Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OJnn6dvuFGlWAdvDxewbh0hXzFE.roa
File: OJnn6dvuFGlWAdvDxewbh0hXzFE.roa (raw, json)
Hash identifier: r2hJsz7qZlzo0l1Xhe++3Z87bVzU8/fToOkgbzOCDOM=
Subject key identifier: 38:99:E7:E9:DB:EE:14:69:56:01:DB:C3:C5:EC:1B:87:48:57:CC:51
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66F3FE87CF424C4A6B795BD9F32629
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OJnn6dvuFGlWAdvDxewbh0hXzFE.roa
Signing time: Sun 01 Jan 2023 22:14:56 +0000
ROA not before: Sun 01 Jan 2023 22:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.87.120.0/23 maxlen: 24
195.133.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Jan 2023 13:59:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f3:fe:87:cf:42:4c:4a:6b:79:5b:d9:f3:26:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3899e7e9dbee14695601dbc3c5ec1b874857cc51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1f:25:92:41:84:a4:2e:aa:b0:56:b9:98:1e:
e2:8f:e9:23:07:1d:9a:8a:34:fd:4a:89:f8:9e:e7:
51:67:44:bf:38:96:6e:f5:c5:7e:98:0b:92:ee:ca:
4f:55:a1:4c:7f:6b:82:cd:68:ae:cc:92:fd:0a:dd:
b2:62:ae:f8:ec:1a:57:82:4f:dd:c5:db:e9:1c:b5:
bb:65:99:9e:42:98:5c:93:46:e6:74:02:ca:f1:43:
0d:de:e5:18:36:f6:c9:38:20:98:ec:7b:5e:ee:43:
43:8d:3f:98:ff:a4:96:5e:b0:07:8a:97:0b:f9:d6:
21:04:74:26:df:b7:cc:c9:f7:30:20:73:31:72:7a:
43:2e:de:d4:19:04:e8:c7:c3:95:b9:5e:5d:8d:97:
54:07:e8:1c:4e:13:1c:70:44:64:fc:ff:0c:c0:eb:
2f:0a:89:f5:58:fc:9f:a9:1e:3f:78:a2:13:b8:17:
2f:05:17:58:e9:41:41:6d:2c:3a:1c:ad:a5:32:b2:
73:f0:12:3e:40:c0:da:c2:ad:14:e3:6a:b4:b6:2e:
ea:f0:91:75:2c:eb:69:f7:19:6c:fd:27:65:ba:d1:
43:c4:b5:69:18:47:5f:d3:ce:64:e4:62:66:b9:63:
8a:53:ac:0c:05:11:c8:c0:87:f6:93:c8:90:0c:a5:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:E7:E9:DB:EE:14:69:56:01:DB:C3:C5:EC:1B:87:48:57:CC:51
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OJnn6dvuFGlWAdvDxewbh0hXzFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.120.0/23
195.133.24.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5a:f4:cd:bd:76:68:b3:ee:ac:f0:7d:8f:1b:f4:93:24:eb:
a6:64:dd:5b:a1:52:b9:94:09:ec:2a:6d:d9:c5:52:3e:3f:b5:
b4:3d:5d:cf:c9:53:ea:ef:7c:9f:91:ac:b5:dd:91:b8:c2:f5:
6d:04:7f:14:0b:93:a2:5d:f5:f5:ce:ad:4c:76:38:42:65:28:
95:eb:96:a0:56:82:41:52:75:cc:e3:5a:79:9b:38:ad:19:44:
90:1b:57:be:0a:c7:64:27:5d:64:f7:07:37:95:ad:d1:fc:4a:
d7:30:b2:fd:6a:c5:d4:2e:ab:07:6f:27:35:4d:27:54:2c:0c:
93:76:ee:f6:7c:19:58:63:25:c8:7e:2f:26:6b:ee:f1:30:50:
0d:e4:1c:39:bb:9b:68:67:6b:63:c6:1d:e8:f7:4e:00:f9:bd:
6a:5e:ec:5a:f0:4f:13:40:57:4c:cc:e4:bb:b9:93:b2:b1:9e:
c0:4f:48:f1:7d:e2:83:45:be:ac:ca:5a:d2:c0:76:5a:c1:96:
9b:aa:53:2a:f3:c1:36:d0:3d:a5:68:1f:83:d8:95:41:e6:99:
30:18:bd:67:6e:b5:fe:ed:58:e0:37:3c:ef:f5:c5:12:f7:52:
fa:f8:87:e2:26:73:b9:dd:29:4e:a1:ab:a4:53:98:a7:44:33:
44:44:8d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org