Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Skts4YeDJQGlOo14Hs9UJZurmCo.roa
File: Skts4YeDJQGlOo14Hs9UJZurmCo.roa (raw, json)
Hash identifier: U62xXSI3itb3ulUP/VeV2NdOjVs/4jHKIhDp6B8TUvE=
Subject key identifier: 4A:4B:6C:E1:87:83:25:01:A5:3A:8D:78:1E:CF:54:25:9B:AB:98:2A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66FA3562DEBAB258C0AADFBE210568
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Skts4YeDJQGlOo14Hs9UJZurmCo.roa
Signing time: Sun 01 Jan 2023 22:14:57 +0000
ROA not before: Sun 01 Jan 2023 22:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 194.87.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:fa:35:62:de:ba:b2:58:c0:aa:df:be:21:05:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a4b6ce187832501a53a8d781ecf54259bab982a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6d:30:1e:dd:c1:8d:7a:4e:7b:f6:e0:11:2d:
d3:2a:19:87:70:22:20:7c:0b:14:a0:a9:e8:5e:2f:
7b:59:32:13:37:0b:90:8c:7c:80:9d:31:d8:a6:ca:
60:64:64:f6:32:e6:bc:30:c7:80:1a:44:10:02:40:
cb:f8:5a:ba:fd:5e:e2:e9:41:e5:84:2e:60:68:0b:
ad:d4:46:fb:ac:c0:ed:9f:30:1e:ea:0f:65:5b:d3:
de:0b:68:38:9b:4f:3a:81:07:dc:d9:f6:9e:13:4c:
20:19:4f:8a:39:58:6d:24:10:0b:b8:8c:1a:83:dc:
bb:66:05:74:4b:81:2d:e9:de:a6:b8:e9:b6:cd:f0:
1c:fd:57:61:ea:d1:6a:ef:21:c1:8e:88:14:95:2a:
df:1a:07:73:e3:11:e0:0a:3a:b7:16:8c:12:a7:72:
fb:b5:89:9c:9a:66:4e:b0:ba:72:74:3d:24:13:ca:
07:01:0a:2e:67:14:ce:89:42:cb:2a:9e:a8:24:b0:
80:c8:8e:26:51:f1:f0:fe:7b:04:22:1b:75:bf:04:
3e:30:7d:ae:66:21:70:ed:28:6f:0f:e1:b0:e0:8e:
36:2c:ea:f8:cd:47:e3:4f:ab:55:ae:51:d3:c5:ca:
55:63:bc:50:d3:80:53:cc:e9:7b:24:c1:1d:06:d6:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4B:6C:E1:87:83:25:01:A5:3A:8D:78:1E:CF:54:25:9B:AB:98:2A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Skts4YeDJQGlOo14Hs9UJZurmCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.148.0/24
Signature Algorithm: sha256WithRSAEncryption
63:d2:30:cf:94:61:75:cf:70:62:36:45:36:00:4b:43:e6:8f:
1e:af:07:64:de:7f:55:59:3f:83:87:29:68:7e:d2:8c:dd:75:
2e:5d:04:84:04:43:1c:71:38:23:59:ec:1f:61:85:0b:9f:c3:
cd:3d:83:fc:5a:d9:b0:16:75:1b:8c:91:18:b2:96:c1:ff:bc:
57:f7:ad:a2:1e:1a:01:04:f5:81:d1:d6:0b:4b:14:6d:52:4b:
65:39:d9:ce:e5:6e:70:53:4c:32:a1:f0:9e:38:91:d6:cc:68:
0c:b4:58:91:74:31:4c:d9:81:75:45:a6:9b:70:34:9f:14:6c:
e0:ed:77:8b:50:ed:08:4e:1c:cb:9f:c2:62:58:c0:01:c3:bb:
0a:f2:4f:ce:a3:41:a9:c7:e7:e2:ca:be:a0:6d:90:bf:50:e4:
6a:03:ba:00:af:c3:2c:60:69:e0:30:87:6b:03:74:48:53:c1:
77:5c:66:3d:f0:e9:08:9f:03:03:2e:92:eb:1f:f4:d0:e6:78:
f5:a1:04:f8:fa:31:57:7e:bf:15:e8:6e:0c:1b:74:77:bb:b7:
64:e3:f4:12:6f:64:4a:9a:f1:f6:21:ef:cd:cc:eb:9d:73:b8:
e5:bd:fd:d5:88:43:87:2e:3e:21:da:c2:f7:49:d5:ac:61:35:
94:20:1f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:03 2023 by rpki-client on console-fra.rpki-client.org