Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a4mUdDw8KWgiEO5wFg0SUy1FXc4.roa
File: a4mUdDw8KWgiEO5wFg0SUy1FXc4.roa (raw, json)
Hash identifier: AGOjdFB/d+Xyycd6RpLqPMuoyz4QGAT0xr2MkVcSZf8=
Subject key identifier: 6B:89:94:74:3C:3C:29:68:22:10:EE:70:16:0D:12:53:2D:45:5D:CE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C536C12A4FBA5D80ED9BE7973C016C50A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a4mUdDw8KWgiEO5wFg0SUy1FXc4.roa
Signing time: Sun 10 Dec 2023 11:10:40 +0000
ROA not before: Sun 10 Dec 2023 11:10:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199760
IP address blocks: 194.87.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:53:6c:12:a4:fb:a5:d8:0e:d9:be:79:73:c0:16:c5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 10 11:10:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b8994743c3c29682210ee70160d12532d455dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:39:62:f4:7c:bc:2f:15:a6:9b:88:c5:c3:6a:
f3:f5:c5:3b:82:f5:72:44:62:0e:72:e5:a1:e9:8a:
59:72:f6:66:34:e5:f4:0e:dc:e3:25:83:ff:c4:59:
7f:37:b0:30:87:38:e4:d7:0f:9f:18:a0:b4:0d:81:
3e:ea:c3:50:d4:f3:31:66:eb:fe:55:b1:68:bd:4e:
4a:67:2f:03:65:37:f9:4f:10:01:88:70:49:bf:14:
fe:a1:a6:9c:8e:05:18:7a:ea:24:46:c0:10:a9:49:
ea:df:ca:f7:7b:c0:a5:64:c2:f0:03:28:01:a1:94:
03:0f:dc:05:3d:3b:12:cc:2c:bd:3d:1b:56:49:6f:
6c:99:63:e7:1d:1b:9f:ec:fe:97:74:26:bb:ca:c0:
56:3b:e8:d7:80:d0:a3:13:ae:de:20:0a:4a:20:83:
3c:ea:0d:dd:b3:53:fd:d7:41:e4:64:ef:23:8d:bb:
be:74:44:5d:82:06:18:cb:57:b5:d5:f2:e9:cc:73:
91:77:8f:8d:0d:5f:3a:8e:48:a7:4c:e5:9e:f0:79:
d4:6b:cf:1e:29:c0:c9:40:d4:13:89:b5:28:7b:f8:
62:0b:eb:ee:c3:83:c3:c8:27:4a:60:15:7d:3e:29:
51:90:46:4c:f2:04:86:05:29:e7:16:fe:35:ee:85:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:94:74:3C:3C:29:68:22:10:EE:70:16:0D:12:53:2D:45:5D:CE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/a4mUdDw8KWgiEO5wFg0SUy1FXc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e7:8e:2e:b5:46:f4:13:f7:4c:85:60:28:18:62:1e:77:aa:
9b:01:4b:c3:ae:3b:c9:79:fe:ea:88:8a:e3:d7:dd:b2:f2:0b:
d2:06:55:91:bc:ff:a1:bb:11:44:83:57:eb:54:49:d1:cc:e1:
65:07:cf:7e:de:db:4f:56:55:7b:dc:e0:4a:27:fb:14:d7:cb:
51:86:b5:20:ec:7a:82:a1:74:87:15:69:7c:0e:7a:d4:db:ae:
e3:b8:6e:e9:c3:24:4e:70:d9:a0:f3:64:2e:95:1e:76:dc:32:
33:9a:9e:25:7b:2f:99:b6:d9:cb:e4:aa:d5:cb:ee:c3:2a:90:
e7:48:3f:79:92:94:7e:67:28:44:ea:e4:f3:bc:80:05:fb:be:
63:4a:c0:59:7f:de:29:98:4a:cb:ed:4e:94:ab:e0:e9:09:d0:
f0:a5:c8:2f:43:8d:e6:58:91:a0:60:53:12:4c:f0:0d:dd:ab:
2f:21:4c:0c:89:fc:c6:7a:25:23:cb:84:c8:e3:a0:12:84:bf:
51:88:b3:c9:8f:8e:a7:59:bc:1d:7c:52:ba:28:a2:0a:13:a0:
e0:1e:d1:d5:f1:ad:88:bb:a3:83:d6:ae:f6:a1:fc:08:6f:36:
be:99:5d:95:fb:99:7e:bf:82:9a:9e:7a:03:73:37:f2:14:b0:
25:25:11:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:20 2024 by rpki-client on console-fra.rpki-client.org