Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c2sCQTPl88kqIbO1_WtYchB7Kek.roa
File: c2sCQTPl88kqIbO1_WtYchB7Kek.roa (raw, json)
Hash identifier: gZcpSVFHrVpuerlol77WTahv0fPuPeUB0JTmCcKCLLE=
Subject key identifier: 73:6B:02:41:33:E5:F3:C9:2A:21:B3:B5:FD:6B:58:72:10:7B:29:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B1F641ACBF5488E5946B5E9CCDDAC08B5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c2sCQTPl88kqIbO1_WtYchB7Kek.roa
Signing time: Wed 11 Oct 2023 15:38:55 +0000
ROA not before: Wed 11 Oct 2023 15:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44620
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1f:64:1a:cb:f5:48:8e:59:46:b5:e9:cc:dd:ac:08:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 11 15:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=736b024133e5f3c92a21b3b5fd6b5872107b29e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:7b:67:0f:e0:46:29:04:14:ad:b1:5d:cf:
83:dd:90:33:c6:7b:27:4c:b7:af:0c:35:cf:08:98:
67:cb:53:e0:75:50:03:b4:8e:de:fc:a5:86:13:23:
44:65:40:3d:bf:6d:a5:64:f9:2c:4f:b0:34:44:dc:
5b:ec:c5:dd:80:72:4f:e9:3e:a9:8e:eb:44:d9:fa:
88:48:28:9e:f1:7e:49:b9:8c:d7:57:0a:cb:aa:06:
80:2e:84:0c:f9:c9:dc:3b:cb:7f:e8:d7:5f:3f:82:
91:8a:a0:f1:7e:41:b2:01:1e:20:4f:86:48:3d:97:
94:1b:c8:cf:4e:74:28:d6:bf:a5:bf:e1:98:4c:a7:
b8:31:38:f9:0f:30:21:06:01:0a:2d:83:91:e4:99:
da:0a:dd:c9:d5:d1:7c:d7:08:7c:11:02:9a:52:39:
77:f8:2e:a7:c3:91:d0:26:07:2b:4a:c4:04:77:44:
7a:08:40:d5:8f:2a:f8:c3:69:e1:e6:f4:dc:71:5c:
55:3e:c1:05:0b:7f:8b:c9:d4:53:9b:8d:83:8f:52:
bf:01:ba:6e:29:ce:32:85:ba:33:bc:e9:86:8f:40:
e6:24:79:87:45:39:bc:23:93:9a:05:87:26:ce:8c:
8c:cd:26:8e:69:31:db:87:db:e3:e0:23:40:12:bb:
fd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:02:41:33:E5:F3:C9:2A:21:B3:B5:FD:6B:58:72:10:7B:29:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c2sCQTPl88kqIbO1_WtYchB7Kek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b6:ef:13:06:df:9f:23:2d:76:82:c1:21:59:aa:4d:32:b9:
79:af:86:a2:f3:e6:40:d4:c8:6b:91:c7:33:a8:f6:51:ac:2b:
32:a7:12:16:ec:fb:d5:dc:1c:70:4d:b7:98:84:8b:fd:16:82:
0b:bb:5a:15:00:c0:d6:97:e8:6b:c8:83:e4:b3:ba:5e:3f:cf:
2c:0f:6d:2a:9b:62:ac:1f:ed:de:02:ff:0c:6d:d8:ba:56:cd:
e5:49:02:d1:01:61:03:3e:80:59:22:d2:6d:b9:82:fd:3f:ba:
d8:32:3e:41:ac:8d:33:05:6e:b8:4e:65:7d:f6:a5:e2:fc:db:
39:2d:3c:89:63:f0:b0:3e:25:4b:87:fb:1d:38:88:31:39:02:
19:1d:ce:94:30:88:7f:c6:ca:89:b4:34:a8:2c:9e:a4:5c:c9:
a9:8b:0e:76:77:67:e5:cb:19:0d:5f:b5:b9:45:8e:dc:bb:3d:
b3:3b:1c:03:7f:63:ac:9c:18:7f:3d:53:4a:c0:1b:1b:a1:53:
56:0e:bc:fe:2f:4a:45:21:b5:45:5e:2a:66:46:b2:36:27:08:
f6:b4:db:aa:a2:1a:fa:8a:fc:ac:93:1c:3f:f8:2e:5e:47:5b:
3d:0a:ec:83:d5:2a:52:4d:47:03:9b:c1:c3:03:09:0f:5e:ae:
6a:b9:4c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 14 05:39:46 2023 by rpki-client on console-ams.rpki-client.org