Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sv7j0QxBIoKX2aBCw1NQTnGLZJ4.roa
File: Sv7j0QxBIoKX2aBCw1NQTnGLZJ4.roa (raw, json)
Hash identifier: Gw/i6gbyKsFNeofSDERd+5v9lJm+AQqIaDQRT211ykc=
Subject key identifier: 4A:FE:E3:D1:0C:41:22:82:97:D9:A0:42:C3:53:50:4E:71:8B:64:9E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F671A79E49293528FDC02429E9EC32C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sv7j0QxBIoKX2aBCw1NQTnGLZJ4.roa
Signing time: Sun 01 Jan 2023 22:15:06 +0000
ROA not before: Sun 01 Jan 2023 22:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213028
IP address blocks: 194.135.124.0/24 maxlen: 24
194.87.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:1a:79:e4:92:93:52:8f:dc:02:42:9e:9e:c3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4afee3d10c41228297d9a042c353504e718b649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e8:13:8c:2f:86:b2:8b:3a:c6:58:bc:03:e1:
c9:ce:26:46:a5:2f:85:f3:e8:6d:94:62:92:05:4c:
79:f4:fe:00:a2:24:38:b7:90:1f:dd:d8:26:09:5e:
18:14:b7:d6:ad:d5:c3:c4:e4:c1:16:56:b1:1d:35:
e7:bc:b9:84:31:e3:7a:b8:c0:f1:83:29:d2:85:de:
80:f2:38:04:4e:50:b8:c5:bd:2f:ed:dd:49:02:d0:
a6:09:ef:0c:6c:12:48:9e:33:3e:a9:be:f2:3a:c8:
9f:cf:73:18:e1:a2:20:3a:6f:c8:93:67:d3:10:e0:
98:10:86:f2:b2:e3:d6:2e:3f:8f:2a:4c:30:91:2e:
dd:7f:31:11:05:fa:cc:bb:f7:65:ff:43:f4:46:8f:
ad:e6:ba:a3:42:f7:a8:a0:76:fb:ee:2d:27:b1:df:
7a:b4:4a:74:d5:59:70:69:92:f9:c0:ad:c8:a0:a1:
d9:2a:7a:b8:04:f7:6c:60:1d:8d:5f:a2:dc:ac:72:
03:58:e9:4c:83:d4:63:ed:4d:67:cc:4d:34:53:3f:
89:4d:44:85:53:cb:c9:82:44:eb:eb:81:6c:25:f7:
42:4a:28:a0:d5:ff:df:5e:95:f0:dd:9f:7a:6b:72:
e2:08:98:1c:29:5a:4e:94:b6:02:7c:0e:c8:ab:8f:
cb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:FE:E3:D1:0C:41:22:82:97:D9:A0:42:C3:53:50:4E:71:8B:64:9E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Sv7j0QxBIoKX2aBCw1NQTnGLZJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.74.0/24
194.135.124.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1b:9c:9f:fd:e7:a4:62:ff:5b:12:62:89:9d:45:16:6b:8f:
14:89:37:e1:83:b6:36:12:cc:6d:e8:6b:0e:4f:0f:a5:f4:2c:
fb:60:e9:a6:84:91:2d:ab:63:5e:cc:4b:49:0d:b5:f8:53:fc:
08:a9:ca:0e:32:0c:9f:b2:f8:cb:79:7d:1d:fd:fc:36:17:59:
a3:cb:3e:c1:7d:e3:0d:a0:b6:a2:2e:2e:91:a0:72:86:e6:d2:
79:43:13:06:59:08:e7:ad:21:d1:40:74:13:0c:37:67:e5:58:
1b:45:b6:94:a5:90:63:5d:f5:99:f8:6a:69:f4:3a:01:6d:31:
e2:27:0f:a8:6d:91:9d:93:59:91:ce:c4:f8:6b:c7:b8:98:51:
2a:56:94:da:90:46:8d:3d:37:bd:86:6d:9c:90:97:58:83:d8:
e7:bd:77:59:79:26:b0:93:b0:ac:7a:8b:d4:09:78:0b:58:3e:
47:a0:e1:e0:84:46:2d:34:e8:7d:5e:33:e6:36:66:d1:68:51:
da:11:58:73:c1:6b:6a:1e:b6:0a:82:21:b8:02:be:f7:4a:3e:
32:6e:fa:3b:f6:2a:fe:22:7d:c7:d7:9f:bd:de:f5:e2:dc:b9:
8d:25:e1:55:cc:95:07:8f:e4:24:bf:36:a4:bd:c2:82:69:c5:
80:b4:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 05:02:06 2023 by rpki-client on console-ams.rpki-client.org