Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T0_PlIy0hnuAr449i0dm6Lren0s.roa
File: T0_PlIy0hnuAr449i0dm6Lren0s.roa (raw, json)
Hash identifier: +2QoXd1NhRz1dtujeVvRR7XGH6ONpJW9LQ2A0vIfPDQ=
Subject key identifier: 4F:4F:CF:94:8C:B4:86:7B:80:AF:8E:3D:8B:47:66:E8:BA:DE:9F:4B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A20E56C87157BA340A660F0B45A47BB2A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T0_PlIy0hnuAr449i0dm6Lren0s.roa
Signing time: Wed 23 Aug 2023 05:37:00 +0000
ROA not before: Wed 23 Aug 2023 05:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210654
IP address blocks: 194.87.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Aug 2023 17:39:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:e5:6c:87:15:7b:a3:40:a6:60:f0:b4:5a:47:bb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 23 05:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f4fcf948cb4867b80af8e3d8b4766e8bade9f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:77:0d:9b:72:bb:ca:45:ed:75:42:0b:1d:
6a:81:90:41:d5:b9:5f:7c:97:cb:f5:6a:1f:ff:c7:
3f:a5:85:3c:7f:a7:9c:24:d0:0f:a2:7a:d7:66:4d:
4c:d2:18:25:b9:26:3b:bf:f2:9d:72:5a:d2:a3:51:
54:95:ef:06:16:57:60:08:2e:12:b3:aa:f2:a3:01:
bf:bc:8a:3b:ea:10:a1:3c:79:74:76:ad:40:ee:1f:
1a:b7:6a:f4:50:41:2c:ce:e6:3f:ed:11:9c:e6:44:
b4:b7:60:25:c2:50:82:22:5e:f6:03:29:03:12:fe:
5c:0a:e1:24:09:9f:95:88:25:b9:23:d7:1d:14:25:
a8:b2:c4:55:22:01:3d:fa:cf:30:ab:6d:18:f3:10:
4d:8a:cb:c7:14:d3:f0:fc:a7:5f:ba:1b:99:55:41:
9e:22:ff:c3:0e:9d:00:8a:d9:e2:b2:c2:48:ff:84:
51:14:e0:5b:eb:bf:8a:84:b2:ce:08:cd:ed:ba:90:
66:c4:cd:be:e4:38:99:46:3c:61:69:7f:8b:2f:06:
4d:04:de:62:60:97:2a:5d:21:59:fe:e8:2e:5c:d9:
a8:f9:b0:09:d0:ce:02:d0:80:bb:1c:6b:eb:9a:f2:
7f:ff:c5:54:a9:40:a0:9c:50:78:8c:25:72:b7:be:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:4F:CF:94:8C:B4:86:7B:80:AF:8E:3D:8B:47:66:E8:BA:DE:9F:4B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T0_PlIy0hnuAr449i0dm6Lren0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.132.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0e:58:bd:06:03:b3:fb:f0:e7:c0:fa:c1:11:40:09:fa:18:
e3:cc:6a:03:8e:c5:c4:e5:70:3f:82:37:52:8c:1c:28:be:8a:
b2:6f:a7:35:49:17:a0:22:cd:ff:37:68:c3:ab:b5:41:34:2a:
b4:f0:86:f6:d6:b5:6e:c4:1c:3d:ef:1a:70:7a:c3:2b:d4:46:
ac:19:04:a3:bb:a2:a5:f5:73:41:64:f7:a0:b8:2d:0a:74:d1:
42:f1:8d:1c:30:30:c1:3c:36:3d:d6:ab:d7:e5:92:7a:f7:54:
60:56:a2:60:43:07:40:5c:f2:90:86:e0:d3:8a:a5:3e:ae:1b:
31:72:e8:54:89:50:18:29:f0:bd:a1:f7:37:91:9a:e6:f2:7d:
64:b0:c9:fe:d3:7e:ae:a5:28:5c:7d:8a:d2:34:be:4b:de:82:
75:17:90:20:e8:bb:27:a0:91:58:5d:81:56:7e:14:82:a7:9f:
93:55:9f:fd:75:df:34:1f:02:8c:43:41:9e:92:5b:18:7d:68:
ec:df:3f:e2:e9:14:8e:90:45:e3:06:16:a2:86:07:b3:6a:21:
2d:a0:3d:c7:e7:ed:a6:e3:10:11:bf:88:91:41:c3:05:57:ea:
be:62:99:65:ff:d0:43:37:56:1e:4e:cc:59:df:73:48:4e:2c:
a6:17:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:17 2024 by rpki-client on console-fra.rpki-client.org