Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XToBdT9wu_rowJ9MHbfuWwcwVuk.roa
File: XToBdT9wu_rowJ9MHbfuWwcwVuk.roa (raw, json)
Hash identifier: gBryzcAMqn7jWvvEEyj1LEqDlU4Vghd7odC8OhRJ7Jg=
Subject key identifier: 5D:3A:01:75:3F:70:BB:FA:E8:C0:9F:4C:1D:B7:EE:5B:07:30:56:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187DFD444E415A69DEA8048E104E63CD786
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XToBdT9wu_rowJ9MHbfuWwcwVuk.roa
Signing time: Wed 03 May 2023 04:17:23 +0000
ROA not before: Wed 03 May 2023 04:17:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 194.87.255.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:df:d4:44:e4:15:a6:9d:ea:80:48:e1:04:e6:3c:d7:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 3 04:17:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d3a01753f70bbfae8c09f4c1db7ee5b073056e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:80:69:da:48:3d:7a:b1:d9:c7:ad:5d:90:27:
76:76:8e:69:92:01:35:02:f4:25:b6:0a:cc:2d:8d:
74:37:e2:e2:bd:22:55:a4:8d:78:f8:79:6a:2b:1a:
1b:91:79:e6:8d:b6:d4:e6:e9:3b:e3:6a:c9:af:56:
f0:9f:ae:33:8b:e5:d0:1e:d3:df:da:1e:91:d9:a2:
be:85:99:b5:36:00:aa:31:e8:9e:ef:73:4d:3e:b2:
35:27:20:c2:2b:5c:d1:7d:1b:e0:2a:07:4a:c6:e8:
8e:7d:3e:34:04:b3:81:f3:73:9d:ac:23:75:f1:39:
7a:06:9b:46:5a:24:23:9a:2d:a9:40:60:a8:f3:f1:
25:30:9d:64:07:3c:c4:3d:54:13:df:89:a0:b9:06:
94:11:ff:5d:fb:a0:3d:36:be:9a:3a:8a:27:59:6a:
d9:a3:0a:61:07:98:a8:d3:78:87:be:70:27:b6:3a:
4a:6a:89:cc:e1:90:34:f3:bc:c2:5e:69:7d:98:c4:
ab:4f:97:84:10:87:79:f7:eb:5b:42:89:61:38:a3:
a3:b7:66:f6:66:6b:3d:fc:e1:75:d9:ab:2d:ca:d7:
20:cf:0a:53:ea:58:5f:f2:18:b1:cb:b0:64:1c:55:
9a:f0:14:8e:b7:eb:9a:27:72:08:f6:26:96:0d:3f:
af:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3A:01:75:3F:70:BB:FA:E8:C0:9F:4C:1D:B7:EE:5B:07:30:56:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XToBdT9wu_rowJ9MHbfuWwcwVuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.200.0/24
194.87.255.0/24
Signature Algorithm: sha256WithRSAEncryption
94:10:6e:2e:5c:fc:73:21:03:a4:7f:bb:7a:53:ea:e1:13:1d:
e0:67:7b:76:55:a2:cf:78:ea:1f:b8:45:4f:02:53:fd:d5:63:
69:2c:37:0f:bc:a5:5a:94:f3:c6:15:11:15:1c:e3:13:90:56:
f8:41:f6:3a:0c:e6:b6:35:5a:c4:0f:e7:ef:ff:45:f3:7e:27:
e4:41:2e:f1:42:51:34:14:27:fb:7e:93:22:d9:72:5b:48:63:
43:fe:ec:63:42:ff:29:fc:30:23:20:1c:81:6e:ff:87:ed:aa:
a6:03:c4:88:16:ca:56:c5:cf:2d:ca:1c:1a:86:fb:2c:9e:d9:
07:87:e8:72:ed:f9:c0:1f:3e:c8:39:f6:c4:51:29:f5:7f:f6:
f4:71:d1:49:14:c9:b0:14:c1:d4:f5:61:e6:6e:58:bf:99:70:
c5:02:69:f7:53:af:ae:bd:c7:41:f9:71:f6:22:90:93:2b:02:
bc:bb:bf:cd:5d:ab:34:96:65:6d:f9:40:5a:9a:e8:e2:48:03:
ab:79:43:9b:4f:e5:87:26:0b:8c:03:65:8d:c5:02:08:7a:ff:
f4:a8:46:84:83:ce:43:ea:a7:3f:ca:0f:55:3e:bd:31:ef:b0:
ac:74:21:45:f4:32:f8:2f:93:34:f7:0c:db:93:f6:98:6b:c4:
2b:d6:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:00 2023 by rpki-client on console-ams.rpki-client.org