Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OR1o3ysAvvm1eY-eqQXJh7Y5-wE.roa
File: OR1o3ysAvvm1eY-eqQXJh7Y5-wE.roa (raw, json)
Hash identifier: vxchfLn0EFlVeGCuoLHaqNbZSMQ0t8AysvtNyB7W/9o=
Subject key identifier: 39:1D:68:DF:2B:00:BE:F9:B5:79:8F:9E:A9:05:C9:87:B6:39:FB:01
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A8975624B22885D8E63033766B626
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OR1o3ysAvvm1eY-eqQXJh7Y5-wE.roa
Signing time: Tue 02 Jan 2024 12:33:54 +0000
ROA not before: Tue 02 Jan 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207633
IP address blocks: 194.87.188.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 11:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:89:75:62:4b:22:88:5d:8e:63:03:37:66:b6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=391d68df2b00bef9b5798f9ea905c987b639fb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:53:5e:4e:26:71:ed:1f:34:6d:ce:4d:c3:cf:
af:c1:42:2c:e8:3b:5e:4c:f6:77:36:29:14:c1:f7:
45:a5:bc:1c:49:ce:84:ce:7b:73:e8:5c:0c:20:2a:
e9:cd:1e:88:64:b6:02:92:5c:32:3f:c7:b4:b6:d3:
4c:2e:0b:3a:69:07:85:03:8c:bd:6d:16:8a:73:24:
c2:ab:89:55:70:8e:72:fa:79:14:fa:2a:52:c8:cc:
f3:3f:72:ee:c1:c9:9a:87:30:14:fe:48:a3:b2:57:
7f:1a:82:a6:81:3c:c8:3d:5a:d1:99:16:2a:c5:af:
d5:62:88:99:1c:34:dc:8d:37:8c:bf:86:49:97:0e:
3b:2a:38:2e:02:a1:f1:0a:12:cc:a8:a2:e0:83:2d:
30:32:e9:9c:f2:84:74:e8:7f:32:07:ee:01:f7:99:
aa:38:77:4e:18:1a:2c:07:50:ea:2d:46:bf:b6:61:
7b:0e:37:f5:bb:53:b0:6a:9c:a2:7f:10:42:83:2d:
46:38:c2:27:a6:19:28:db:1a:56:41:e8:4a:b3:ed:
28:16:c1:5d:40:24:c1:9a:41:4b:9e:07:29:8b:37:
10:97:24:f3:3f:0c:0b:96:69:f4:fe:73:1f:85:e9:
21:57:fe:f5:ba:4f:4d:b4:28:81:b0:77:b4:dc:30:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:68:DF:2B:00:BE:F9:B5:79:8F:9E:A9:05:C9:87:B6:39:FB:01
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OR1o3ysAvvm1eY-eqQXJh7Y5-wE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.91.0/24
194.87.188.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a7:df:81:a0:05:f2:2e:54:c1:84:26:80:ac:bb:fa:b2:3f:
59:0e:32:77:85:1a:3e:58:59:3a:4e:a1:25:28:8a:2c:96:af:
a6:77:d5:13:17:01:46:55:be:d4:5c:db:6f:69:84:24:81:f3:
68:a4:10:27:fe:db:ed:17:c5:bf:44:40:24:c6:95:28:2e:96:
ac:cd:97:85:37:cf:72:89:9b:81:68:07:d0:fb:04:c1:64:7b:
84:70:c5:4f:3c:ad:33:0f:cc:d7:ea:89:ec:81:8e:e9:1a:ae:
14:eb:33:2d:c8:52:74:4e:f8:ac:e9:96:70:73:41:1e:b0:d5:
6b:ac:eb:6f:95:35:e6:cf:08:5e:6f:0d:e7:ae:6d:84:79:32:
21:2b:11:0b:40:da:1f:79:30:f0:7d:ba:37:5e:d9:29:8a:e9:
bd:69:f5:a6:e3:5e:7a:87:d8:58:a6:6f:a1:e9:7c:42:48:a6:
71:3e:f0:8d:eb:ad:a9:75:45:64:b2:03:5a:17:85:a6:c6:e5:
59:43:e9:76:f6:e8:2f:0e:a1:66:4b:47:96:49:a4:2d:96:e9:
5b:ca:5c:f6:5b:e4:e3:28:b9:f7:de:9f:2b:fa:60:16:7c:6d:
1b:b9:24:6c:1d:ce:6d:79:f6:e2:6a:04:5c:3a:f7:63:54:81:
d7:7e:5b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 14:26:17 2024 by rpki-client on console-fra.rpki-client.org