Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_fyZbYCVFKMXn6J0OYQp5iueypQ.roa
File: _fyZbYCVFKMXn6J0OYQp5iueypQ.roa (raw, json)
Hash identifier: vF8tJIIRQ+xSpj2PT+ZZZVdzFcw0zYor/JrBpww/rHE=
Subject key identifier: FD:FC:99:6D:80:95:14:A3:17:9F:A2:74:39:84:29:E6:2B:9E:CA:94
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B841340FE0618A600B72FF844896EEBC5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_fyZbYCVFKMXn6J0OYQp5iueypQ.roa
Signing time: Tue 31 Oct 2023 04:52:16 +0000
ROA not before: Tue 31 Oct 2023 04:52:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.141.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:84:13:40:fe:06:18:a6:00:b7:2f:f8:44:89:6e:eb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 31 04:52:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdfc996d809514a3179fa274398429e62b9eca94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:5f:ca:c1:ff:c0:98:04:e9:bc:6e:dc:2f:
a5:95:60:39:73:2a:d6:bb:13:48:01:0c:fd:79:a1:
b8:96:90:b1:1d:a9:73:d0:8b:f7:5d:6f:f4:40:29:
67:51:27:0d:5c:3d:17:32:35:5b:b1:f8:11:a5:0c:
17:12:97:56:1d:db:79:25:6f:6a:52:92:59:41:8c:
8a:5c:2b:71:1e:d6:eb:0c:11:4c:2a:d6:74:cf:81:
f2:4f:bf:a2:2b:b7:38:f5:6b:45:09:54:ae:b4:aa:
ee:52:a1:5b:b2:f2:0b:9e:62:e0:64:c7:f4:f4:6c:
50:72:e9:ed:03:c1:24:86:53:73:80:22:9a:88:75:
ee:f2:23:c0:db:8a:d3:2a:b0:0b:f6:10:e7:bb:0b:
07:75:01:5c:96:5c:3c:2a:1d:4a:c1:37:bf:21:38:
8c:f0:e5:ef:ed:9e:90:33:d0:ab:e5:11:91:16:86:
33:11:9d:44:32:d6:38:f3:83:12:38:4c:04:58:aa:
c5:be:e0:54:bd:b9:b9:21:45:56:30:ab:2c:4b:23:
6b:98:eb:69:76:2e:90:aa:b6:2f:3f:30:ca:28:dd:
40:6a:ad:ed:6f:10:f6:39:8f:c6:f9:5c:c2:dc:fb:
06:8e:43:56:1e:ad:33:df:3e:4a:9d:51:3c:75:28:
11:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FC:99:6D:80:95:14:A3:17:9F:A2:74:39:84:29:E6:2B:9E:CA:94
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_fyZbYCVFKMXn6J0OYQp5iueypQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.141.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
39:cd:64:e1:47:23:a8:a6:ff:4e:72:b2:9e:ee:53:0e:98:2a:
0b:31:8a:58:ba:58:5a:3e:3e:f7:17:6e:b2:92:48:e6:00:57:
07:7e:25:4e:40:ff:f5:e0:34:a8:c2:86:51:41:4d:6b:55:e3:
bb:dd:d0:90:86:2b:4c:02:35:a9:3f:cc:17:9a:4c:ef:13:a8:
d4:35:c5:58:6a:5d:20:75:10:85:82:da:52:2e:d4:57:d8:11:
26:02:92:4a:53:ba:c8:17:37:74:39:91:7a:31:ad:39:79:54:
15:a8:24:4a:15:99:42:6e:28:c0:8a:ab:3e:c7:99:a4:fd:96:
3f:d3:99:95:ec:4d:cf:af:c6:eb:27:a4:14:38:13:6e:d1:05:
08:d2:cb:5c:2c:e7:a8:f1:bb:34:f0:93:f9:61:89:c0:4a:9b:
24:79:57:1f:7a:6d:5f:0b:18:56:5f:64:b6:ec:4d:96:8a:9b:
53:e4:5c:e2:a8:e2:95:15:c7:fb:09:b5:de:62:f2:8f:4b:ff:
ec:ec:45:7e:f4:81:ba:94:66:04:ec:72:1c:69:4f:69:40:c4:
ac:30:7a:84:a1:9e:06:f4:2f:56:e1:1b:18:66:65:e1:14:47:
11:87:a1:14:92:cf:f0:f6:bd:12:95:c5:47:26:b7:64:51:ec:
30:21:78:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 15:51:00 2023 by rpki-client on console-ams.rpki-client.org