Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZG0DD3DmuAjqObfBFOpX-pps2Vc.roa
File: ZG0DD3DmuAjqObfBFOpX-pps2Vc.roa (raw, json)
Hash identifier: UNqlFB6LGbaCMW5JnheW9nh17EgQvYdLOh0ShcwUun8=
Subject key identifier: 64:6D:03:0F:70:E6:B8:08:EA:39:B7:C1:14:EA:57:FA:9A:6C:D9:57
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A2C32C5FA4EF9A5E7E76EAD6B96B8A756
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZG0DD3DmuAjqObfBFOpX-pps2Vc.roa
Signing time: Fri 25 Aug 2023 10:17:19 +0000
ROA not before: Fri 25 Aug 2023 10:17:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 194.58.38.0/24 maxlen: 24
195.133.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2c:32:c5:fa:4e:f9:a5:e7:e7:6e:ad:6b:96:b8:a7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 25 10:17:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646d030f70e6b808ea39b7c114ea57fa9a6cd957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e2:7a:29:ef:e6:34:21:0b:27:ca:76:45:4a:
84:25:4a:bd:8c:f9:01:ec:32:94:c4:8d:a9:4f:67:
07:a0:67:29:ac:68:26:28:44:21:85:a0:5a:d1:e5:
fd:89:25:3e:21:f0:ba:5b:01:79:f2:70:d0:72:6c:
00:23:d0:ea:94:24:66:37:b6:4d:55:bf:c3:79:97:
35:25:1a:80:a5:c9:82:5c:e8:45:b4:31:a4:e8:ba:
03:59:b0:64:36:2a:28:be:75:0f:b6:95:05:12:a8:
c5:01:1c:3e:fe:f7:7e:31:ce:4d:ab:16:19:82:7e:
b1:8b:2e:ed:5b:1b:48:17:25:d5:30:27:82:41:d5:
f3:52:c5:db:e3:1d:1a:92:5c:23:06:22:d5:e9:23:
5e:6f:99:e6:f2:6c:50:d9:b4:1a:12:db:31:79:fb:
25:b5:77:6f:f5:b0:10:9c:fb:ae:5b:61:c2:40:8e:
11:74:7f:17:81:0a:15:a6:1a:03:de:d1:e1:b0:54:
5f:3f:98:f9:d5:f0:07:65:76:4e:ee:b4:2c:40:33:
c7:e2:ba:f3:83:c4:5d:01:d3:6a:21:3d:37:b8:3d:
33:c2:3b:b7:af:70:e0:00:ba:29:44:bc:fa:4c:d8:
9c:67:24:e6:50:2e:dd:8e:f7:54:c5:93:3f:5f:41:
41:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6D:03:0F:70:E6:B8:08:EA:39:B7:C1:14:EA:57:FA:9A:6C:D9:57
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ZG0DD3DmuAjqObfBFOpX-pps2Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.38.0/24
195.133.26.0/24
Signature Algorithm: sha256WithRSAEncryption
62:69:98:28:d3:6b:7b:ff:9c:09:7d:2f:37:8e:31:2c:8a:5f:
ff:85:00:dc:df:45:a1:18:d6:f5:f1:f0:57:a3:54:2d:15:53:
a4:ec:bf:8a:71:51:9c:12:a6:cc:fd:0f:c0:09:ca:b1:71:de:
f1:b0:d2:64:94:64:34:36:de:97:80:0b:22:91:aa:3e:c8:ec:
11:50:e6:7f:a4:7b:94:2c:19:41:85:25:a2:8a:40:a4:44:30:
71:30:ad:40:db:1d:d1:9f:88:2f:43:d9:ef:a1:27:43:d0:9a:
74:b1:1c:d7:01:01:66:2a:2f:46:92:0f:e4:2e:aa:8e:9b:a7:
21:d0:42:ae:c4:64:d4:6b:bc:8a:b4:0f:36:37:3f:1e:88:ac:
3d:5a:fb:2f:c5:b6:c3:31:74:e6:0a:7c:71:df:c0:a1:94:81:
b1:47:69:0c:4f:de:5c:5d:0c:54:4b:b5:bc:64:32:33:61:77:
c4:ed:10:5b:4d:d4:f2:7f:0d:17:c5:cd:2b:d0:f0:dd:df:0b:
48:ad:66:ca:61:ae:0d:03:0f:5d:71:3b:27:00:ed:d5:ee:df:
33:da:ad:30:00:c9:ab:14:92:7f:e2:3c:bc:95:2c:e4:2c:78:
9f:65:28:36:df:29:f7:2b:90:4c:3e:2d:5b:d0:90:1c:00:9c:
f9:58:b7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 25 21:15:21 2023 by rpki-client on console-ams.rpki-client.org