Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f8Jm4ysq6kRAWS2hZD2HXrfXXcA.roa
File: f8Jm4ysq6kRAWS2hZD2HXrfXXcA.roa (raw, json)
Hash identifier: tU/HUBYeh1Ab9hlPA3omz0VEmu8uf+8We8N0FPKghes=
Subject key identifier: 7F:C2:66:E3:2B:2A:EA:44:40:59:2D:A1:64:3D:87:5E:B7:D7:5D:C0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B24436F14CD7814F3D374196B71EDD789
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f8Jm4ysq6kRAWS2hZD2HXrfXXcA.roa
Signing time: Thu 12 Oct 2023 14:21:21 +0000
ROA not before: Thu 12 Oct 2023 14:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 194.87.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:43:6f:14:cd:78:14:f3:d3:74:19:6b:71:ed:d7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 12 14:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc266e32b2aea4440592da1643d875eb7d75dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4d:cf:00:6d:18:a7:7b:f0:b5:f8:40:bd:0e:
f9:c9:92:ef:69:9c:60:78:00:2c:1f:4a:7b:d3:8d:
99:c3:54:da:26:12:ce:aa:23:bc:5a:3c:7a:da:e6:
aa:e0:ec:d3:4b:7e:06:23:79:06:ac:70:f6:fb:50:
92:c5:92:6b:b0:cb:5b:63:15:0e:f5:3f:1c:80:96:
8a:31:ab:ec:ad:f1:b7:ec:e3:b5:16:a1:ef:4f:cf:
73:ba:52:80:fa:d6:30:3d:5c:eb:de:80:45:3d:a7:
1d:14:52:96:4d:04:83:2d:96:30:8f:97:9e:dd:b9:
9c:ac:30:ba:c8:55:d4:60:09:11:57:47:7e:37:d1:
f0:b5:fb:bb:56:d2:12:59:20:d6:b8:42:90:31:2f:
29:1d:16:a3:6d:37:fe:0f:d9:e2:12:29:b7:18:42:
2a:d7:3d:62:7a:6e:30:ef:b2:e8:19:4d:8f:19:76:
f9:ed:80:26:6e:b7:5a:a5:25:f8:e2:a5:9a:9b:9b:
76:bf:54:ac:71:72:10:2a:0c:ad:6d:fa:4b:9b:58:
dd:93:38:30:bd:7c:b7:bd:a6:be:91:f4:bb:bd:a6:
9e:f9:f3:2d:fa:6b:af:97:91:09:1f:aa:73:0a:b5:
fa:83:ee:10:55:cb:bc:30:f4:6c:fc:04:a9:eb:ed:
cb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C2:66:E3:2B:2A:EA:44:40:59:2D:A1:64:3D:87:5E:B7:D7:5D:C0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/f8Jm4ysq6kRAWS2hZD2HXrfXXcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.198.0/24
Signature Algorithm: sha256WithRSAEncryption
25:99:98:38:22:0d:23:26:f5:16:29:b4:62:47:16:6f:10:59:
38:60:b5:3c:55:e0:a3:f8:c5:b3:42:54:ab:e9:e3:91:d1:64:
b6:1a:73:a7:ae:28:0d:7c:de:b1:cf:fb:d3:0d:44:ba:95:e0:
14:89:c9:6b:50:01:8d:c1:13:a8:6b:0a:49:62:de:59:b1:d3:
76:9f:df:ee:d8:b4:1d:0b:dd:97:b3:67:c6:f4:84:cb:dd:ac:
46:db:ee:ae:7b:4a:ee:3a:3d:39:43:fb:75:bb:77:71:7e:50:
9e:ab:d6:23:f8:d3:66:43:66:a2:e9:91:52:f6:51:72:ba:a5:
59:57:43:f7:62:28:ea:5a:5a:ee:bd:a3:93:4f:17:7f:5a:da:
ae:77:1d:52:ab:3c:17:c2:18:56:66:54:a7:82:a5:6a:c4:b6:
a4:ac:ca:9a:f7:d3:d0:fe:13:e0:1e:bb:5e:4a:13:28:34:a6:
07:c8:2f:c7:53:2f:8c:da:43:0f:af:29:90:b8:59:9e:1d:0a:
84:c7:d4:05:28:9a:95:f3:fe:9f:14:60:cf:3d:b6:d2:1a:fe:
24:51:9c:df:8f:2b:91:81:2f:db:e2:0b:9d:97:b5:a6:14:cf:
d3:b2:7d:2d:fc:f2:c7:b3:7e:15:ea:ae:65:cb:66:24:f5:67:
31:35:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 18 12:00:48 2023 by rpki-client on console-fra.rpki-client.org