Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/alViRjKxQ2v4FpYOwER3h4ooTVw.roa
File: alViRjKxQ2v4FpYOwER3h4ooTVw.roa (raw, json)
Hash identifier: 2zcQnLMomkPAlnPKNFJtyQ8ZLTDObKn/esPskg26pdk=
Subject key identifier: 6A:55:62:46:32:B1:43:6B:F8:16:96:0E:C0:44:77:87:8A:28:4D:5C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66FBAEF7A738D09856A8F72D5643D8
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/alViRjKxQ2v4FpYOwER3h4ooTVw.roa
Signing time: Sun 01 Jan 2023 22:14:58 +0000
ROA not before: Sun 01 Jan 2023 22:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 194.87.25.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Jan 2023 11:13:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:fb:ae:f7:a7:38:d0:98:56:a8:f7:2d:56:43:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6a55624632b1436bf816960ec04477878a284d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:83:c0:fe:03:36:63:e2:3a:65:20:29:6f:
f9:bb:9d:16:4b:15:6c:01:3a:0f:c6:b3:23:53:93:
c7:a5:51:dd:eb:2c:1e:7e:2e:55:c9:03:36:b1:17:
5f:f6:cf:a7:eb:a7:0c:75:4f:61:e1:1d:71:08:65:
8c:ae:ac:fd:44:98:c4:f4:27:66:f5:c6:28:99:18:
9b:1f:d1:89:b0:f7:dc:76:93:d7:ff:f5:8b:a5:f5:
e9:17:ce:20:cd:35:42:e5:db:51:cf:7d:17:2c:cd:
7d:e3:d8:4e:eb:81:88:48:f6:83:72:d4:2a:83:b8:
7a:6f:f4:32:ad:1d:20:66:09:51:07:ec:d4:9e:32:
fc:91:76:c3:ab:3a:27:b5:f9:ec:28:63:09:e7:66:
8d:77:87:4b:fa:18:03:44:7a:41:fc:0c:96:d6:11:
b5:f2:90:a3:40:a5:ff:83:ac:c1:99:4d:b8:99:84:
ac:99:95:33:0e:c0:ee:d7:2d:7f:06:5b:8b:65:43:
cc:16:38:94:5d:7b:a4:2a:6b:17:1c:34:9e:26:f7:
a6:9e:2d:fc:00:64:ea:fc:e6:f8:e3:76:ce:d8:78:
f5:88:44:da:84:ba:8a:ff:67:9c:24:be:45:94:ad:
f4:c1:a7:0d:d1:be:c2:08:93:24:82:45:14:30:f1:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:55:62:46:32:B1:43:6B:F8:16:96:0E:C0:44:77:87:8A:28:4D:5C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/alViRjKxQ2v4FpYOwER3h4ooTVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.25.0/24
194.87.27.0/24
Signature Algorithm: sha256WithRSAEncryption
54:6d:be:bc:cf:ac:63:84:18:4e:6b:95:bf:b4:af:ca:03:01:
e0:a6:90:c6:0e:54:f2:ef:cb:6e:bb:18:86:25:10:a6:a7:a6:
16:49:48:06:db:56:a5:f6:24:4a:ae:29:41:77:12:79:6e:fc:
18:5a:b5:7f:26:e4:c0:58:ab:58:71:7c:60:44:77:e2:66:02:
66:5a:dc:02:aa:47:08:12:1f:74:13:20:02:fe:54:76:88:db:
7d:c3:7e:b0:c4:aa:a6:ac:ff:57:d0:52:9e:d0:19:e0:cc:e1:
c4:a4:04:19:99:3f:ea:6b:e6:ef:95:9e:58:8d:ff:56:93:33:
d5:04:7d:b1:42:ff:1e:fb:f8:7e:a2:bd:de:2e:f2:30:2f:e0:
26:68:9e:a7:64:10:ca:26:e4:4a:18:cd:c2:2e:7a:31:0f:f3:
75:21:6f:cb:50:91:a6:d5:3a:e2:70:b8:2e:85:0e:c7:70:0b:
fb:bb:d3:df:45:a4:73:0e:88:46:bb:6c:4a:f3:f8:77:59:2f:
54:d7:fe:1e:a4:41:4d:4f:72:11:7a:08:73:89:a9:22:9b:38:
ec:5e:59:d0:a2:b0:c6:c2:10:a7:7f:74:bf:da:6f:99:95:ed:
48:18:4d:86:2e:dd:50:ba:ef:65:85:b6:69:25:0c:e3:c7:87:
e5:42:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:21 2024 by rpki-client on console-fra.rpki-client.org