Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/axOeAHnVkSiVsOejEv2-wKHqNYM.roa
File: axOeAHnVkSiVsOejEv2-wKHqNYM.roa (raw, json)
Hash identifier: 4grjZ7m949QNp+3AV/rlwIyVHF3rkINXjxT+K0RBNTc=
Subject key identifier: 6B:13:9E:00:79:D5:91:28:95:B0:E7:A3:12:FD:BE:C0:A1:EA:35:83
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875237B3B9C35E545A9C1E9E92B9C053AA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/axOeAHnVkSiVsOejEv2-wKHqNYM.roa
Signing time: Wed 05 Apr 2023 16:19:54 +0000
ROA not before: Wed 05 Apr 2023 16:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211484
IP address blocks: 194.87.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:37:b3:b9:c3:5e:54:5a:9c:1e:9e:92:b9:c0:53:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 16:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b139e0079d5912895b0e7a312fdbec0a1ea3583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:04:98:8e:5e:4a:1b:e7:26:d8:4c:54:ac:01:
32:95:cb:41:1c:1a:ab:4b:9f:10:bf:e0:8f:04:35:
1d:eb:e4:f6:bf:bf:49:c1:f6:32:3d:67:af:3a:a8:
27:bd:a5:ce:f5:22:27:99:9c:9d:14:cd:0a:d1:99:
b5:46:cc:9c:5b:34:85:ad:d2:16:63:ae:78:4e:b6:
70:7c:c3:00:ab:77:46:e7:81:a5:51:2e:8a:e0:9e:
b9:a8:44:6b:07:2c:f2:1b:f8:39:bb:0e:b2:cd:3d:
0f:ca:ec:af:22:1a:df:cd:a7:83:51:66:13:85:03:
50:21:40:54:09:56:25:a6:bf:a9:0e:86:15:b0:64:
e9:c6:e8:8e:95:57:97:96:6d:3e:ab:f5:02:83:64:
62:7c:e5:18:b9:d7:68:4c:03:a1:cd:53:ac:e6:8d:
69:cc:e7:1c:d3:3e:c3:6e:1d:2e:c5:80:12:93:6b:
8f:eb:d4:06:7b:bf:b4:93:b4:5f:25:e7:5f:c6:ab:
fa:7f:a4:e8:6f:9a:7e:61:59:4e:4b:ff:64:b9:60:
8f:18:1b:a7:04:1c:89:a2:77:cd:3a:c6:70:fb:a3:
36:08:e4:60:7f:78:65:9d:c2:a3:c3:cc:b9:27:33:
10:6b:a3:7e:95:2a:49:63:89:d1:d9:cd:61:dc:19:
64:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:13:9E:00:79:D5:91:28:95:B0:E7:A3:12:FD:BE:C0:A1:EA:35:83
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/axOeAHnVkSiVsOejEv2-wKHqNYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.105.0/24
Signature Algorithm: sha256WithRSAEncryption
77:c8:1f:cc:02:71:16:b9:b1:78:1b:bf:c0:1e:a9:35:de:a5:
45:88:e7:8f:65:f7:61:89:20:41:b9:89:a8:28:d4:ec:66:63:
ec:28:4c:e7:63:58:fa:88:a0:c1:89:f0:52:66:42:0b:fb:31:
91:70:c9:e6:8e:2d:61:b8:b3:cb:05:24:45:54:5a:4c:b8:53:
02:0f:2c:a2:ac:1d:b6:e0:5b:40:d0:a1:bc:9f:8e:a2:95:33:
b0:2a:42:0d:f3:35:0a:cf:bf:fd:b8:ba:51:f1:95:71:a0:3b:
3e:f3:e2:44:41:1f:ba:cd:d5:be:cf:f8:54:a6:e6:04:93:36:
9b:0d:ae:da:27:3f:ac:71:2c:3a:47:8c:eb:12:9f:25:7b:73:
d2:03:c7:38:14:94:dd:b4:95:c2:7f:c6:5a:54:7f:f6:1e:b5:
0f:a7:d8:d0:59:2f:87:80:7b:3e:74:8c:fe:ae:60:2a:7b:81:
e3:92:6c:e3:b5:e8:04:a2:b7:eb:aa:bc:22:0f:3d:a4:16:f7:
40:50:11:fe:c1:4b:6f:65:55:23:28:2a:2f:1f:5f:fd:f3:e0:
ab:13:e2:02:fd:97:5c:a4:be:bc:d9:46:fe:c8:9c:fa:fd:0f:
64:a3:ec:a7:ed:f0:ff:5d:6c:95:94:4f:3e:35:ee:79:6a:5f:
1f:f1:50:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org