Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hT5DpM82vKnvVFXX_bGSCd7ttqY.roa
File: hT5DpM82vKnvVFXX_bGSCd7ttqY.roa (raw, json)
Hash identifier: BIzvXpcJ4CRADQhd2Bml1AKgw2ASlBNfAk8l+5vJ3h4=
Subject key identifier: 85:3E:43:A4:CF:36:BC:A9:EF:54:55:D7:FD:B1:92:09:DE:ED:B6:A6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CD0168EE1EE943CFD236B7DC4ED749F4A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hT5DpM82vKnvVFXX_bGSCd7ttqY.roa
Signing time: Wed 03 Jan 2024 16:09:48 +0000
ROA not before: Wed 03 Jan 2024 16:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147186
IP address blocks: 194.87.141.0/24 maxlen: 24
212.192.208.0/24 maxlen: 24
194.87.168.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 16:08:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d0:16:8e:e1:ee:94:3c:fd:23:6b:7d:c4:ed:74:9f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 3 16:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=853e43a4cf36bca9ef5455d7fdb19209deedb6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ca:0c:0a:56:14:ac:ca:86:13:18:2e:1c:1f:
4a:6b:8e:fb:cf:5c:91:23:7f:f0:af:64:50:1b:bc:
41:f5:c7:c3:3a:dc:41:7d:c0:de:03:5d:98:b8:82:
49:83:aa:fb:dc:1e:fe:8c:a7:1c:30:69:ba:40:78:
88:9d:6c:3a:b4:28:b8:42:dc:98:ab:6b:67:e7:26:
b8:4d:a3:ea:c2:b4:d6:1a:ea:ee:41:d4:69:72:00:
2f:f2:1f:16:ee:ae:bd:f6:36:fa:c9:b2:4a:c6:75:
d7:d1:bc:c5:b1:5b:bb:bd:db:ad:96:8f:ff:3a:56:
27:bb:b5:2a:70:dd:27:08:6a:ae:82:ff:f0:16:00:
98:d2:fa:a8:db:15:50:95:14:7d:6a:32:a9:b3:09:
e7:49:fe:0e:7d:e0:5c:27:73:da:1f:da:32:5b:81:
78:0d:3b:26:96:0a:01:8f:a6:f8:01:e1:09:72:bc:
ee:3b:62:5a:22:93:cb:24:9d:ce:fa:7f:e9:ef:c7:
d0:fe:8c:35:76:f8:f5:ed:e5:dc:51:91:1c:87:ab:
71:85:ec:89:cf:c4:91:c4:9f:e1:fb:a2:90:5d:e0:
73:38:4b:9c:fe:5a:c7:c3:d4:fa:1e:0d:e7:57:7d:
72:3b:50:a7:b5:b6:23:a5:18:03:38:7e:8e:60:c2:
7a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3E:43:A4:CF:36:BC:A9:EF:54:55:D7:FD:B1:92:09:DE:ED:B6:A6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hT5DpM82vKnvVFXX_bGSCd7ttqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.141.0/24
194.87.168.0/24
212.192.208.0/24
Signature Algorithm: sha256WithRSAEncryption
55:79:2c:c9:79:29:d9:0c:60:82:f7:b1:1e:38:eb:3b:fc:39:
57:fd:94:1e:65:fb:d1:ea:a5:e5:55:10:14:aa:b8:8d:6c:59:
8b:b5:49:af:5f:35:09:b6:bc:01:16:c8:38:c7:19:67:22:f6:
e0:50:a1:01:ef:89:0e:b7:34:6c:07:9d:d3:68:ce:f4:94:81:
5e:5d:25:9d:ce:61:32:fa:8c:3d:14:09:72:da:8e:4e:9a:48:
c7:5e:03:40:4a:e3:e1:c7:97:89:4e:20:c7:f2:0b:13:0e:87:
f2:ed:f9:b8:ad:2c:f3:20:69:db:e2:4c:e7:cd:29:f9:7a:2c:
0b:25:cc:8d:fa:47:ea:25:36:03:11:d3:51:0c:41:8f:a8:50:
e0:e1:22:ff:82:00:28:0b:22:4a:4b:0f:10:8d:39:10:3b:86:
39:d5:28:72:ed:d1:a4:63:ef:e8:01:8f:17:11:34:72:60:43:
89:59:a8:74:0a:e8:4f:fd:69:c5:1e:96:c1:34:89:5f:76:1f:
83:99:bf:fc:da:71:97:00:d5:f8:83:20:89:78:5e:f7:d7:f3:
3a:3c:14:b6:7a:d4:ee:f4:2c:59:81:54:52:84:a3:06:6c:16:
1b:03:38:60:0b:ed:c7:e8:cf:a6:c0:0f:3f:ea:97:f6:1c:93:
b7:87:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 16 18:13:32 2024 by rpki-client on console-ams.rpki-client.org