Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L_NQcsUfulk-ydqD6FbvTPUel6U.roa
File: L_NQcsUfulk-ydqD6FbvTPUel6U.roa (raw, json)
Hash identifier: 6kl9xbQBPLyZPHH+deojRuSnTt4QhFL8aSN16vquwyM=
Subject key identifier: 2F:F3:50:72:C5:1F:BA:59:3E:C9:DA:83:E8:56:EF:4C:F5:1E:97:A5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01888ADFF1968CF2EF67E7336C58E84AD407
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L_NQcsUfulk-ydqD6FbvTPUel6U.roa
Signing time: Mon 05 Jun 2023 09:25:12 +0000
ROA not before: Mon 05 Jun 2023 09:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 192.124.177.0/24 maxlen: 24
192.124.175.0/24 maxlen: 24
194.87.64.0/24 maxlen: 24
212.193.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:df:f1:96:8c:f2:ef:67:e7:33:6c:58:e8:4a:d4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 5 09:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ff35072c51fba593ec9da83e856ef4cf51e97a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e4:e6:99:45:77:b5:f6:a0:20:cd:a9:b2:c3:
6e:96:5a:cf:6b:96:66:2d:14:a2:26:53:6c:74:76:
ba:c3:54:42:f4:bd:ee:22:0e:30:ec:ac:92:24:0d:
56:3f:9c:9f:5b:19:33:a6:5f:e4:46:6e:a0:6a:fc:
cc:e8:7d:dc:5b:31:a7:4d:35:d3:59:3c:35:d3:c7:
3f:87:b5:06:aa:35:af:a3:65:4c:32:9b:89:55:4d:
b2:de:4b:09:4b:e4:44:32:c6:26:05:c0:32:35:e3:
ff:a4:36:67:d5:c4:30:37:e9:3c:e0:95:3d:77:3d:
56:28:29:eb:84:b3:13:eb:86:48:5e:fd:1a:5a:dc:
0a:da:6f:0e:f6:a9:92:5c:57:75:b3:05:dd:bb:a5:
f6:c3:a8:7f:50:d0:a3:ee:8f:8c:3c:49:0b:71:87:
df:fe:b6:5a:73:98:7b:59:65:3e:1e:90:01:d4:63:
e8:3b:d5:73:b0:fa:c2:2e:2a:d0:7b:d7:70:5a:7b:
6d:96:e6:48:52:7d:12:e4:ec:83:1d:cf:45:0e:5d:
d0:fc:92:a6:af:04:f4:a6:2b:94:2a:4f:b7:93:90:
5f:bd:f7:4c:e5:ae:40:81:4b:ab:67:a2:31:56:f6:
0a:6f:f8:3d:29:34:01:43:4d:ed:72:95:40:db:53:
e9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F3:50:72:C5:1F:BA:59:3E:C9:DA:83:E8:56:EF:4C:F5:1E:97:A5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L_NQcsUfulk-ydqD6FbvTPUel6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.175.0/24
192.124.177.0/24
194.87.64.0/24
212.193.7.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7c:59:1b:fb:7e:05:c5:64:68:7f:bd:d1:e5:fb:0b:ca:db:
25:1d:4d:f5:6e:f6:dc:59:c5:43:e5:03:3c:d5:66:9a:27:77:
43:2f:d5:54:a8:c8:4b:46:45:b8:29:c8:01:d4:13:5d:81:06:
ad:53:29:2c:4f:70:8f:c7:64:d4:22:2b:17:36:aa:5b:55:5c:
88:9b:43:4d:40:d7:81:02:94:3f:72:84:9a:36:5a:fd:99:ca:
95:93:af:df:2a:78:b1:37:39:59:4d:61:cd:ad:a5:53:76:19:
89:56:36:54:46:14:da:4d:b5:11:44:53:d0:19:d2:d3:31:83:
50:4e:85:0c:a4:f1:19:f1:84:7c:c3:8e:1a:46:f6:d3:2f:0b:
b1:a7:e9:ac:d2:f4:5f:0b:99:bb:92:09:42:17:ba:b5:3c:89:
ee:4c:43:db:cb:d3:85:48:9e:fe:2f:b3:6f:4d:f7:91:ef:b1:
56:7e:6e:00:e4:db:12:0a:12:bd:61:d9:18:59:d5:36:a1:f7:
00:6d:e8:23:6e:57:a1:b8:83:a1:f8:0a:8f:76:59:0d:03:b5:
1c:36:8e:03:08:8b:74:98:45:5b:bb:00:cb:dd:64:8a:aa:ab:
2a:34:a0:8c:53:13:2b:ea:d1:a3:af:80:57:8d:d7:db:ce:17:
23:43:19:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 11:20:35 2023 by rpki-client on console-ams.rpki-client.org