Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z5G3dvzv2F2dYL87lo2wOUtvmHw.roa
File: Z5G3dvzv2F2dYL87lo2wOUtvmHw.roa (raw, json)
Hash identifier: wxaIEdL/EEj3bBxnVhnjGxJw2r61kdBYGU5UQkQphS0=
Subject key identifier: 67:91:B7:76:FC:EF:D8:5D:9D:60:BF:3B:96:8D:B0:39:4B:6F:98:7C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189F8FE64411703CA697832C547078B743F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z5G3dvzv2F2dYL87lo2wOUtvmHw.roa
Signing time: Tue 15 Aug 2023 11:39:28 +0000
ROA not before: Tue 15 Aug 2023 11:39:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 194.87.2.0/24 maxlen: 24
194.87.18.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f8:fe:64:41:17:03:ca:69:78:32:c5:47:07:8b:74:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 15 11:39:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6791b776fcefd85d9d60bf3b968db0394b6f987c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:e4:a6:17:90:7b:e9:b8:94:1a:1a:d3:f2:
88:ce:3f:59:1a:8a:c5:9a:09:a1:dc:4d:d9:de:64:
f9:b2:54:ec:d5:ff:cb:3f:95:a9:85:3d:d8:d4:ed:
83:6c:39:3d:8a:3b:58:ef:0a:da:d8:ab:13:6f:37:
c8:72:26:56:35:fe:2e:21:d6:8d:8a:f4:2e:f6:52:
47:63:0b:22:8d:8c:c0:b5:27:55:26:61:f0:42:23:
b4:12:30:d1:f1:5d:53:3c:67:aa:34:f3:3f:39:13:
23:9f:b0:6b:83:47:89:3f:e4:0c:57:4d:97:bb:01:
e8:22:7b:24:0b:c8:51:6e:9f:3b:d9:ab:2b:3b:05:
06:6e:7c:9e:32:2a:9e:f1:6d:c3:b4:e6:df:56:2d:
14:a4:f5:d4:78:28:b1:06:fb:78:68:d0:c0:db:22:
1e:e4:0f:1c:00:7d:15:17:f8:12:c7:3e:9e:4d:5e:
e7:a6:6c:50:54:74:68:e7:74:a1:05:92:44:8f:e0:
79:95:24:28:6b:8b:ab:4e:8b:11:a2:c9:ac:45:d1:
72:f9:21:0d:74:d3:5b:ea:2d:b5:2b:8b:13:6b:66:
bd:2d:a0:87:17:75:6b:4b:50:80:eb:1d:74:f0:f2:
06:e9:67:01:fd:a5:0d:13:79:bd:62:9c:4e:42:09:
bc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:91:B7:76:FC:EF:D8:5D:9D:60:BF:3B:96:8D:B0:39:4B:6F:98:7C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Z5G3dvzv2F2dYL87lo2wOUtvmHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.87.2.0/24
194.87.18.0/24
194.87.170.0/24
Signature Algorithm: sha256WithRSAEncryption
58:78:16:c5:0a:3a:2d:d2:8a:ae:2d:93:48:85:bc:63:97:2a:
c8:c6:e5:b7:8f:6a:6d:34:ac:b0:95:de:3d:e0:0a:96:42:96:
ac:55:31:6b:10:ac:9a:1b:f5:a0:8e:d8:9a:96:41:00:36:67:
00:ee:5b:19:0b:71:84:89:dd:b4:fd:23:8a:29:0f:63:0c:74:
78:e7:02:70:e6:c7:80:03:14:54:e0:b1:8c:5c:9d:f7:38:11:
c6:1a:fd:b2:99:02:2d:09:32:63:e7:37:9c:7b:87:5e:21:48:
fb:a2:d7:15:ec:37:c3:b8:00:9a:27:4d:5f:dd:cd:a7:7c:a7:
a3:25:f1:9a:ac:c2:96:b5:d1:ff:0a:5a:3a:23:5d:d1:e8:b8:
c8:57:2e:d5:42:e4:1c:e8:f9:09:01:f2:88:7c:1d:bc:49:21:
c2:49:26:b9:b6:ce:da:1b:98:28:5d:23:45:27:5e:38:dc:77:
bc:b7:a6:b9:ca:4a:cb:01:9d:f2:66:fd:ae:a7:96:9b:90:ec:
8d:95:05:66:cd:a5:2a:cc:17:5a:74:dd:41:96:48:0b:fe:df:
94:6d:06:58:2a:7a:48:f6:bb:4d:48:b2:8a:ae:4c:75:cd:27:
6f:8c:1f:78:f7:d1:8b:48:3c:82:90:4e:4c:2a:41:e2:60:6d:
a2:a1:6b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 12:04:45 2023 by rpki-client on console-ams.rpki-client.org