Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GNDlkoJuWf_UNQSSRBDUIlOey98.roa
File: GNDlkoJuWf_UNQSSRBDUIlOey98.roa (raw, json)
Hash identifier: yJ/t6uXMhvI7GZg7SFtTCw1CX0KwpAv7s5DPRGxKPTM=
Subject key identifier: 18:D0:E5:92:82:6E:59:FF:D4:35:04:92:44:10:D4:22:53:9E:CB:DF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A4AF241224C0432F70924DCC604B281D1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GNDlkoJuWf_UNQSSRBDUIlOey98.roa
Signing time: Thu 31 Aug 2023 09:35:04 +0000
ROA not before: Thu 31 Aug 2023 09:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216394
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4a:f2:41:22:4c:04:32:f7:09:24:dc:c6:04:b2:81:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 31 09:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=18d0e592826e59ffd43504924410d422539ecbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a0:03:7c:c8:bd:37:ca:f2:95:e1:42:b1:c3:
7f:b4:8f:18:91:ed:c8:be:05:df:57:84:c5:be:da:
11:c3:28:2e:fe:ea:39:20:ea:91:4d:57:6b:5e:fb:
e1:4f:15:58:13:c2:bb:98:fb:1b:ab:e3:b5:b7:8b:
43:48:cb:4f:04:33:d0:0a:f7:63:9c:27:00:a7:61:
d4:56:4b:f5:e1:e5:b9:e2:52:16:ad:88:4f:46:d6:
b9:e6:0a:86:6b:37:db:b7:99:a2:f3:f7:8c:1f:1f:
f8:a9:a4:75:bf:22:3c:5f:0e:2c:2e:25:6c:80:a7:
df:91:f0:7d:13:aa:f8:25:e3:3b:a5:57:d9:0b:b2:
8b:36:8d:46:53:27:ba:32:73:e7:e5:b9:df:32:27:
56:b8:59:dd:12:a3:53:d7:bd:91:fa:b3:90:ef:46:
48:37:f5:c5:e0:fb:aa:82:e3:8c:7b:e3:bd:5e:10:
b1:34:e6:06:38:99:06:0b:28:ee:7a:f4:27:e2:11:
b0:c1:c1:8b:71:84:79:85:29:e0:a5:ea:c7:3e:0c:
08:58:79:5c:c2:d3:01:7c:0b:f1:95:5c:1d:37:95:
f8:fb:31:70:a2:d8:98:9d:43:3c:9d:75:25:79:f7:
1d:98:29:c6:63:de:7b:81:68:f2:26:af:f9:3f:17:
d1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D0:E5:92:82:6E:59:FF:D4:35:04:92:44:10:D4:22:53:9E:CB:DF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/GNDlkoJuWf_UNQSSRBDUIlOey98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
32:35:ea:4a:25:26:d8:ed:b4:dd:1c:00:e5:09:64:64:f1:bd:
bb:c2:2d:76:48:45:c1:56:3e:54:9d:dc:f1:06:34:80:c4:07:
9a:45:f7:14:b4:65:7c:28:00:ab:b9:8f:b7:23:71:2c:31:8c:
fc:3d:59:7a:65:be:31:fe:ed:72:67:d2:9c:3a:4e:38:3b:e7:
3f:01:d1:f7:da:70:ab:4e:14:36:88:d9:c0:c9:77:2c:ab:2a:
3a:a9:75:a5:2e:a9:c6:f8:f9:df:5f:51:cb:05:92:cb:9d:0c:
e8:af:49:12:ea:fd:00:0d:41:12:84:fe:d4:74:d6:4a:d2:b1:
a5:25:8a:88:14:2a:c7:b4:1d:e4:72:4b:5e:e7:7b:6d:25:4f:
ce:a5:0f:e1:b1:3a:f8:5b:96:bf:40:36:f5:b3:2a:0b:21:79:
35:0f:8e:8d:58:e3:1c:26:e1:86:e6:2a:9d:37:e3:11:63:70:
9a:c0:a1:1e:02:e9:8c:d5:5d:9f:38:f7:a7:a1:db:86:91:40:
d5:1e:12:f8:c6:46:90:ad:64:a0:47:06:9c:3b:36:cd:d5:05:
13:49:32:18:20:69:e6:d2:24:84:25:9e:ed:39:18:e7:e6:ce:
2e:e8:30:c2:99:53:8b:b2:ee:7f:84:2d:d2:9d:48:25:8c:2c:
ad:b8:1a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 12 12:14:12 2023 by rpki-client on console-ams.rpki-client.org