Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jJC1E9vfA4Lz87bLPYUKppJ0q58.roa
File: jJC1E9vfA4Lz87bLPYUKppJ0q58.roa (raw, json)
Hash identifier: 9T7Etl9xkKTZTkBWR4F7pyDQdgZjDsj4HdpBerv0gKo=
Subject key identifier: 8C:90:B5:13:DB:DF:03:82:F3:F3:B6:CB:3D:85:0A:A6:92:74:AB:9F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E516656E3D5009C82222F8101D444BC6A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jJC1E9vfA4Lz87bLPYUKppJ0q58.roa
Signing time: Mon 18 Mar 2024 11:50:45 +0000
ROA not before: Mon 18 Mar 2024 11:50:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Apr 2024 12:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:66:56:e3:d5:00:9c:82:22:2f:81:01:d4:44:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 18 11:50:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c90b513dbdf0382f3f3b6cb3d850aa69274ab9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:41:48:7c:e5:af:ca:9c:db:f0:97:70:d6:
c8:b5:ed:97:c8:66:9a:d0:d7:0f:82:da:30:f7:b1:
de:55:f1:7d:5d:0f:1d:e5:a6:7d:46:62:bf:4f:2a:
72:3b:8a:68:f2:2a:72:14:f4:1b:ef:17:e0:3b:6f:
92:76:dd:df:84:66:03:6c:d6:0e:9d:54:26:c0:22:
c1:4f:de:b4:87:ce:43:90:4f:22:a9:ca:be:7b:ce:
82:89:ae:e8:3e:cf:8c:82:4a:87:99:bb:f6:f7:aa:
26:5f:09:60:82:8d:40:92:87:1a:74:e1:8c:f5:33:
1d:74:fe:45:b9:e1:6b:19:f1:df:3a:18:37:12:36:
75:4f:73:06:e9:2d:4f:dd:9c:0c:51:a9:8a:73:6d:
c8:8a:d3:cc:e3:97:aa:d9:50:a3:ab:c6:bc:66:55:
39:c5:54:1a:db:31:cc:bf:08:f6:38:0d:57:40:fc:
c3:14:1d:8a:7b:5c:b5:ab:ca:28:3f:e6:7c:89:e5:
64:9b:04:a9:27:1f:96:40:1d:02:3c:1c:1c:c3:10:
8c:3e:a5:f1:46:62:ac:95:c2:9b:10:79:8c:87:58:
f6:5c:28:a3:1a:15:b5:6d:1c:e6:9c:7e:30:0c:4f:
76:37:18:ad:11:ec:45:2d:2a:94:0e:7b:73:34:a2:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:90:B5:13:DB:DF:03:82:F3:F3:B6:CB:3D:85:0A:A6:92:74:AB:9F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jJC1E9vfA4Lz87bLPYUKppJ0q58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:9f:66:31:76:37:7f:4f:34:e8:6b:db:38:13:f1:a4:bc:ef:
93:fd:d0:bf:a9:37:c8:b4:37:89:34:41:c9:0d:79:41:2c:b5:
77:e8:29:a5:f0:81:a6:aa:21:a5:0e:ea:e3:f0:32:67:20:80:
57:13:ea:7a:16:b7:6b:7e:97:12:b0:f2:c2:e1:2d:c9:e9:98:
81:8f:b5:2e:31:29:2d:0e:f9:a1:57:e1:dd:cb:25:f5:51:11:
13:32:40:ee:fe:44:c8:3b:45:16:6a:b3:b2:89:7d:e7:54:5d:
40:61:a1:4b:67:3b:47:73:c2:3d:a7:a8:60:55:5a:91:f8:f8:
af:d7:e1:a3:7d:b3:6c:d5:38:96:f3:ac:f9:0e:ac:e7:c7:89:
e5:59:28:ba:3b:9c:43:d7:e5:9d:d4:24:db:a7:b2:f5:cb:8f:
a1:78:d7:a8:91:b8:16:77:3b:7a:02:96:d0:73:4f:15:ad:3a:
39:dd:f5:06:03:9f:a6:9d:b5:be:d4:d5:74:28:6b:fd:a4:f3:
2d:74:84:09:3e:18:2b:34:de:a1:db:5a:de:43:05:7b:86:bb:
75:99:fb:d0:33:a0:1e:f4:21:43:bd:db:79:a3:e5:47:8d:1b:
f3:9c:87:0b:44:3d:d1:cb:9d:b4:12:96:88:db:24:4f:0f:16:
e2:c2:04:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:24 2024 by rpki-client on console-fra.rpki-client.org