Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T_Us3nY8rdc3h4_rJodKZ1Hd95o.roa
File: T_Us3nY8rdc3h4_rJodKZ1Hd95o.roa (raw, json)
Hash identifier: 1a4W6niL5fYgNk3nbf0IyBV1dr9ZXmBibd1GlMAMMmI=
Subject key identifier: 4F:F5:2C:DE:76:3C:AD:D7:37:87:8F:EB:26:87:4A:67:51:DD:F7:9A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B95C5478787D3B5DD8B7FD4436065BDD2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T_Us3nY8rdc3h4_rJodKZ1Hd95o.roa
Signing time: Fri 03 Nov 2023 15:20:15 +0000
ROA not before: Fri 03 Nov 2023 15:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.141.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:95:c5:47:87:87:d3:b5:dd:8b:7f:d4:43:60:65:bd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 15:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff52cde763cadd737878feb26874a6751ddf79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:d2:69:58:b4:4b:ef:72:44:d3:b2:90:87:
8b:ef:56:67:31:e3:ea:e9:96:7a:30:ac:1d:29:c4:
b8:31:f4:f9:ba:44:d3:11:32:ee:0e:9c:be:ce:1b:
39:1f:1c:6b:d8:01:96:7d:4c:40:23:bd:96:ba:01:
43:a8:6e:37:32:24:de:51:61:06:c1:7a:8d:39:8a:
4f:40:a7:64:34:9b:f3:9f:72:ff:f8:4d:88:35:da:
c5:15:7b:52:60:a2:2d:cb:3e:39:2e:eb:40:8e:d5:
98:16:c1:89:8f:ac:56:9c:46:2f:38:b5:3b:3d:31:
3e:d9:89:06:3e:18:dd:39:2c:1c:52:4b:e6:e9:f4:
57:0d:04:ad:d3:6a:2f:d3:9a:cf:c1:66:f9:ab:12:
c3:0f:4d:9e:8b:ca:de:4a:dc:ef:dc:9a:02:7c:9c:
33:b8:32:6f:9b:b5:85:65:1c:78:68:96:8f:d9:2e:
4b:70:9f:5d:9d:9b:18:e1:49:4c:b5:61:d4:be:6f:
f1:6e:8e:0a:7e:b6:27:3a:d9:90:97:5c:6e:a8:a0:
80:a4:79:5d:25:dc:f1:40:3b:44:33:99:8f:98:22:
56:a6:4e:a7:b9:b3:b4:58:29:90:c1:8c:37:c9:69:
59:81:89:a3:33:a7:bd:77:f1:b0:cd:d9:4f:20:86:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F5:2C:DE:76:3C:AD:D7:37:87:8F:EB:26:87:4A:67:51:DD:F7:9A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/T_Us3nY8rdc3h4_rJodKZ1Hd95o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.141.0/24
194.87.170.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ea:11:25:34:56:b3:91:96:9a:4b:53:5f:b6:98:d1:a6:e5:
3c:e7:c4:ab:85:71:d4:0e:46:da:66:e3:6a:a9:88:47:a7:60:
a3:65:1d:68:7c:fb:f6:7b:f8:f5:1f:35:ef:c5:5a:97:5b:31:
2f:2b:14:8a:eb:d9:eb:a4:a3:56:92:6a:09:ae:e4:d1:80:1d:
69:43:1b:cc:83:ac:78:5a:5b:e4:71:c8:09:e1:6b:71:ea:82:
61:98:d7:1f:b0:1b:71:7c:51:9c:7a:08:48:25:29:49:1f:70:
85:50:f5:89:85:a7:35:94:bb:b2:4e:ed:15:84:a7:fe:98:d0:
ff:5c:e5:1e:5e:5f:57:8c:d9:60:aa:8b:e2:f9:0f:ad:a0:13:
ac:84:26:45:4a:a8:e9:bb:e9:e1:35:37:57:ba:79:f8:2a:e3:
d8:7a:49:ef:47:dc:5e:30:5d:27:1b:ac:c9:71:9e:13:bb:3a:
44:55:c9:44:96:7e:41:38:d7:f4:7c:fd:51:50:47:9a:28:cd:
64:b9:4e:a6:18:fb:0e:3b:3b:12:54:ed:11:9a:a4:11:79:42:
b2:b4:36:57:f4:06:d7:1c:e4:34:8f:3b:c7:f0:63:4f:39:74:
02:1a:cd:0b:5d:29:f6:21:98:97:73:8c:1b:0e:4c:64:ad:51:
f6:6f:72:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 05:32:31 2023 by rpki-client on console-fra.rpki-client.org