Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j0xfk0hzWf06rUn-EEMYzUbUkmk.roa
File: j0xfk0hzWf06rUn-EEMYzUbUkmk.roa (raw, json)
Hash identifier: 0Ys64UgKr+WJhTbWCiT3SkNSX1rdcdxKsXGHKiv2JEs=
Subject key identifier: 8F:4C:5F:93:48:73:59:FD:3A:AD:49:FE:10:43:18:CD:46:D4:92:69
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CD9753CFE341A2D60FC4BCB786A6D4B1D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j0xfk0hzWf06rUn-EEMYzUbUkmk.roa
Signing time: Fri 05 Jan 2024 11:49:48 +0000
ROA not before: Fri 05 Jan 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55154
IP address blocks: 194.87.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 11:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:75:3c:fe:34:1a:2d:60:fc:4b:cb:78:6a:6d:4b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 5 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f4c5f93487359fd3aad49fe104318cd46d49269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:ce:35:ea:7a:66:79:b9:97:04:84:61:23:
c6:f7:06:bf:d6:7a:48:1b:09:9c:85:a9:86:c8:b8:
4b:ca:92:66:4f:c5:af:c3:04:fb:41:0c:4e:0a:23:
76:37:14:c3:7d:b6:6d:61:b3:55:63:18:c3:7a:33:
29:e1:35:ea:f9:e8:ec:be:28:9b:40:f1:f7:8d:22:
b8:4f:e6:fc:9e:89:9b:c0:67:eb:c9:be:8f:c8:54:
73:c3:15:3d:80:6b:b2:ee:8b:66:2a:f8:1e:cc:17:
d2:93:2b:2b:4a:89:33:dd:84:d2:26:69:86:db:2e:
3e:99:95:e4:68:a3:dd:c0:e0:9a:8c:93:80:93:21:
3e:31:df:6e:7b:98:34:aa:95:82:a9:21:c3:6e:60:
86:e1:26:7b:5d:ef:ff:be:eb:0a:9a:38:ea:7d:70:
0c:ae:07:e0:9b:a5:42:f1:dc:c1:7a:a3:7b:de:a8:
15:13:61:f0:c2:cb:84:ff:16:a8:b3:8b:89:50:e4:
0f:53:be:15:3c:e6:9c:95:51:69:11:e2:c9:12:25:
b4:63:d7:27:87:c0:60:be:36:f3:dd:b2:f9:f3:ac:
2c:19:32:e7:b8:eb:7e:a7:07:cb:04:c6:80:b8:9d:
9e:ca:28:e2:ba:00:c1:f6:7c:80:87:6b:93:f0:32:
6e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:5F:93:48:73:59:FD:3A:AD:49:FE:10:43:18:CD:46:D4:92:69
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j0xfk0hzWf06rUn-EEMYzUbUkmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.73.0/24
Signature Algorithm: sha256WithRSAEncryption
37:95:87:20:26:e8:8d:96:80:40:d4:ab:96:31:46:a6:e4:c5:
0e:14:0f:d0:b5:2f:70:aa:4f:eb:5d:da:49:a1:2b:a3:b6:1f:
51:9d:69:1a:b5:ae:af:d7:aa:86:34:ac:20:b5:6a:70:7d:71:
7d:80:fa:15:da:9d:25:24:86:ab:f9:2f:89:7f:30:46:5e:53:
1f:17:1a:68:a3:6a:76:3c:be:2e:8c:e9:56:8b:c8:04:0f:14:
a2:b3:ec:55:29:0e:79:75:58:1e:8a:af:f0:67:97:24:bd:eb:
8e:80:f1:64:3c:11:e3:38:f4:27:e3:2f:99:a8:73:2a:07:da:
fa:98:89:04:db:02:3e:57:43:ab:2e:4d:17:57:26:e2:90:99:
02:1a:59:d8:fb:fd:9a:53:ab:10:1f:62:96:f8:45:ce:13:68:
ac:42:bb:ac:46:e4:ce:9c:55:63:1c:e5:80:22:fe:1a:4d:51:
93:71:8a:8d:43:e2:8d:26:95:20:fc:80:fe:44:15:f6:a6:a5:
5a:84:3c:2c:60:d3:17:82:da:75:76:d3:a1:ba:4f:d0:87:24:
9c:bc:da:f3:ee:e6:4a:7c:19:9e:bf:d5:d2:d5:e9:bc:4d:7d:
18:31:93:0c:42:0d:5d:f6:c9:31:d2:aa:a2:5e:1c:16:66:8a:
fd:2a:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:24 2024 by rpki-client on console-fra.rpki-client.org