Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ql3sayXyLxl4eWMsbaNlCGpSH8E.roa
File: Ql3sayXyLxl4eWMsbaNlCGpSH8E.roa (raw, json)
Hash identifier: N+CELhBl6BZCa+ardTtbbt96EFacG7qye+C0GV/RZj4=
Subject key identifier: 42:5D:EC:6B:25:F2:2F:19:78:79:63:2C:6D:A3:65:08:6A:52:1F:C1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192F8489EAEB4DD7B3E86287BD0C1BBB995
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ql3sayXyLxl4eWMsbaNlCGpSH8E.roa
Signing time: Mon 04 Nov 2024 17:46:01 +0000
ROA not before: Mon 04 Nov 2024 17:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2118
IP address blocks: 194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
195.58.56.0/21 maxlen: 24
212.192.0.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 13:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f8:48:9e:ae:b4:dd:7b:3e:86:28:7b:d0:c1:bb:b9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 4 17:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=425dec6b25f22f197879632c6da365086a521fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:69:23:a0:2f:a3:f4:eb:8a:aa:af:e7:da:c0:
bc:5b:37:2e:5a:1e:21:41:56:19:08:d2:ce:05:e7:
27:01:5b:b5:be:93:48:27:71:5c:91:97:54:b0:61:
34:6c:79:8a:63:ee:b6:ff:af:09:52:2e:d9:6d:5a:
8f:a7:77:57:14:73:5a:89:0c:0f:c8:24:43:9f:c3:
2e:5e:df:63:18:08:96:40:7b:aa:cb:00:0d:ee:0d:
3f:06:fa:a6:29:d0:b1:1f:e6:37:26:3c:6e:3e:b6:
d5:6b:82:1c:2e:75:76:28:ff:c5:69:5f:7f:b0:b2:
6c:a0:08:78:f6:32:b8:22:d6:6e:3f:2c:f2:25:3d:
45:3e:ee:69:14:be:d6:7d:00:29:87:c7:0c:78:b7:
f6:c7:b7:de:cc:5e:99:94:74:cc:41:90:15:26:dd:
8e:8f:a3:9a:df:b7:6d:33:cc:80:ab:32:d5:35:91:
c0:39:84:99:dc:c6:57:10:6f:ac:a9:9b:e4:8d:0b:
2d:31:86:45:9b:4e:0e:2c:39:90:28:b8:8d:63:82:
06:7c:8d:37:fd:51:fc:f3:de:c1:d1:08:ba:90:93:
0f:04:80:8e:40:55:59:84:bd:51:61:e9:99:4b:59:
9f:bf:ab:ef:66:7d:76:6d:db:c2:b3:9c:84:40:48:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5D:EC:6B:25:F2:2F:19:78:79:63:2C:6D:A3:65:08:6A:52:1F:C1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ql3sayXyLxl4eWMsbaNlCGpSH8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.208.0/23
194.87.222.0/23
195.58.56.0/21
212.192.0.0/23
Signature Algorithm: sha256WithRSAEncryption
85:fe:fc:b1:8c:5e:72:31:51:48:86:fd:d8:f8:69:f2:13:6b:
1d:95:01:5f:bf:f5:ac:51:40:fa:ba:89:4c:69:7b:fe:bb:17:
ca:e4:1e:b7:80:d6:c9:9e:52:5a:e3:f5:47:4c:45:37:3d:5f:
fc:0d:10:10:69:86:e0:60:ac:82:23:4d:fa:16:3b:50:bc:29:
a9:74:01:f7:85:72:0d:69:24:3f:16:14:87:39:97:46:f6:a3:
cb:52:bd:4d:62:a2:19:72:07:f1:f4:ab:77:7e:19:12:c6:08:
27:11:cb:d9:a6:45:a9:e8:2f:30:44:b6:28:00:78:a3:a3:a5:
83:3e:a2:52:8e:44:fe:b0:76:6e:64:0d:0f:33:98:44:ad:e0:
89:5e:fb:f2:8d:9a:42:4e:e0:b1:62:39:89:63:58:c8:b6:e2:
c5:91:4b:68:cd:e3:b5:22:b1:c5:3b:1d:3c:31:4e:6b:5c:4c:
dd:5b:5c:c4:37:79:41:de:58:dc:b0:3d:06:f4:6c:30:f3:7b:
18:c0:60:80:2e:b7:01:76:2f:3b:70:5b:90:92:a7:05:da:b3:
38:83:ca:83:de:27:b4:9e:e8:72:de:e2:bd:f0:91:5b:68:cd:
25:3b:37:f7:3a:a3:54:c7:55:c1:0f:c3:38:d5:68:2a:9a:67:
33:8a:e2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org