Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RRj4aUsT9H0EhnNqhzcrLI--yZk.roa
File: RRj4aUsT9H0EhnNqhzcrLI--yZk.roa (raw, json)
Hash identifier: vidgji3GGCHdtdyTGY/44QALMUx02ji5FRTA3zfzX7M=
Subject key identifier: 45:18:F8:69:4B:13:F4:7D:04:86:73:6A:87:37:2B:2C:8F:BE:C9:99
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187E13BC4B1B1E788720534780B23395E13
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RRj4aUsT9H0EhnNqhzcrLI--yZk.roa
Signing time: Wed 03 May 2023 10:50:03 +0000
ROA not before: Wed 03 May 2023 10:50:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:3b:c4:b1:b1:e7:88:72:05:34:78:0b:23:39:5e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 3 10:50:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4518f8694b13f47d0486736a87372b2c8fbec999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4f:b2:02:f7:13:f0:6b:c4:7d:2a:1e:3e:9b:
c7:9b:6f:a3:94:10:3d:18:e7:c8:55:7c:88:cb:1e:
6a:2f:5c:d6:87:76:29:c5:68:95:9e:98:03:4d:f9:
e9:1a:e3:50:3c:0c:50:9a:c1:89:76:a6:86:3e:9e:
ed:d7:db:d6:d1:de:3e:39:c0:a9:3c:2c:88:38:4c:
22:ad:68:24:ca:08:9f:06:98:8b:c7:fb:3a:ad:27:
80:d2:f6:95:36:be:ba:97:33:41:d3:35:79:9d:ec:
cf:91:8b:72:fa:4c:84:42:a0:47:be:17:76:e4:28:
dd:e0:ce:07:45:2d:73:d1:89:94:79:b8:38:f6:af:
17:86:28:64:54:92:bb:09:d2:58:ba:4b:24:1c:09:
6e:8e:53:b4:52:e6:6a:3c:21:6e:66:57:89:b5:c5:
c0:48:84:f6:b1:d7:e6:84:48:66:bc:85:a2:28:c1:
4d:33:ac:9c:ff:4c:49:ab:db:f3:19:68:a7:b0:55:
b9:cd:b9:4b:a3:26:13:eb:65:23:57:3e:1d:8a:4f:
0d:40:f5:ce:43:d9:f4:ed:10:04:22:2f:21:c2:b0:
ed:b6:71:19:fa:fc:a7:d4:a6:41:53:25:c6:38:82:
3d:e1:77:56:ca:97:5d:13:5b:fa:4b:bf:6d:64:28:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:18:F8:69:4B:13:F4:7D:04:86:73:6A:87:37:2B:2C:8F:BE:C9:99
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RRj4aUsT9H0EhnNqhzcrLI--yZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.200.0/24
Signature Algorithm: sha256WithRSAEncryption
11:d6:42:d1:0a:d6:d0:82:76:e7:91:18:d9:84:50:ba:6c:c9:
72:81:c4:4d:12:6b:91:cb:82:bc:59:3a:b4:61:6a:64:88:20:
37:e3:3e:8a:8d:8a:dd:6d:c1:02:6a:69:ed:7a:1e:7b:3f:60:
ba:cb:90:de:11:20:e0:9b:43:1e:c8:34:1a:93:e3:24:f8:2a:
3b:fa:83:dc:23:8c:f4:25:74:54:5a:b0:d2:84:b6:65:cd:38:
cc:8c:a9:25:16:34:db:38:8d:75:bf:b7:da:ef:1c:65:5a:14:
23:63:59:79:61:98:74:d7:35:3a:2b:40:30:da:cd:23:40:e3:
04:26:dd:4f:40:1c:6e:90:90:53:3e:44:10:01:3f:67:cd:3b:
88:51:b9:df:1f:e7:b5:6d:e0:34:34:89:8e:89:af:95:4a:08:
4a:87:f9:18:59:f2:5d:b8:d3:a1:00:0f:91:26:ac:d3:79:29:
e7:4e:24:6f:ae:76:91:27:46:aa:16:13:60:f8:70:86:59:ec:
33:f9:b6:35:1e:05:51:d7:f2:0c:93:de:0e:93:35:a9:3c:05:
8e:49:07:22:04:ab:a7:76:bf:ad:4b:7c:e5:3c:fe:6f:e0:45:
61:e9:b4:60:6c:9d:b1:07:c7:55:8d:fa:17:07:ab:8e:56:2e:
93:2c:cb:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:57 2023 by rpki-client on console-ams.rpki-client.org