Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Rnd0dMwF_BT17he6GoJ6pKcbFEM.roa
File: Rnd0dMwF_BT17he6GoJ6pKcbFEM.roa (raw, json)
Hash identifier: Lj5zwI4t4uVIhPEfq6ZS0sfa/4/0jVpS3BosgVwnz2M=
Subject key identifier: 46:77:74:74:CC:05:FC:14:F5:EE:17:BA:1A:82:7A:A4:A7:1B:14:43
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018998D4C3832FAD29463F49F256F16B0468
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Rnd0dMwF_BT17he6GoJ6pKcbFEM.roa
Signing time: Thu 27 Jul 2023 19:30:27 +0000
ROA not before: Thu 27 Jul 2023 19:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 194.87.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:d4:c3:83:2f:ad:29:46:3f:49:f2:56:f1:6b:04:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 27 19:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46777474cc05fc14f5ee17ba1a827aa4a71b1443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:2e:f1:f4:0d:57:6c:5a:e8:03:e2:ac:ed:
eb:31:5c:82:ce:50:9d:3d:68:3f:2f:89:a0:77:95:
4f:50:0d:f1:88:05:a2:e6:3e:2a:f7:cd:78:d0:3e:
b6:6b:19:4f:35:99:0e:65:e8:28:11:e2:2f:f0:92:
b9:bb:13:b1:27:c0:1e:9d:e9:0c:9f:7b:37:ab:bf:
c6:68:f9:4b:9c:da:0e:39:d7:5d:c6:99:cd:1f:f3:
02:4c:fe:e8:43:c2:2c:99:24:3e:cd:07:86:44:3d:
26:62:db:c8:ce:2c:87:19:0f:15:46:95:00:77:73:
42:5f:43:97:81:04:a8:ab:95:04:11:a5:38:1b:8a:
b4:f6:2b:55:cf:02:ac:50:e7:7d:09:55:97:50:76:
d6:ea:43:c9:ae:75:ef:7a:00:77:0c:6f:26:ea:eb:
fd:b6:95:04:fb:ac:83:d7:20:ce:7a:f1:2f:af:80:
13:60:da:68:7d:5b:f4:75:16:4d:e1:63:49:71:ab:
39:f3:34:ac:8c:4c:fa:e6:ee:56:a6:ac:b6:b9:d1:
d3:30:5c:9d:65:9b:1b:ee:b0:04:14:11:32:5a:3a:
f5:11:95:29:23:21:cc:0d:03:44:38:66:d0:e0:79:
16:a1:b9:a0:c0:8e:44:76:b3:da:c2:96:00:7f:10:
0f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:77:74:74:CC:05:FC:14:F5:EE:17:BA:1A:82:7A:A4:A7:1B:14:43
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Rnd0dMwF_BT17he6GoJ6pKcbFEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.63.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:8c:78:eb:1d:97:c4:5e:0f:5a:92:3c:c5:5f:df:8f:9f:aa:
03:b2:8b:16:72:a2:9a:00:15:b2:31:f6:70:27:98:1f:d4:b1:
24:21:bf:94:9c:c3:3c:ad:54:8e:0d:bc:d5:b4:8e:d4:58:5c:
69:8d:48:46:c4:86:d5:b3:6d:7a:dd:da:8b:ae:d7:70:45:e3:
c2:72:78:66:83:b7:1e:1c:27:3a:4b:69:32:a6:a2:88:96:33:
c0:35:ab:95:c9:53:97:02:24:9c:6e:30:11:31:d2:f1:9f:d2:
e2:6c:64:1e:d0:36:e5:0b:7b:78:74:39:52:78:23:e7:1c:a4:
3a:c1:56:29:19:7b:43:92:03:fb:04:e2:7e:cb:ee:e1:ab:56:
66:7a:e0:bc:ff:e9:6d:dd:0b:af:47:8b:5c:b8:f2:57:08:3f:
12:e0:e6:11:e9:29:c1:83:fc:05:c9:a2:7b:ac:43:6e:87:2f:
9d:58:0d:68:33:f4:6a:39:f0:a2:25:2c:cb:6d:64:46:45:c9:
c6:23:ea:c0:b6:64:48:3f:90:bb:b1:70:20:14:1b:52:04:d9:
e4:f8:42:0f:8e:c4:53:62:ac:8a:6c:e2:cf:07:d4:02:b4:86:
7f:c1:11:76:7d:c4:ee:1a:c6:6b:ed:56:3a:de:69:b4:0a:d6:
ee:82:fc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 12:20:23 2023 by rpki-client on console-ams.rpki-client.org