Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hDzh5r-ekIwUGYK5edqAQMJ3pnQ.roa
File: hDzh5r-ekIwUGYK5edqAQMJ3pnQ.roa (raw, json)
Hash identifier: S6mnrLtTZLErV1eZ4XI4rhwIj7nkJBRLuG5bfXtzKUM=
Subject key identifier: 84:3C:E1:E6:BF:9E:90:8C:14:19:82:B9:79:DA:80:40:C2:77:A6:74
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E363A29FD5A3F143B59B0465E2E4303D7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hDzh5r-ekIwUGYK5edqAQMJ3pnQ.roa
Signing time: Wed 13 Mar 2024 05:12:45 +0000
ROA not before: Wed 13 Mar 2024 05:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 194.87.73.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 11:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:36:3a:29:fd:5a:3f:14:3b:59:b0:46:5e:2e:43:03:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 13 05:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=843ce1e6bf9e908c141982b979da8040c277a674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8b:57:78:bf:05:13:01:e2:9e:db:2b:c9:15:
56:7f:31:6b:bf:b4:59:7e:34:61:f6:8d:cf:8c:7b:
cd:5b:11:70:a5:c8:d0:de:04:c2:9a:1f:80:22:c3:
62:4e:88:70:90:71:6b:42:5d:7e:a8:96:a6:ba:2d:
b7:df:42:02:53:56:4b:90:2c:a7:05:e1:f3:0a:8a:
6e:d9:5d:2b:89:49:0d:80:bd:4d:b7:4f:b3:25:db:
93:a5:5a:ff:82:54:04:c6:c1:7c:89:24:ff:3c:5b:
70:49:5c:75:db:9e:3f:e9:e2:a3:2e:46:78:3a:93:
46:c1:0f:df:ab:65:c1:e7:db:80:f7:66:63:cc:37:
93:d9:35:5f:b7:31:50:1f:d0:7a:ef:98:99:ca:a5:
76:c4:b4:fb:aa:81:69:c1:20:2e:2a:fb:b2:99:07:
a0:f8:fa:29:a8:43:a7:e1:6b:76:e3:40:fd:8c:b0:
e0:14:5a:1c:99:ab:61:ec:ca:1f:df:e8:47:16:16:
67:92:9b:00:77:8a:87:09:80:a0:6a:7c:77:2c:49:
79:65:ec:49:a9:c5:be:ad:a1:60:2d:e3:00:13:ea:
48:79:46:96:c7:96:2b:db:e2:7e:6a:68:ea:bd:84:
b4:8d:bd:c3:1d:61:cc:67:fb:21:f5:80:79:b3:2d:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3C:E1:E6:BF:9E:90:8C:14:19:82:B9:79:DA:80:40:C2:77:A6:74
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hDzh5r-ekIwUGYK5edqAQMJ3pnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.73.0/24
212.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e7:3a:a2:f3:44:37:ac:0f:d1:ef:d0:96:1e:e8:6f:8c:ce:
ae:50:c3:0e:0f:92:e8:55:e9:0f:53:15:7b:79:b2:c7:dd:c4:
eb:c6:34:79:a1:9a:d1:f4:64:0f:30:14:3c:66:30:f7:64:90:
cd:82:c3:2b:52:f1:81:9e:dd:3b:72:38:66:96:5c:b5:9e:39:
38:39:05:e4:2e:dc:0b:2b:86:19:a7:08:5e:6e:20:e2:30:e8:
c7:a2:12:69:0a:67:9c:3d:07:c1:2a:ba:a2:8c:4e:9e:61:12:
66:6f:94:16:b2:34:45:62:f6:a9:2c:e8:e9:b0:bf:b9:4d:12:
6b:98:f1:ef:82:05:a8:ff:23:92:2b:39:7c:ca:90:5e:e6:c9:
82:ba:3e:93:48:f0:4e:bc:89:77:b8:39:7e:cf:d5:60:66:bd:
6c:b0:5f:a1:d3:1f:f2:6d:99:1b:3f:8a:96:0a:8c:d4:f6:cd:
8e:2b:c7:ba:62:0e:e4:a7:22:34:04:2d:c8:cf:d0:e3:0e:26:
84:17:20:06:93:f9:dc:34:9c:4f:83:8e:10:a3:f0:10:8e:de:
f3:32:44:64:ef:35:1c:64:7d:67:a5:24:b6:e8:49:1b:d8:d4:
39:a3:89:7d:35:37:80:f8:05:72:dc:2d:f4:33:a2:e4:b9:4b:
f8:03:f1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:23 2024 by rpki-client on console-fra.rpki-client.org