Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/e7g6fC4mM1db7ff7Ei33H6b3YLI.roa
File: e7g6fC4mM1db7ff7Ei33H6b3YLI.roa (raw, json)
Hash identifier: pz+qxddQcpWQV5pzjmRhepUTfd8UuX9ILw5U8x60Jp4=
Subject key identifier: 7B:B8:3A:7C:2E:26:33:57:5B:ED:F7:FB:12:2D:F7:1F:A6:F7:60:B2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018880E38ED331172EDCB1BEAD3ACCB6F7C3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/e7g6fC4mM1db7ff7Ei33H6b3YLI.roa
Signing time: Sat 03 Jun 2023 10:52:56 +0000
ROA not before: Sat 03 Jun 2023 10:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 38337
IP address blocks: 194.87.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:80:e3:8e:d3:31:17:2e:dc:b1:be:ad:3a:cc:b6:f7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 3 10:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bb83a7c2e2633575bedf7fb122df71fa6f760b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bb:de:69:3d:82:e3:5b:f1:ba:40:15:20:1e:
ea:9f:59:db:32:97:ff:c7:96:2a:fa:1c:f3:34:8f:
86:6e:23:73:6b:e1:10:91:db:0a:3a:5a:e8:a5:d0:
25:4c:fc:8a:fd:fa:81:78:d2:52:3c:73:13:3c:14:
ab:e2:2d:15:54:d1:87:b6:b7:0b:7f:41:6e:af:b5:
68:3a:3d:d7:24:34:06:0f:c7:40:f8:49:1f:de:2f:
66:46:98:5f:9d:ce:56:08:26:71:44:e5:71:b4:80:
7b:25:b3:b5:7b:c4:05:a2:59:15:1a:63:ef:9e:c0:
2f:fa:8b:c2:c3:f6:cc:46:f7:42:80:47:3f:83:3f:
3b:9f:a5:81:f4:e8:82:82:60:e0:ef:a6:aa:2c:22:
6b:fc:a1:2b:a9:31:c4:1f:8c:19:0f:25:ee:da:5b:
72:d3:37:8e:eb:57:0b:26:2d:72:a4:b6:79:31:9e:
e3:91:c3:4d:0c:d0:88:f9:c6:2e:4c:79:ba:6a:dd:
53:2c:c6:4b:83:cd:79:6b:34:df:a3:d9:ef:4b:75:
a1:5a:62:04:c7:7c:0d:9a:18:35:52:01:bc:dc:42:
30:3f:4d:60:67:9a:91:f5:d9:68:66:cd:59:01:c2:
2e:29:e9:5c:43:e8:cf:85:61:af:8d:44:c2:ea:cd:
2d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B8:3A:7C:2E:26:33:57:5B:ED:F7:FB:12:2D:F7:1F:A6:F7:60:B2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/e7g6fC4mM1db7ff7Ei33H6b3YLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.209.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3b:2f:7f:be:f2:91:ab:b7:99:e5:fc:c2:c1:91:e7:55:6e:
11:0d:96:bb:01:e1:80:a5:cf:51:25:d4:d3:48:66:ea:69:fd:
b0:01:17:85:cc:be:59:39:51:3f:8c:aa:c3:5e:f8:c6:34:63:
a1:b2:2f:6b:24:53:b3:2f:42:9c:2a:f7:42:c2:5f:17:83:f8:
08:3f:1d:79:39:9d:84:18:88:0d:bc:c4:df:40:9c:f7:a0:14:
80:7d:48:89:38:f5:c4:46:c9:fd:2c:d2:d9:39:e1:4d:1c:93:
ad:b4:30:63:2c:ee:28:5f:c3:e9:f4:8c:76:fe:b8:7c:48:bc:
f1:e1:a5:85:48:66:65:dd:6c:4b:96:5b:3b:ed:63:12:2e:79:
13:e1:b2:01:0e:23:02:41:30:45:a1:e1:74:82:9d:c0:34:42:
7a:9f:22:a9:65:c3:fe:83:5a:42:b4:04:65:6a:60:c4:46:52:
d6:a4:10:77:0d:70:09:01:dc:bc:94:7a:7e:1b:b1:e7:ed:fc:
e5:07:e1:98:11:47:4c:ea:ce:5d:b2:45:22:ad:e7:04:b2:4e:
6e:e8:f7:43:c9:84:10:b3:6d:3f:b1:87:4b:f5:40:04:61:04:
ce:5b:dd:60:e8:65:2c:34:c9:31:9f:1f:14:c7:d0:31:1f:2f:
5d:83:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org