Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T4YUDAQgQtqqmsHduaYSs0M7DTs.roa
File: T4YUDAQgQtqqmsHduaYSs0M7DTs.roa (raw, json)
Hash identifier: pWtV+swjEvA5moulQVn8flsuVCcxOOQTpiBcq8baoPg=
Subject key identifier: 4F:86:14:0C:04:20:42:DA:AA:9A:C1:DD:B9:A6:12:B3:43:3B:0D:3B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01857154362B555274BDEC4135F87E9F6125
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T4YUDAQgQtqqmsHduaYSs0M7DTs.roa
Signing time: Mon 02 Jan 2023 07:13:42 +0000
ROA not before: Mon 02 Jan 2023 07:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 136923
IP address blocks: 194.87.11.0/24 maxlen: 24
212.193.7.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:54:36:2b:55:52:74:bd:ec:41:35:f8:7e:9f:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 07:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f86140c042042daaa9ac1ddb9a612b3433b0d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:31:90:e5:8c:24:5b:c2:6c:32:25:06:ed:
0e:b1:48:d3:47:1f:ee:fd:65:6d:ff:75:63:e9:2d:
91:30:81:f1:36:da:7e:0e:8e:af:34:bc:82:cf:8d:
a6:89:5a:a3:9b:35:ed:30:3a:9d:bf:5b:dc:6a:c5:
8f:e6:dd:25:d4:87:54:40:05:61:2a:b2:d8:b3:c5:
7b:97:01:36:ae:f7:48:2b:31:d2:8e:1e:8a:09:8b:
1a:23:3e:6c:6e:b6:5d:aa:92:e5:23:ca:3b:9a:c6:
ed:76:01:70:d5:96:99:4b:96:65:44:da:d2:eb:9f:
9a:a2:69:a8:3d:17:7b:4c:cb:84:60:f5:76:1d:7e:
3d:84:b1:42:a5:1f:da:54:7c:4f:12:29:91:41:18:
e7:f9:ce:8b:a2:5e:df:c3:fd:05:47:5c:ad:3f:99:
bb:a3:d3:e5:46:d7:30:d4:2c:3f:b8:28:58:c5:32:
76:b9:1c:14:08:fc:9a:6f:00:3f:99:61:b6:80:52:
65:28:ce:8b:ab:3b:1f:ab:de:44:ee:ca:9e:36:a3:
81:60:fd:62:a6:cd:56:a3:ab:4a:c7:f6:d9:8e:03:
dd:a8:f4:66:0f:ce:51:e8:f9:ff:81:d1:46:c7:aa:
9d:a9:2d:12:a0:81:7e:6f:83:52:bd:72:26:ff:6c:
59:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:14:0C:04:20:42:DA:AA:9A:C1:DD:B9:A6:12:B3:43:3B:0D:3B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T4YUDAQgQtqqmsHduaYSs0M7DTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.11.0/24
212.193.7.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:66:6f:ca:ef:c9:b5:13:2d:41:2c:a9:1f:2d:7e:a6:97:a9:
41:50:23:64:ff:83:d8:47:a8:67:3a:89:73:07:cb:3c:85:72:
44:20:84:ba:4c:ff:2a:20:cc:50:ce:ac:24:64:72:09:dc:7a:
f6:7d:8b:53:12:be:1d:d8:47:0e:81:06:40:57:39:62:7b:cb:
71:9c:d4:f0:58:77:d3:98:59:41:77:85:75:33:47:07:53:3e:
3d:62:a6:45:ba:94:50:c1:1a:a8:28:18:de:c5:9c:85:0f:94:
20:dd:64:95:ef:df:2b:38:cf:58:fc:b8:b0:d0:9f:de:fc:bb:
45:dc:cc:5c:1a:2a:c3:91:ee:38:bb:6d:f6:7a:d7:2e:40:27:
2c:91:f9:6b:3e:a5:ef:ac:73:3e:de:1f:41:75:4d:de:48:a8:
8a:14:bd:ca:81:95:c9:99:6f:23:2e:68:84:92:89:af:5e:76:
cd:f2:31:1a:27:d4:b9:55:d7:75:10:04:20:54:a4:e0:a8:53:
65:47:bf:98:77:c8:5c:d3:5d:ca:0c:f6:9f:16:78:c5:98:bc:
68:1d:be:00:91:09:05:c4:6c:61:68:59:d1:71:aa:97:39:d9:
a9:ab:17:07:01:4f:90:5b:f1:fc:91:fd:e5:62:a7:b2:b8:c7:
17:bc:fd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org