Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Tiqu-0Rb-1zWZDhqGaxNb4X1uoM.roa
File: Tiqu-0Rb-1zWZDhqGaxNb4X1uoM.roa (raw, json)
Hash identifier: eiXz8qDhUuL5v7IsyvqLrQTtRahx0KaNGJCMJrC5SMU=
Subject key identifier: 4E:2A:AE:FB:44:5B:FB:5C:D6:64:38:6A:19:AC:4D:6F:85:F5:BA:83
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185A15D9BE09076FCA158F981E312BB894C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Tiqu-0Rb-1zWZDhqGaxNb4X1uoM.roa
Signing time: Wed 11 Jan 2023 15:05:44 +0000
ROA not before: Wed 11 Jan 2023 15:05:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24875
IP address blocks: 194.87.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a1:5d:9b:e0:90:76:fc:a1:58:f9:81:e3:12:bb:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 11 15:05:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4e2aaefb445bfb5cd664386a19ac4d6f85f5ba83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3b:3d:31:70:99:47:43:54:f7:67:ff:6e:c4:
67:02:5e:40:69:d5:98:77:8d:71:6d:8e:14:3c:38:
5d:4f:ef:90:2e:1c:1c:f6:44:2b:9a:3c:08:b0:c9:
53:88:e8:2b:6c:44:f5:0b:32:3f:7b:38:8f:b2:5d:
56:8d:ed:94:e2:f5:2a:61:66:fb:83:ff:e7:3d:ef:
0d:14:b6:83:b6:f8:62:bf:dc:1d:cf:36:48:3d:a2:
7f:f9:dd:fc:b5:b4:23:ee:a2:98:7c:76:f7:e8:ee:
d3:de:9e:85:f3:e2:f0:17:5b:80:02:8f:5b:b9:32:
b7:3d:3f:4d:3e:25:23:4f:cd:5e:6d:ef:b9:1e:6d:
ae:c8:14:f8:db:e6:ca:86:2e:35:0f:f7:65:52:6f:
18:09:71:bc:2f:2a:21:a7:ae:26:94:0f:aa:59:f2:
7d:4c:f6:3c:c1:41:c5:32:5e:97:8c:90:e2:3f:d0:
36:12:ae:72:e9:cb:4b:7a:7c:eb:e7:76:ca:38:f3:
fe:47:93:87:95:57:4e:d8:88:96:a2:b1:30:a9:f4:
2a:ce:71:6f:70:8a:25:89:36:7a:8a:cf:a8:3a:b0:
92:0a:43:a9:69:90:52:36:6f:63:4f:91:e7:4a:c1:
f4:33:c1:02:9b:15:c7:c1:41:6e:71:ad:c3:17:2c:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:AE:FB:44:5B:FB:5C:D6:64:38:6A:19:AC:4D:6F:85:F5:BA:83
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Tiqu-0Rb-1zWZDhqGaxNb4X1uoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
69:86:2f:46:37:76:57:ad:b8:29:bf:7c:98:1e:95:c2:8c:a7:
50:7d:84:ca:8b:c1:3a:df:60:80:52:b3:e7:91:58:4a:fe:43:
64:0a:4a:22:7d:97:a0:71:0b:ed:33:23:69:05:6f:93:67:87:
17:95:d2:04:6d:5a:1a:27:7c:d1:3a:14:f4:6e:77:e7:06:f4:
9a:17:b1:7a:c8:6a:2a:5a:eb:6b:e6:e1:10:56:1b:bc:0e:38:
de:51:cc:f1:5c:13:fa:df:19:a6:93:20:5f:6a:b6:48:f0:5b:
94:d0:41:81:a0:90:d0:fd:0f:6d:64:d3:18:00:37:fc:78:4f:
03:a9:01:1f:2f:0c:0c:98:3c:d3:50:de:4f:21:11:23:ea:af:
04:50:3e:4e:b4:9e:58:ae:ab:50:ac:cf:23:73:d6:5e:33:c2:
fe:55:ae:46:a3:8c:d3:b4:44:83:4d:08:a1:9d:89:fa:71:4e:
35:8f:76:32:3d:fa:c3:f2:a9:09:29:4b:d3:04:2c:cd:d1:d6:
d5:00:37:b8:8e:9d:07:5a:62:32:a2:fa:e8:6c:95:12:14:0c:
f4:05:5f:4f:c7:5c:d7:f3:16:88:7a:6c:1a:c8:82:9a:70:82:
7d:8f:45:00:c8:89:70:57:85:b4:90:ec:b7:4e:08:e3:db:71:
e5:b3:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org