Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b-00qKggza5U4eLn6vCa1q91W2g.roa
File: b-00qKggza5U4eLn6vCa1q91W2g.roa (raw, json)
Hash identifier: jtwXBDYSCFF+TVjJUUcaDMcrlDm9DYRQeezwGlDLa9s=
Subject key identifier: 6F:ED:34:A8:A8:20:CD:AE:54:E1:E2:E7:EA:F0:9A:D6:AF:75:5B:68
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189D42AC1064CD35D5E22A30155CB4417F2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b-00qKggza5U4eLn6vCa1q91W2g.roa
Signing time: Tue 08 Aug 2023 08:01:58 +0000
ROA not before: Tue 08 Aug 2023 08:01:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60842
IP address blocks: 194.87.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:2a:c1:06:4c:d3:5d:5e:22:a3:01:55:cb:44:17:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 8 08:01:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fed34a8a820cdae54e1e2e7eaf09ad6af755b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:52:cd:06:b9:c1:47:71:86:6d:bc:50:16:
f0:05:7b:14:6b:50:75:c2:e8:72:84:5e:42:5a:ce:
5c:a8:45:aa:24:fb:12:d0:50:d3:b8:40:ce:8f:7b:
ef:3b:44:5d:ea:a1:69:73:8f:0a:9e:93:23:f3:c4:
2b:ae:66:bf:b9:56:81:4f:e1:84:38:08:9a:56:dc:
7c:8c:0d:c1:68:e3:d0:91:35:d9:05:58:41:12:01:
58:da:d4:9b:d1:1d:58:03:a9:fe:c3:e0:1a:8c:d6:
b6:ec:6c:c6:e9:52:8c:6e:d1:73:3d:7a:32:30:90:
f1:13:b0:4f:0d:61:47:b5:04:c1:5c:80:87:c1:a3:
01:d2:84:09:4f:0c:ca:be:91:00:7a:15:af:d5:c5:
c2:38:33:83:f2:b7:fe:f9:67:3d:a5:6c:d1:5d:bf:
50:45:9e:b5:91:48:e4:05:ee:f5:aa:95:b2:de:06:
28:87:f1:43:7c:5f:a8:ed:b6:19:a0:78:5c:34:50:
2f:33:14:b8:ba:91:a6:60:ef:36:5b:4d:b6:79:80:
31:18:c2:cb:dc:d6:d9:eb:72:a5:0c:c1:85:8f:da:
ed:60:b3:26:1f:df:9d:3e:ad:77:84:a1:f6:14:57:
af:44:bf:c7:2c:3f:d4:60:b5:b6:63:16:9a:02:5a:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:ED:34:A8:A8:20:CD:AE:54:E1:E2:E7:EA:F0:9A:D6:AF:75:5B:68
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/b-00qKggza5U4eLn6vCa1q91W2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.32.0/24
Signature Algorithm: sha256WithRSAEncryption
02:a5:ae:06:af:68:d3:33:2b:a1:43:3d:15:81:c7:70:39:0c:
b9:eb:cf:a9:2c:ca:c9:e6:c2:e3:03:e3:ad:71:c0:09:e4:1b:
ee:c2:84:af:50:27:f0:74:72:f3:c0:c1:0a:8b:2f:fb:3f:b4:
ba:0c:78:a3:53:56:12:19:9e:2f:48:f4:a8:c6:17:7d:8f:85:
47:0c:bd:36:42:f3:3b:e0:6c:d1:30:eb:a8:9e:7d:a0:11:19:
09:20:60:fc:c2:19:17:22:21:7c:97:0d:5f:44:96:1b:cc:96:
f2:52:a2:36:1a:f7:b6:44:88:55:42:f5:e5:b7:19:b7:08:32:
d0:c1:72:25:21:12:db:33:2a:ac:4a:85:0a:51:46:ce:1f:8a:
3d:6f:5a:15:e2:62:ac:a4:86:6b:2f:c5:bc:d2:e2:0e:b4:a5:
9e:91:5e:f5:77:27:81:92:62:a4:6c:84:a1:7c:d8:bc:e4:e9:
03:21:12:89:82:82:06:dc:dd:2b:15:76:2a:ee:c7:81:7b:26:
a1:3d:ec:be:db:08:de:10:be:13:9b:a4:0e:16:d6:69:ed:3b:
59:20:2d:23:ec:ca:cd:a4:1b:4b:b3:42:e0:02:99:e8:94:f3:
58:f7:da:73:92:cb:89:d9:66:2d:d1:7f:72:d9:aa:4c:51:31:
4f:b2:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 10:06:50 2023 by rpki-client on console-ams.rpki-client.org