Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XiEquoanwVyd-jzgRHT4UlsMUqs.roa
File: XiEquoanwVyd-jzgRHT4UlsMUqs.roa (raw, json)
Hash identifier: kEf82TfY25tR6uryqMjfHr+/FGJcr58HW5EwCNyIudg=
Subject key identifier: 5E:21:2A:BA:86:A7:C1:5C:9D:FA:3C:E0:44:74:F8:52:5B:0C:52:AB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A88074E06211D42AA1217AA7929F5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XiEquoanwVyd-jzgRHT4UlsMUqs.roa
Signing time: Tue 02 Jan 2024 12:33:54 +0000
ROA not before: Tue 02 Jan 2024 12:33:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205663
IP address blocks: 194.87.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Jan 2024 04:08:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:88:07:4e:06:21:1d:42:aa:12:17:aa:79:29:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e212aba86a7c15c9dfa3ce04474f8525b0c52ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b0:5b:00:06:c2:81:7f:9f:45:7c:f3:34:41:
50:73:af:cb:eb:5d:0a:af:d5:b7:1c:98:dd:2e:aa:
68:f5:74:93:4c:81:9d:2f:77:f5:23:ef:d8:37:e3:
ba:cd:1f:a8:fa:73:67:3b:fa:07:b5:fa:61:59:0f:
40:30:da:23:84:b3:bc:84:40:0b:5e:ed:5d:11:d6:
1a:fa:c1:f6:ae:0a:b8:fa:67:d6:a6:cf:fe:90:95:
1d:0b:4f:b3:db:b8:ac:59:12:88:d6:7a:9d:53:f5:
b8:d6:4c:df:97:72:91:b7:59:24:39:0e:55:35:a9:
ec:b4:d1:eb:ec:d0:e7:14:75:bd:18:63:9c:1d:d6:
af:d0:4c:ad:39:1f:42:16:b2:87:65:b3:0a:55:c7:
12:f0:36:ec:c3:a3:d4:79:f9:53:a8:95:54:43:42:
cb:4a:fb:05:79:ae:e5:0d:fb:2b:e7:67:3e:8d:f6:
f2:03:d1:19:a4:98:d8:0c:e8:c8:aa:0f:49:c5:ed:
a1:b0:d8:d0:5e:21:2f:ff:4b:f1:2b:6d:6d:d6:20:
42:e6:ed:1d:b6:d0:16:ba:ca:31:69:7e:b7:fb:88:
94:81:f4:41:11:76:27:13:0c:20:3c:eb:d5:23:e7:
3a:10:fd:ba:81:d6:14:80:33:f5:43:34:51:3b:62:
82:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:21:2A:BA:86:A7:C1:5C:9D:FA:3C:E0:44:74:F8:52:5B:0C:52:AB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/XiEquoanwVyd-jzgRHT4UlsMUqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.187.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b7:8a:8c:9a:b6:28:18:82:38:56:4f:51:2b:26:56:54:56:
18:93:3f:17:17:31:65:70:60:87:bc:99:fe:d3:fa:76:85:91:
7c:d9:ba:e9:8a:76:99:71:63:0d:da:23:9e:14:5c:5f:e1:50:
dc:c5:de:e3:8e:4d:a9:af:ec:23:3d:a0:0e:68:6e:e0:c1:87:
12:1d:40:0e:1b:30:60:b3:43:c3:bc:07:6a:94:96:63:28:2c:
e5:56:d0:ad:9b:91:b9:c9:ed:38:f7:01:b5:17:89:06:10:36:
73:65:25:f2:b0:81:b1:da:d0:74:48:d6:4e:b9:8a:85:e0:aa:
d7:71:c5:0d:f0:4d:0e:89:d1:84:b1:42:b1:af:ed:d9:e2:29:
fb:f4:78:37:4e:ea:a4:b6:53:d9:41:c1:8d:1c:c1:ac:eb:e9:
59:67:27:b3:48:32:e5:59:b6:ba:9c:bf:09:8a:8b:64:f8:c4:
98:d0:ad:9e:fd:d3:a1:74:11:f2:20:22:0a:6d:e2:67:f3:4d:
8a:5a:a7:97:a3:f8:6b:51:0f:8d:a0:ad:63:56:48:c0:64:30:
94:c5:07:20:4a:27:2e:f2:de:91:d8:89:1f:9d:2e:5f:e3:6e:
e9:79:5f:ab:47:c8:53:4f:90:10:5b:9a:ef:b2:ee:20:ec:ae:
30:11:81:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:19 2024 by rpki-client on console-fra.rpki-client.org