Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RssL_Zs7XfTXQKXNW24xYQv_bRA.roa
File: RssL_Zs7XfTXQKXNW24xYQv_bRA.roa (raw, json)
Hash identifier: PwfMSvGrALTtZQQmrPTh0739bB9fmBKTQUb/nTiMldY=
Subject key identifier: 46:CB:0B:FD:9B:3B:5D:F4:D7:40:A5:CD:5B:6E:31:61:0B:FF:6D:10
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018944CA4043713166265267AD3EA07676F5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RssL_Zs7XfTXQKXNW24xYQv_bRA.roa
Signing time: Tue 11 Jul 2023 11:50:52 +0000
ROA not before: Tue 11 Jul 2023 11:50:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50053
IP address blocks: 194.87.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:ca:40:43:71:31:66:26:52:67:ad:3e:a0:76:76:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 11 11:50:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46cb0bfd9b3b5df4d740a5cd5b6e31610bff6d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:ee:d1:d2:87:92:ee:86:73:36:1f:ad:94:
0e:1b:6b:06:89:df:44:85:48:93:43:3f:ba:69:97:
ab:8b:83:e4:ac:a7:61:4a:2a:0d:4f:6f:81:a3:d3:
e9:38:ec:c9:ef:2a:3d:90:f4:d4:ca:42:8d:66:91:
8c:eb:99:1a:33:f1:e9:4e:88:5a:9d:88:fc:a8:56:
be:b9:29:40:be:6a:7c:62:9a:60:5b:c8:43:10:64:
06:85:8b:9f:3f:66:67:14:e4:1a:b5:25:8f:69:b1:
cc:4d:4c:ca:81:e9:74:01:3a:48:1e:90:cd:9e:b1:
c7:a2:f0:4c:25:78:91:64:31:bb:9f:24:fb:25:9d:
cc:e7:b8:2d:0d:88:0f:e1:11:bd:80:1f:2f:56:7b:
12:ba:c5:67:57:a2:ab:7b:27:7f:5a:97:2f:93:04:
bc:ee:75:dc:7b:bb:14:4f:86:af:7e:24:a1:02:65:
e7:2a:b7:0f:5c:8b:ca:76:a2:1a:52:71:d2:ae:e8:
08:ea:8c:3b:7a:a5:0c:8b:f0:f2:4c:2f:0e:c5:43:
1b:72:86:8c:39:54:06:39:c1:bf:e7:97:b6:dd:88:
e7:5d:d5:d7:70:9b:e5:1b:6c:a5:5b:12:2d:e0:c9:
6a:37:49:5f:18:76:a8:c8:ea:3c:60:4c:8b:58:aa:
b1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CB:0B:FD:9B:3B:5D:F4:D7:40:A5:CD:5B:6E:31:61:0B:FF:6D:10
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RssL_Zs7XfTXQKXNW24xYQv_bRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.37.0/24
Signature Algorithm: sha256WithRSAEncryption
74:13:e5:11:d6:69:4c:78:53:97:49:79:0a:4c:02:30:a2:b0:
35:1f:48:f9:fa:45:cf:d7:0a:8d:e2:0f:f6:04:01:e0:20:a9:
ed:d4:4b:74:27:c4:25:c5:4b:a3:89:da:b2:d3:de:58:f4:b3:
cd:ef:df:69:9d:4a:f9:05:e6:2d:fe:1f:59:88:b0:18:70:fc:
7a:d1:6e:6a:23:dc:aa:49:65:41:50:e6:39:4f:92:a4:40:08:
cb:27:a3:d1:b1:ca:be:2f:4b:e3:65:91:62:3a:85:4f:ce:f9:
4c:7a:4c:09:49:b8:1d:11:9d:e2:00:94:81:76:46:2b:a3:cb:
66:f3:6f:52:06:2f:d6:a6:93:41:65:dc:8d:21:67:4c:ed:ff:
55:8e:3a:85:31:c1:c3:f5:9a:ee:41:01:e4:d7:e4:f9:8c:dd:
6d:e9:a5:75:33:5f:81:5b:32:05:44:cc:5c:b3:71:95:01:d9:
fd:f2:e0:71:b0:c5:53:9a:d8:0f:d8:15:3b:2f:09:d1:ae:55:
28:da:11:dd:41:ec:54:cd:8f:18:3d:9d:20:b3:3d:0c:71:ea:
64:10:b8:cd:25:1c:07:2f:06:9b:d3:d7:13:6c:14:45:40:ce:
00:93:7c:a9:08:08:b7:99:23:43:75:ed:69:20:5e:09:f2:10:
64:85:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org