Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TgpnIgCyCtIr4aflUAHDtY39U-I.roa
File: TgpnIgCyCtIr4aflUAHDtY39U-I.roa (raw, json)
Hash identifier: yWqr4QXMZ+7DA48XVdLtlarxDaO5lXKcn1OSPADZIIA=
Subject key identifier: 4E:0A:67:22:00:B2:0A:D2:2B:E1:A7:E5:50:01:C3:B5:8D:FD:53:E2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670FCF0693D54113F2A027297F986E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TgpnIgCyCtIr4aflUAHDtY39U-I.roa
Signing time: Sun 01 Jan 2023 22:15:03 +0000
ROA not before: Sun 01 Jan 2023 22:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210773
IP address blocks: 194.87.230.0/24 maxlen: 24
212.193.4.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:0f:cf:06:93:d5:41:13:f2:a0:27:29:7f:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e0a672200b20ad22be1a7e55001c3b58dfd53e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:3b:fe:2e:90:c3:ec:84:b8:ba:1d:53:f0:
df:f9:98:e1:5d:7d:b5:5a:e9:44:e0:1b:ea:52:33:
92:f2:e6:ce:e5:ee:8a:63:97:ce:f8:dd:c8:49:9a:
fa:e3:8a:8a:84:11:2b:81:aa:be:8e:8b:84:24:41:
ed:f4:d6:44:56:c1:a0:23:b4:bc:41:01:d4:a2:14:
b0:38:9f:16:6e:51:f1:be:60:1b:76:eb:38:49:b3:
e4:d2:be:0f:4e:47:1d:95:57:13:ff:ad:96:bd:dd:
7f:be:2e:73:62:7c:c9:ae:8a:fe:5b:fa:09:e7:70:
1d:37:00:23:b2:0e:a7:b2:40:e1:0e:11:3e:bf:05:
09:cb:c3:47:f3:c7:5a:54:8a:a5:b0:4b:5a:58:65:
82:c3:76:44:e6:e2:f0:c1:ce:0c:8d:2f:5a:f4:ea:
20:72:24:d3:ca:13:96:19:bb:f5:27:fb:47:f2:23:
f5:6b:59:41:b3:ba:88:06:6f:39:15:47:81:6d:8a:
ef:74:e8:13:bb:dd:6a:7c:0c:ed:ae:59:bd:d1:8b:
dd:a0:31:8c:df:30:2c:b0:2a:ab:a8:47:90:30:83:
3f:f6:62:89:ca:c9:7c:21:37:cb:39:05:76:c2:06:
c3:5b:74:08:ab:52:e9:f0:a8:e5:b9:b1:85:c8:ba:
ea:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0A:67:22:00:B2:0A:D2:2B:E1:A7:E5:50:01:C3:B5:8D:FD:53:E2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TgpnIgCyCtIr4aflUAHDtY39U-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.230.0/24
212.193.4.0/24
Signature Algorithm: sha256WithRSAEncryption
28:39:94:3c:c6:ff:e4:b1:35:78:32:cd:a5:7d:3c:18:3b:c3:
39:d4:08:35:a9:f6:e7:78:8c:b5:ba:47:db:ba:27:07:f3:bd:
89:76:5b:94:e8:43:b0:ea:9b:bf:dd:98:f7:b4:b4:67:a7:fd:
8d:61:07:1f:74:9b:fc:fb:de:d1:9c:cb:bc:f5:55:4b:13:fb:
10:04:3a:45:c6:2e:cf:98:5b:6e:8c:76:24:8f:aa:c4:43:c9:
21:ec:07:cf:f0:dc:15:9d:c9:17:6f:2f:e2:eb:ba:1f:f7:ee:
b1:6c:69:60:fa:85:f3:26:92:0c:d8:5e:0b:cc:b2:a3:78:e2:
63:e2:ac:e4:30:45:c2:e2:53:89:84:c0:67:02:f6:67:60:ff:
f7:4a:30:ea:a6:5b:9b:ea:c3:03:93:ae:de:76:db:dd:44:27:
2e:78:6d:6e:08:b8:1b:26:96:db:68:d5:88:0e:db:13:d3:79:
bb:a5:59:f7:2e:22:c4:a2:11:b8:e4:ab:63:6b:43:4c:e8:75:
9e:4d:56:07:9c:e5:ff:1d:a9:59:ef:50:56:bd:70:4e:04:88:
4f:66:ec:19:4f:20:aa:f0:3c:45:af:7d:bb:a6:95:da:33:1f:
d5:5c:b3:23:8d:1a:f5:4d:28:26:42:65:ef:37:1e:0e:65:01:
96:59:f1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:58 2023 by rpki-client on console-ams.rpki-client.org