
IP address blocks: 194.87.204.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:6a:dc:ce:af:f6:b9:7b:19:bf:a7:64:8f:78:26:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 15 14:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15fc0ebb01a6d34f295a5ae1076755c10b8bf894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:6b:97:b4:f1:8b:c4:df:b1:4a:6f:7a:13:
6a:d7:d4:3b:e7:59:5c:8f:8b:e5:68:f9:ee:b4:2e:
34:1c:38:1a:0f:d1:dc:a2:29:9b:2c:c9:7d:74:d3:
1e:4d:f8:5c:a8:78:3d:47:bb:9a:00:1c:95:90:2d:
f2:e3:71:3d:0c:da:87:2c:6a:3f:75:c7:6c:2b:42:
bb:01:f7:72:d7:57:16:12:6d:2c:5b:22:53:7d:e4:
29:90:33:dd:f0:89:93:f1:66:88:7d:5b:de:6e:79:
3b:45:a7:40:9e:87:9e:a4:34:8b:08:11:b5:20:6a:
a2:9c:5e:b7:6a:4e:ab:a7:2f:a4:a0:37:de:28:8b:
5d:5c:39:3b:eb:f1:3a:46:09:e4:a6:8c:c7:81:e4:
87:ae:28:31:8f:65:bf:f4:b7:5b:4a:ca:b0:ac:74:
f4:b7:28:f0:83:c4:48:e5:7d:b7:49:62:15:4a:90:
a0:6f:90:99:ed:ce:2d:23:a1:cc:29:b3:12:25:88:
51:c4:aa:ee:e8:94:58:ab:b6:46:36:ea:53:fa:a8:
27:ff:d1:7a:8f:9f:2a:22:36:fa:1c:b2:43:79:b4:
4f:e4:1b:8e:46:ea:65:81:1f:d3:52:08:c1:d8:35:
42:03:96:b7:15:ad:82:38:64:52:41:96:a7:41:c5:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FC:0E:BB:01:A6:D3:4F:29:5A:5A:E1:07:67:55:C1:0B:8B:F8:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FfwOuwGm008pWlrhB2dVwQuL-JQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.204.0/24
212.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
05:27:51:ba:1c:e1:cd:0d:5d:54:28:e0:1b:54:ab:0a:1a:ee:
79:24:12:96:de:2c:89:3c:dd:88:ef:85:8f:61:70:f1:d1:08:
44:bf:09:4d:f4:a6:e7:1c:3a:bf:9b:86:76:37:2c:80:19:b3:
92:67:b5:08:92:2b:94:67:d0:79:e2:b5:3d:02:ba:c9:01:7e:
85:d8:e6:c5:aa:09:65:b2:5e:65:60:86:e5:5b:44:7b:94:02:
75:c1:2a:c2:a6:43:ab:48:53:1f:ef:bc:26:df:8f:40:5b:95:
1c:1e:48:3a:b9:4a:e5:d7:80:37:da:29:ea:3b:3e:a9:a4:43:
26:e5:0f:3c:03:60:e2:6b:48:54:bd:66:3e:b5:41:2c:30:86:
7f:c7:55:a5:e0:ee:5e:91:16:ea:da:2a:36:ac:75:22:0b:62:
87:b4:cf:a9:8a:d8:08:c6:85:8c:42:7a:b4:08:30:c1:db:a6:
cd:2d:ad:51:cd:c2:9a:92:40:a1:c1:3d:69:db:43:74:64:0d:
35:c8:57:be:d6:ca:2c:28:75:b0:0b:c5:82:21:31:08:21:dc:
fe:f2:d1:6b:f0:02:23:66:be:eb:8a:c0:ad:00:39:25:19:3c:
14:cc:63:01:14:f6:11:ef:39:8b:f5:3c:82:bb:02:9f:34:51:
22:53:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 12:31:03 2023 by rpki-client on console-ams.rpki-client.org