Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PZPk--AyFnOabBRJ7vvUVf-6Kl0.roa
File: PZPk--AyFnOabBRJ7vvUVf-6Kl0.roa (raw, json)
Hash identifier: ieY5yWKFBbfhhB+jejdT6trK3p85OjWPbl7SJLPj2cI=
Subject key identifier: 3D:93:E4:FB:E0:32:16:73:9A:6C:14:49:EE:FB:D4:55:FF:BA:2A:5D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188432F79F62FD0AA2DB3469C0CB45BEBB0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PZPk--AyFnOabBRJ7vvUVf-6Kl0.roa
Signing time: Mon 22 May 2023 11:19:24 +0000
ROA not before: Mon 22 May 2023 11:19:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.87.246.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:43:2f:79:f6:2f:d0:aa:2d:b3:46:9c:0c:b4:5b:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 22 11:19:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d93e4fbe03216739a6c1449eefbd455ffba2a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:b8:f5:b1:50:3d:8c:3f:fd:f6:8c:13:ec:
56:28:45:95:82:2f:0b:a0:12:d6:84:14:44:5d:46:
c3:df:1a:32:36:f8:52:6e:1f:bc:78:8c:f1:be:9c:
81:ea:27:97:d6:8b:ae:60:1b:33:98:28:14:09:3a:
3d:a8:d3:69:04:02:dd:eb:58:a8:0e:9a:e0:32:eb:
dd:6f:1a:e1:24:f0:44:e0:71:f2:62:fe:49:64:85:
cb:2d:bd:6a:3c:f6:28:2f:3a:ff:ba:e3:4c:57:57:
f8:65:13:12:18:73:e0:c8:ef:9b:dc:fe:41:f6:44:
73:0a:e9:16:24:c6:42:88:38:35:97:30:9c:77:07:
2a:8c:29:ac:d0:d1:50:53:47:91:a5:b7:36:f4:9d:
9c:66:df:ae:8d:29:7e:ab:68:82:d1:73:2f:a6:51:
a1:8e:70:9c:08:94:64:d6:01:24:b5:2a:c8:22:ed:
1a:03:e7:87:b9:cf:77:e6:bf:eb:73:46:bd:4e:f2:
83:dc:71:27:13:58:23:7b:27:4d:6c:3e:40:9d:22:
29:1d:e1:e3:97:2d:47:7e:60:07:de:a4:20:13:ae:
e9:dc:a0:3a:76:9d:a5:ca:a2:a1:1a:ad:ca:a1:4e:
f5:9d:f4:f0:95:63:91:27:1d:b1:0b:0c:86:3c:99:
19:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:93:E4:FB:E0:32:16:73:9A:6C:14:49:EE:FB:D4:55:FF:BA:2A:5D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PZPk--AyFnOabBRJ7vvUVf-6Kl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.170.0/24
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f2:99:4e:95:1c:03:02:74:61:0b:65:4f:d6:3e:55:19:3e:
9b:d2:a5:c2:f3:36:b4:6d:06:9a:c0:ca:d0:0d:ce:da:55:65:
53:f1:da:d7:98:a7:47:e7:5a:5a:81:60:8d:18:bb:24:b8:b6:
85:61:ff:e0:1d:c7:45:0c:f5:06:5f:c3:97:15:66:4e:74:07:
f8:fb:22:9e:e5:1e:3c:4d:8c:3c:42:f3:cc:ae:03:57:3e:f3:
f9:92:10:be:67:b0:16:23:8d:89:c7:52:34:be:45:88:01:56:
03:be:61:d3:f5:44:65:c3:4b:95:b6:c5:a8:38:5a:4f:7a:52:
1e:73:a0:63:81:95:37:2d:83:59:45:00:7c:81:c4:66:80:88:
63:dc:d5:27:9b:0d:0a:32:92:21:69:d7:48:82:75:9e:92:90:
7e:80:e4:81:c9:57:d5:5a:e0:fa:ab:23:67:c2:5a:23:69:2a:
1c:8b:37:a0:ce:92:a4:98:13:e0:f6:92:73:97:53:15:bf:b8:
91:ec:fc:77:77:4e:c9:ff:8b:d3:08:8d:b0:9d:9d:07:d9:13:
b0:f9:59:49:8d:f2:3b:a7:9f:f9:a3:e6:a6:13:63:6f:27:2e:
c1:35:72:26:39:8c:29:a6:a4:47:de:17:c2:05:9b:17:b6:ca:
14:c9:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org