Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gB3GtN6XFiqLV7mRDPLbyq8xLBI.roa
File: gB3GtN6XFiqLV7mRDPLbyq8xLBI.roa (raw, json)
Hash identifier: /AzO/m6zU3WbazAknK65rl04dkHdkHHZD4y+lYJOYRc=
Subject key identifier: 80:1D:C6:B4:DE:97:16:2A:8B:57:B9:91:0C:F2:DB:CA:AF:31:2C:12
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AA8B469496405FDCCF8A8D4457A5A0F4F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gB3GtN6XFiqLV7mRDPLbyq8xLBI.roa
Signing time: Mon 18 Sep 2023 14:31:50 +0000
ROA not before: Mon 18 Sep 2023 14:31:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 194.87.198.0/24 maxlen: 24
192.124.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:b4:69:49:64:05:fd:cc:f8:a8:d4:45:7a:5a:0f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 18 14:31:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=801dc6b4de97162a8b57b9910cf2dbcaaf312c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:06:28:85:fc:9e:94:9c:e8:e4:ad:3d:1f:f9:
7c:70:aa:13:41:b4:39:d1:bd:4a:de:e5:ff:f6:31:
78:f6:d9:98:ba:4b:53:c6:cb:1c:63:fc:61:a6:0c:
1b:86:ae:b3:c4:8e:d4:a5:00:78:91:7e:b3:80:88:
0b:46:01:d2:91:7a:ce:2a:75:21:05:64:9e:3b:77:
8f:aa:47:be:b9:0b:a6:2c:9a:57:93:72:fd:6d:bc:
21:86:4c:e6:18:b1:72:db:fd:f3:e5:af:69:f4:21:
b3:3c:c1:98:f8:0d:93:1e:1b:5b:fb:29:c9:21:b9:
be:8b:79:f9:a2:9c:ac:91:3e:92:ed:be:11:c3:ca:
e0:c6:cc:c5:c9:e4:5a:c4:26:73:72:1c:b9:94:40:
71:d3:f7:2a:84:cf:e0:e9:56:58:60:c8:32:8c:c5:
c4:96:39:63:09:ee:4f:fc:6a:b6:12:74:5a:48:bc:
e7:ab:4a:bb:a2:7c:a6:1b:53:c6:68:ea:e4:39:43:
ac:1e:57:29:de:8f:1f:ac:16:49:39:c6:c6:9d:66:
f7:26:6d:9f:09:5c:11:2e:bd:8a:e9:9c:35:69:16:
3f:ac:06:91:f1:25:0b:5b:7a:16:fe:c3:0a:4b:64:
3e:fa:df:14:9f:c6:b1:eb:0c:32:eb:c0:94:4f:c9:
43:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1D:C6:B4:DE:97:16:2A:8B:57:B9:91:0C:F2:DB:CA:AF:31:2C:12
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/gB3GtN6XFiqLV7mRDPLbyq8xLBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.209.0/24
194.87.198.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:c0:ef:55:28:36:be:3b:2f:e5:30:96:21:8f:ae:5d:c5:95:
19:11:61:56:61:b2:66:e6:39:f4:7a:b0:c1:55:71:2a:03:fd:
f0:f2:4e:8a:71:f7:8e:5f:72:02:fd:c4:22:3d:22:62:8f:81:
8a:d7:88:cf:12:7e:62:21:f8:c9:39:62:b8:7e:48:80:0c:a4:
c1:ad:84:60:41:2d:d5:e6:5f:ae:02:a2:97:e0:0e:c7:c3:40:
41:8d:c2:9e:40:97:c8:56:2a:d5:08:63:19:cd:9b:ac:0e:44:
e7:31:9f:7b:6e:3b:ca:4e:8e:0c:8e:16:cc:fa:23:a7:1f:89:
58:1d:da:98:bc:4a:31:52:b5:02:5b:bc:f6:55:bf:88:3c:02:
8d:7c:ac:d0:b1:df:19:11:97:f8:b9:4b:69:24:0c:de:f1:c9:
d4:94:92:b0:91:d0:9a:e1:37:34:2e:ac:d0:cc:4f:94:f8:b3:
8a:82:29:d8:e5:7c:32:68:d6:6f:61:b2:32:f6:f0:19:82:6e:
dd:36:56:d5:ee:c2:ed:0f:33:d3:c1:37:3d:a2:13:2e:49:4a:
b5:ba:cb:c1:86:1e:64:04:af:06:59:54:dc:aa:a6:fe:9e:11:
98:bf:84:fe:95:a7:d1:9b:98:d7:f9:94:48:26:c7:6e:c2:ee:
c4:06:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 12 15:01:35 2023 by rpki-client on console-ams.rpki-client.org