Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_L0S2vaHnJVtOv9h4cTHnIT6nEg.roa
File: _L0S2vaHnJVtOv9h4cTHnIT6nEg.roa (raw, json)
Hash identifier: /4MLx2QuA/xQkWpXeE4SRUb1tLkKbDhsds0h0Gv769I=
Subject key identifier: FC:BD:12:DA:F6:87:9C:95:6D:3A:FF:61:E1:C4:C7:9C:84:FA:9C:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A6CC27C9BE4F011F368D04E7B4954
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_L0S2vaHnJVtOv9h4cTHnIT6nEg.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2118
IP address blocks: 194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
212.192.0.0/23 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.133.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6c:c2:7c:9b:e4:f0:11:f3:68:d0:4e:7b:49:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcbd12daf6879c956d3aff61e1c4c79c84fa9c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:01:e7:1e:66:7e:cd:b3:d5:b4:31:40:91:8a:
51:01:38:7c:8e:16:c3:47:25:ac:66:07:0a:6b:0b:
1f:4a:3e:9c:05:93:f6:26:96:6e:9b:19:08:7f:44:
e8:70:45:cc:fa:bd:6e:08:93:d8:1f:fd:80:8b:1f:
35:8f:b9:99:33:64:ac:34:2e:90:77:51:c9:a5:61:
d5:67:d2:ee:be:6f:fc:6d:4c:3c:da:f7:72:37:08:
75:9d:89:de:c8:05:c7:60:ed:86:23:ad:1f:04:2d:
c7:10:cb:82:f3:7e:5b:d4:a9:7f:b2:09:ea:c6:1f:
6c:2b:91:da:b5:dc:43:0e:c0:d7:cf:2c:f1:b7:76:
3d:d7:ac:80:c7:e7:cb:8c:d6:fe:3d:14:23:a5:fa:
7b:9c:15:3c:f2:b6:75:7f:ef:b4:18:cc:fb:eb:ea:
16:67:e1:7e:95:c6:ac:ff:93:ec:39:20:31:90:45:
a7:76:53:04:b5:b7:f0:72:14:3e:c7:b1:a5:7f:81:
ec:9e:16:f0:51:09:a4:08:6b:ca:36:15:e0:88:f6:
4d:97:e6:c4:17:ce:34:62:31:8e:0b:53:1a:d2:d7:
92:f4:98:c4:1b:84:5a:4d:51:06:0f:cd:50:1c:ce:
92:a5:c9:44:cc:4c:1b:76:45:5f:c8:e7:bc:8e:0c:
71:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BD:12:DA:F6:87:9C:95:6D:3A:FF:61:E1:C4:C7:9C:84:FA:9C:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_L0S2vaHnJVtOv9h4cTHnIT6nEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.45.0-194.58.47.255
194.87.208.0/23
194.87.222.0/23
195.58.56.0/21
195.133.55.0/24
212.192.0.0/23
Signature Algorithm: sha256WithRSAEncryption
71:b9:3a:77:ae:9b:63:16:f1:bd:c9:da:25:82:43:43:92:1d:
f1:83:3d:87:d2:7f:d7:0e:4f:34:64:ec:42:28:97:d1:33:5c:
a5:a8:90:20:69:3f:84:7b:c4:1b:1d:f0:ea:4b:15:b3:e9:b4:
41:43:d5:31:21:c1:b8:bc:c8:1d:2a:f3:1a:38:98:b4:e7:92:
3c:4a:83:f5:a2:a3:c6:ff:86:d7:4b:6f:6f:0c:c0:bb:fb:8a:
76:d1:c7:f9:be:75:79:2d:b2:aa:bb:52:21:50:1d:13:19:73:
36:83:fe:b0:3c:ff:e9:80:9c:d0:64:53:b1:09:62:bc:d4:dd:
f7:a5:3a:95:bd:6d:8e:ad:b5:92:96:09:d4:bb:6d:f2:15:43:
42:ae:0e:04:f3:32:c9:9e:84:9a:75:f3:57:4d:64:50:ba:d9:
b5:a9:be:48:10:f1:4b:73:bd:32:63:5f:4a:d8:91:5d:f2:c2:
8d:93:22:bc:6a:a2:91:5e:bf:52:ef:67:53:ae:8a:ad:82:bd:
86:b2:22:10:a1:7f:c4:a5:fa:8d:fb:21:bb:fb:a9:8e:e8:46:
c1:f1:43:9f:63:20:8d:b5:85:a0:9d:6c:62:58:6a:32:87:33:
25:f2:cc:b2:3c:a4:98:5c:7a:85:a4:e4:1d:96:30:f0:5e:a7:
6b:0b:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 07:52:37 2024 by rpki-client on console-ams.rpki-client.org