Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_scyPRddz5dhf3VPlKyjHAFyZ34.roa
File: _scyPRddz5dhf3VPlKyjHAFyZ34.roa (raw, json)
Hash identifier: PbL7g85cJZyIaWzYAklwrlYTj9AdPEpxC5s+VvWNKDo=
Subject key identifier: FE:C7:32:3D:17:5D:CF:97:61:7F:75:4F:94:AC:A3:1C:01:72:67:7E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D3EDC76187B509676B2EDFED3F6662BE2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_scyPRddz5dhf3VPlKyjHAFyZ34.roa
Signing time: Thu 25 Jan 2024 04:24:11 +0000
ROA not before: Thu 25 Jan 2024 04:24:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200482
IP address blocks: 194.87.169.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jan 2024 11:58:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3e:dc:76:18:7b:50:96:76:b2:ed:fe:d3:f6:66:2b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 25 04:24:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fec7323d175dcf97617f754f94aca31c0172677e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:06:7c:da:04:c6:ae:ac:3d:ae:b1:d0:6b:
ec:11:78:70:01:be:f7:19:ff:ea:5f:3c:aa:14:18:
9b:cf:68:99:ed:23:39:29:0a:b9:a4:97:fc:11:74:
ce:1c:b3:21:77:09:6c:2a:38:70:f1:ed:74:85:99:
49:d4:57:f5:98:2c:cb:e4:e2:65:b0:9c:a5:e6:33:
71:32:64:12:e1:25:a9:0a:57:c7:0c:df:80:26:b5:
15:0b:d2:09:df:c2:e3:4e:43:6f:3b:a9:5e:2b:06:
30:2a:af:0e:7f:c6:83:8a:ea:53:2a:ed:d7:7b:78:
2e:f0:4f:99:3f:11:d0:97:67:50:f1:5c:72:05:fa:
1b:95:da:f0:a1:c6:71:2e:33:c4:4f:30:b8:05:1b:
64:9e:e7:45:72:2d:2b:ab:73:fa:9a:b9:17:42:1a:
d7:e7:72:b5:05:02:48:fd:ed:6d:62:e0:af:b5:f8:
27:ec:a3:88:b0:3a:9b:aa:03:c0:b9:37:00:d3:a0:
48:e2:65:05:11:e6:7d:18:d7:3b:ea:cd:8f:71:0d:
f4:45:4f:14:af:2a:a4:e3:1f:31:0c:89:57:78:08:
bf:36:cf:f2:8b:5d:e7:06:00:a4:7e:a4:b1:71:5b:
70:dd:80:3a:f2:bd:ff:35:1b:67:2b:67:49:85:fb:
9b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C7:32:3D:17:5D:CF:97:61:7F:75:4F:94:AC:A3:1C:01:72:67:7E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_scyPRddz5dhf3VPlKyjHAFyZ34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.169.0/24
195.133.15.0/24
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
79:dc:4c:e0:41:ad:f6:94:04:83:1b:0c:ee:cf:1e:d7:41:e0:
37:39:a5:eb:eb:09:f9:83:ac:fb:72:15:19:b4:e3:b6:03:42:
dd:dd:eb:57:02:3a:05:89:06:ea:a3:6c:49:25:b2:e4:df:b7:
cb:3d:5a:23:15:15:96:17:52:33:0f:c3:b1:4e:04:fc:15:9d:
6a:a5:e6:c9:74:48:26:da:c8:fe:41:61:e8:f5:a2:ea:1e:0a:
b5:4c:4f:11:58:2f:a5:7c:70:59:af:f9:ea:ef:5b:3b:31:44:
93:e7:25:02:8f:f2:78:7e:39:89:5d:12:52:5f:46:28:c9:d3:
d1:c0:df:80:b8:74:33:ab:df:a3:46:a4:76:c8:15:be:59:a7:
bf:00:49:5a:ea:08:96:97:e2:fc:c4:6f:b5:20:69:e4:3b:c9:
bb:20:dc:4f:be:a4:00:16:cf:b7:f3:b6:47:4c:c5:ce:c8:7d:
9b:99:cd:6e:13:ee:88:8e:61:be:d9:d5:08:5d:46:bd:df:d5:
1f:2a:bb:8e:a6:f0:8d:7b:ee:01:ee:62:3b:f1:7a:40:16:b6:
0f:a4:ee:26:4e:ac:07:c7:83:dd:d1:7e:c5:fa:9c:3a:cb:6c:
0d:5d:1e:e5:e6:74:37:6f:a4:3c:49:7c:84:fb:b0:ba:27:0f:
3d:9c:89:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:20 2024 by rpki-client on console-fra.rpki-client.org