Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RBqtHJWyGbmpoGUZSf8y6MC4FE0.roa
File: RBqtHJWyGbmpoGUZSf8y6MC4FE0.roa (raw, json)
Hash identifier: wW7eRAZ9G75i56Ua6LllrCXOtKbHnau/VP1mDfq3NyU=
Subject key identifier: 44:1A:AD:1C:95:B2:19:B9:A9:A0:65:19:49:FF:32:E8:C0:B8:14:4D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01887A3055C1F7529A65679A9E100788718B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RBqtHJWyGbmpoGUZSf8y6MC4FE0.roa
Signing time: Fri 02 Jun 2023 03:39:27 +0000
ROA not before: Fri 02 Jun 2023 03:39:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51722
IP address blocks: 194.87.120.0/24 maxlen: 24
192.124.182.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Jun 2023 07:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:30:55:c1:f7:52:9a:65:67:9a:9e:10:07:88:71:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 2 03:39:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=441aad1c95b219b9a9a0651949ff32e8c0b8144d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e2:ef:cf:2d:a6:84:8f:47:d2:26:62:a1:e9:
b4:7e:d8:1e:37:28:82:00:a2:47:a7:86:2c:3b:23:
40:59:79:f4:cd:66:5b:03:32:9e:5d:82:b5:28:d6:
d2:46:13:ec:28:5e:6a:03:6a:00:11:75:0b:26:77:
16:25:42:9c:fa:d2:2f:17:09:6d:62:65:8c:c0:38:
5e:cb:4f:de:6f:65:1b:ca:41:3c:1c:af:43:1a:66:
fb:aa:e4:ab:70:a3:85:98:8b:e7:4f:3f:cb:f3:9c:
a1:57:3f:cc:b3:c7:a6:23:fa:2f:6c:a5:42:3f:ce:
58:b4:00:cd:b5:9d:be:1a:59:4a:f6:03:30:c5:9a:
07:e3:66:21:36:39:6a:5d:c3:2e:b6:00:fd:c6:96:
11:57:27:1d:d7:7d:36:57:0e:0f:6c:1e:e5:1e:a6:
9b:0f:7f:a6:a2:62:be:5b:d8:07:05:4d:3e:0e:6b:
b4:84:82:c6:c8:bd:0f:4e:62:3b:13:94:f7:d9:6f:
1c:93:86:87:7b:63:6c:0b:5c:9c:04:2f:7d:ba:91:
0a:bd:8c:5e:c5:58:47:ca:f8:b1:42:dd:f0:71:4e:
7f:0f:15:eb:6d:1b:1a:ab:91:1d:c2:ad:70:16:97:
0c:45:cc:29:e8:57:1a:8c:cb:34:72:0e:5a:6e:70:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1A:AD:1C:95:B2:19:B9:A9:A0:65:19:49:FF:32:E8:C0:B8:14:4D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RBqtHJWyGbmpoGUZSf8y6MC4FE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.182.0/24
193.124.94.0/24
194.87.120.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a4:93:d0:16:57:e2:17:6c:0e:b1:66:3e:42:4b:e3:ff:87:
1b:e5:e0:c6:da:d5:c3:4c:ff:8f:8b:57:aa:4e:bc:23:6a:62:
cd:10:db:c9:20:31:29:bc:85:35:7d:8a:b3:65:b6:bf:bc:33:
35:50:37:87:63:3f:bd:0d:61:8f:3d:48:e7:f6:32:f9:94:31:
e9:3c:a2:af:c9:43:ed:a6:c6:c9:a7:1a:f6:76:a4:3f:76:3d:
dc:eb:c7:28:6c:f3:4e:db:ad:90:50:91:5f:a9:51:57:d0:ce:
5b:e2:df:4e:19:d0:5b:25:14:ef:5b:0b:5b:e2:6e:b2:5c:6d:
42:7c:38:76:2a:b4:ac:04:3d:1d:7a:e4:48:86:46:5d:b7:36:
f0:75:de:79:c7:5f:66:4a:4e:de:26:0c:8a:a1:df:28:03:17:
00:bb:ad:51:87:16:07:74:31:d6:a0:35:91:7e:a4:30:1a:96:
70:96:43:32:3f:ab:a9:47:6e:5d:ad:e4:ba:ae:a5:ce:be:f4:
a9:32:62:16:f2:ea:83:d3:59:28:d0:3a:33:9e:6f:9e:b0:4b:
b4:d4:09:00:47:c0:34:8a:49:bc:81:34:50:71:ae:5a:e1:b0:
2c:08:df:e2:70:42:e1:03:f0:b1:e9:bf:72:5f:a9:35:19:26:
d8:7b:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:16 2024 by rpki-client on console-fra.rpki-client.org