Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XHQdQSorU6jRrfunD0JXvFy3qNU.roa
File: XHQdQSorU6jRrfunD0JXvFy3qNU.roa (raw, json)
Hash identifier: adfdJhmn5+jS64IrtlQgXv7J5bYt9qjUHs7moSYO508=
Subject key identifier: 5C:74:1D:41:2A:2B:53:A8:D1:AD:FB:A7:0F:42:57:BC:5C:B7:A8:D5
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188815F637B0C3935D3D9547E416AF8C5B4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XHQdQSorU6jRrfunD0JXvFy3qNU.roa
Signing time: Sat 03 Jun 2023 13:08:12 +0000
ROA not before: Sat 03 Jun 2023 13:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198652
IP address blocks: 194.87.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:81:5f:63:7b:0c:39:35:d3:d9:54:7e:41:6a:f8:c5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 3 13:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5c741d412a2b53a8d1adfba70f4257bc5cb7a8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c6:25:dc:fc:53:a5:c2:23:32:2d:4a:4d:c4:
55:e7:22:00:04:09:d5:f2:7e:17:c0:fc:51:49:e4:
a7:49:37:65:cf:e4:e4:61:f0:71:ca:58:d0:48:5f:
51:1c:f2:ba:bc:ab:84:f7:a3:e8:3e:ca:b3:cf:38:
26:b5:5a:08:4f:27:1f:5a:fd:a2:20:38:6f:53:c7:
f7:b3:37:84:83:cc:eb:a4:6d:c1:7c:00:d9:01:89:
15:fc:c3:95:7d:4d:cf:cd:9b:90:35:cc:e7:c3:76:
c2:d8:d7:d9:35:75:88:13:65:f2:cd:70:eb:5b:b2:
51:7d:ef:e1:20:d0:9d:ba:d1:eb:0f:0f:1d:2a:39:
24:05:1f:cb:6e:01:8d:f3:a5:3f:37:5e:28:f1:f3:
d1:a1:bf:16:8c:b1:e4:7b:71:80:40:ab:da:c4:08:
1e:6c:ee:21:9c:9e:c1:56:ea:df:cc:45:e5:97:74:
52:50:46:1d:f8:d5:10:1d:05:3b:72:79:88:c0:35:
a7:f9:28:13:70:10:36:96:f2:49:0a:0b:f8:fe:e8:
01:1d:f9:c2:9c:3a:75:01:8d:41:af:16:3d:68:38:
4a:43:e7:d1:9e:7f:de:76:fb:52:6c:35:b2:21:d6:
4f:6d:4a:42:d5:21:51:ff:a6:7d:85:32:a9:48:62:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:74:1D:41:2A:2B:53:A8:D1:AD:FB:A7:0F:42:57:BC:5C:B7:A8:D5
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XHQdQSorU6jRrfunD0JXvFy3qNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.108.0/24
Signature Algorithm: sha256WithRSAEncryption
23:41:46:9f:e5:54:5b:43:16:26:23:4c:7f:c0:44:c4:ac:cb:
fe:f9:4f:f7:0d:76:b9:af:3c:5c:89:b4:9c:e3:49:d1:98:e4:
2a:76:6e:e1:73:4a:42:88:8e:3f:7f:3a:36:d7:ba:14:ad:95:
4b:21:4b:6f:a5:c6:96:c5:a3:e6:72:66:89:64:e5:b2:be:6c:
95:25:e4:e8:ba:33:29:57:74:01:15:04:76:20:16:e3:73:71:
75:ee:6c:fb:b9:af:b5:02:31:ce:36:80:40:e0:5a:4c:ef:92:
b0:3e:44:25:1d:2d:86:a1:06:77:26:d2:70:32:cc:21:8f:f3:
e7:93:87:c2:2f:32:3f:74:42:07:13:91:af:06:b8:76:2c:83:
de:85:57:a9:a4:14:b2:a0:a1:85:91:e4:ff:fb:ba:bd:cd:2d:
fd:20:7a:d1:54:b7:b9:5e:4a:9e:b9:58:ff:79:0b:b4:f7:32:
70:28:f1:df:b5:40:57:00:a8:ac:81:ba:cc:7b:9d:f2:db:33:
a9:a1:c3:87:cb:c9:fd:6d:c8:14:65:35:59:4d:fe:1e:1e:66:
cc:f4:ed:8e:3e:0c:b8:f9:c7:d7:85:77:e7:ff:2d:65:a8:eb:
4c:4e:3e:f7:cb:ee:2b:38:92:58:a2:19:43:71:77:c0:fc:f1:
b3:22:78:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org