Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J2fuGpCBnokFPY6c0aqgmhQPHKo.roa
File: J2fuGpCBnokFPY6c0aqgmhQPHKo.roa (raw, json)
Hash identifier: eX8n3B0ycm01ypihUFQMR2uZsBrGAzTTEorYwl5EhLc=
Subject key identifier: 27:67:EE:1A:90:81:9E:89:05:3D:8E:9C:D1:AA:A0:9A:14:0F:1C:AA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188A9F8755CBA60A0A7318A8066EC8ED4CA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J2fuGpCBnokFPY6c0aqgmhQPHKo.roa
Signing time: Sun 11 Jun 2023 10:20:12 +0000
ROA not before: Sun 11 Jun 2023 10:20:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 194.58.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a9:f8:75:5c:ba:60:a0:a7:31:8a:80:66:ec:8e:d4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 11 10:20:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2767ee1a90819e89053d8e9cd1aaa09a140f1caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c0:d0:63:ee:51:95:e7:62:a8:fc:d4:cb:e1:
75:21:29:3b:75:8f:66:ae:76:12:68:f7:41:d6:88:
a4:82:3f:8c:e0:8c:1a:49:93:a3:49:2a:b1:57:b9:
24:f5:a6:7e:8f:3b:58:b2:e4:c1:ed:aa:0e:1d:89:
76:f3:08:5d:24:e4:17:6b:fb:dc:17:f5:5e:ca:44:
1c:df:7a:04:3f:d6:da:2d:ea:9a:6c:fd:cf:e2:b1:
8f:8d:80:34:c5:0e:7b:89:65:bb:39:08:0d:2c:a9:
ce:91:bc:84:ad:cc:0a:e7:04:6d:6b:ef:08:a3:b0:
05:7d:d8:6f:92:33:58:7d:fb:23:7a:a3:1f:4e:6e:
7f:8e:95:d7:12:12:2b:53:2c:39:8f:bc:25:a4:ee:
0a:71:cf:4a:81:97:77:5a:5b:31:19:9d:ec:19:a7:
2c:ea:62:5c:e2:35:fe:d3:f8:a1:0e:d5:0a:7d:04:
fe:7b:5d:4a:bb:37:09:36:c6:2f:a3:4a:6e:a5:4c:
d4:0e:e4:95:fe:c6:d3:f4:ce:3c:13:a1:1a:e0:ad:
29:9f:4a:ac:23:88:69:7e:b5:38:d6:85:05:39:da:
c8:a2:07:f7:c9:59:32:63:d2:71:31:74:09:ac:38:
a0:9e:a7:09:7b:4e:ee:a0:3b:fa:60:9f:9e:f9:53:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:67:EE:1A:90:81:9E:89:05:3D:8E:9C:D1:AA:A0:9A:14:0F:1C:AA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/J2fuGpCBnokFPY6c0aqgmhQPHKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.67.0/24
Signature Algorithm: sha256WithRSAEncryption
34:a1:d3:05:08:1f:96:7e:3f:a8:72:5a:a7:ec:da:18:49:07:
82:41:b0:28:e7:a7:ff:44:19:e5:75:08:7c:4a:2a:8c:64:93:
bb:14:7d:93:76:c9:91:64:ab:fb:4e:a5:63:a3:34:56:02:89:
f7:0f:ae:0c:19:f5:5a:83:51:09:23:2b:82:41:0a:44:f7:24:
7c:f7:37:8b:b6:68:53:0b:d9:fe:8c:a1:cf:8f:6e:35:5c:6b:
1e:c1:e1:82:c9:83:5d:a8:e5:39:92:fa:7e:dd:eb:40:9f:a9:
b5:aa:19:ae:63:9d:9b:4e:d7:3d:66:c3:75:ec:39:e1:46:a7:
aa:1c:62:c6:14:17:05:ea:82:b2:fe:18:f1:17:cf:a7:5a:31:
ec:f4:2e:14:34:8b:25:ab:93:44:3e:06:59:32:fd:e0:cf:ba:
64:e8:7d:80:85:5f:58:70:61:80:87:9c:9d:d7:aa:ef:29:71:
71:ae:de:7a:be:87:26:ab:3c:3f:52:7d:e8:a5:96:d5:76:71:
4d:44:cc:94:cc:d4:11:33:9e:8a:05:b4:af:70:bd:d6:99:7e:
08:cf:4e:a6:ad:77:1f:74:7c:ff:29:c7:11:51:2b:a9:d0:f1:
4c:fb:ea:d7:5e:25:6c:19:99:e5:21:44:83:9a:54:f4:3a:23:
20:74:e3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:55 2023 by rpki-client on console-ams.rpki-client.org