Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vr-aOuiQ0cTv87XIeFyA273ovcA.roa
File: Vr-aOuiQ0cTv87XIeFyA273ovcA.roa (raw, json)
Hash identifier: JPq8msxLRuEVh1zjKnW7Zg0Ih8jsxNX4pHy+oJZDlRI=
Subject key identifier: 56:BF:9A:3A:E8:90:D1:C4:EF:F3:B5:C8:78:5C:80:DB:BD:E8:BD:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01892B1A803F98B41B8D30D4E68DB7DEF7AD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vr-aOuiQ0cTv87XIeFyA273ovcA.roa
Signing time: Thu 06 Jul 2023 12:08:24 +0000
ROA not before: Thu 06 Jul 2023 12:08:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212669
IP address blocks: 194.87.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:1a:80:3f:98:b4:1b:8d:30:d4:e6:8d:b7:de:f7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 6 12:08:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56bf9a3ae890d1c4eff3b5c8785c80dbbde8bdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6a:02:88:36:ea:fb:e7:61:55:40:6d:95:3c:
ab:88:09:6b:98:93:c5:8b:6f:65:69:13:45:14:e1:
51:46:bc:a2:f7:db:fa:81:e0:13:98:74:d9:98:f6:
91:ba:ca:d2:96:0c:e2:38:48:69:27:45:d5:0e:7b:
9e:a9:f6:6d:9c:9a:8d:95:af:4c:c6:6a:ed:91:97:
0b:18:4a:74:a6:45:99:8e:25:4a:f7:bf:80:8b:8c:
7d:ef:6c:63:26:fc:c7:0e:20:3d:d5:27:be:06:70:
ae:b8:b2:6b:b4:f5:9b:28:a3:34:4a:6b:22:4a:f0:
a3:b9:27:ad:4e:32:a7:bd:3a:6d:6e:d1:6c:bd:7e:
38:8e:3e:07:4c:6d:df:ef:61:1d:79:46:ec:8e:2b:
28:ac:23:1a:aa:80:38:e0:5c:b5:c0:84:6d:3d:5e:
f8:7a:a5:fd:46:9a:1c:12:08:da:cb:42:4a:39:80:
6f:c0:f1:71:ab:8e:fa:1c:c1:39:78:38:dd:0a:0b:
4d:e7:07:6d:83:4e:70:11:79:bd:c1:3e:e2:19:38:
92:2b:59:8f:42:d7:ea:e7:35:8e:88:a0:3b:b0:79:
a8:84:76:b0:48:a5:bc:33:c3:e7:e3:02:65:7c:8a:
be:e1:e0:e5:9b:2a:3d:09:bb:00:be:12:e8:dc:d9:
ed:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BF:9A:3A:E8:90:D1:C4:EF:F3:B5:C8:78:5C:80:DB:BD:E8:BD:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Vr-aOuiQ0cTv87XIeFyA273ovcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.250.0/24
Signature Algorithm: sha256WithRSAEncryption
30:f6:8f:15:7b:88:6b:58:92:6a:ac:ee:a2:14:c6:73:9b:49:
2a:f3:d0:fc:67:a1:c8:99:f2:6f:e8:7f:a1:38:8b:4b:d8:13:
6d:cb:69:c5:a9:45:7e:9d:d6:a0:42:89:23:d9:4b:db:05:91:
a4:4a:f4:79:ac:37:99:76:68:41:57:d9:02:0f:da:14:64:3d:
48:15:00:e8:d2:8f:bb:ac:ea:3d:cd:fd:24:6e:35:cd:da:b5:
bb:99:9e:91:42:80:bc:ac:38:7a:53:ed:95:02:a3:4a:23:7f:
a7:7b:9d:74:5a:a9:c3:df:33:62:84:fa:4c:3a:bf:b4:72:c1:
96:b4:cc:21:c0:de:0c:0b:d5:a9:11:05:e8:0b:7c:9a:86:81:
d7:86:cc:1a:89:d4:02:68:e7:05:a2:f0:f8:23:e7:27:65:08:
4d:20:84:67:e6:22:64:96:22:4c:7a:d5:e8:f8:9e:69:7c:68:
73:ff:51:6c:85:f8:e9:fa:c2:cc:84:b9:af:08:aa:d1:1f:e9:
c2:01:43:71:c8:2f:12:05:38:a0:5d:73:38:e1:e0:ac:fc:bb:
c8:40:49:46:14:22:94:35:d0:8b:de:1a:56:69:d5:87:66:bc:
b5:88:70:65:dc:57:c6:e7:c0:fa:06:94:f4:5a:e3:f1:36:bf:
1b:64:eb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 13:31:35 2023 by rpki-client on console-ams.rpki-client.org