Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jZJqagv_z36KNWLjYQN5dDwGmMw.roa
File: jZJqagv_z36KNWLjYQN5dDwGmMw.roa (raw, json)
Hash identifier: GRzzESi7YE9m7jGkQLMmD61YfXV4p5NicB9sEaujE1U=
Subject key identifier: 8D:92:6A:6A:0B:FF:CF:7E:8A:35:62:E3:61:03:79:74:3C:06:98:CC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BC8E5608FF2268CCA4C45718B8A7FCA12
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jZJqagv_z36KNWLjYQN5dDwGmMw.roa
Signing time: Mon 13 Nov 2023 13:35:57 +0000
ROA not before: Mon 13 Nov 2023 13:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203172
IP address blocks: 194.87.20.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 13 Nov 2023 18:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:e5:60:8f:f2:26:8c:ca:4c:45:71:8b:8a:7f:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 13 13:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d926a6a0bffcf7e8a3562e3610379743c0698cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:84:6d:45:05:84:01:f9:41:b8:03:6f:ce:
7c:39:3c:60:be:8b:99:65:50:71:dd:e4:3a:1f:d3:
bb:bc:35:3c:a3:b8:d7:48:21:0c:33:ad:c8:38:68:
d0:66:67:51:cd:87:40:fc:f2:59:9f:0c:a8:f7:08:
d1:7e:35:df:62:d6:b6:b6:b2:a6:2a:5c:0e:97:5c:
8c:b4:28:a8:53:46:62:09:58:78:4a:98:dd:66:a0:
cb:04:ff:f0:63:bc:ba:2f:a4:a3:68:bf:71:29:c9:
04:b8:db:d7:02:4f:3a:d4:cc:4e:72:c2:d0:66:a6:
8d:1e:7b:03:c0:fa:9e:9b:81:9e:fa:5c:55:e1:32:
c0:e7:59:7e:28:99:8d:3b:d3:da:4c:53:3e:e9:f6:
7d:5c:1a:34:f7:d9:8f:63:09:2c:cb:6a:ea:01:c5:
b2:a6:07:69:73:c2:2d:94:7d:0f:30:41:65:cb:17:
8f:a5:be:89:6f:b0:cb:f1:5a:8c:4e:e8:6c:b8:17:
a4:18:f2:05:41:79:ea:ec:e8:84:9a:78:cd:db:97:
37:af:f6:1d:62:29:74:76:4f:d7:94:be:5e:ff:24:
c3:45:e8:b7:23:1b:60:c2:13:b8:96:b6:71:e7:0f:
4e:ff:44:6d:66:c9:06:9b:50:a4:e7:9e:7b:31:02:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:92:6A:6A:0B:FF:CF:7E:8A:35:62:E3:61:03:79:74:3C:06:98:CC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jZJqagv_z36KNWLjYQN5dDwGmMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.20.0/23
Signature Algorithm: sha256WithRSAEncryption
55:87:bc:36:c2:bc:84:93:c1:cc:80:ff:16:b6:4f:34:43:50:
35:25:61:b0:3e:09:28:43:41:c5:92:ab:f6:ee:24:d1:b7:83:
dd:c1:4c:ab:ec:0d:4f:c3:0c:c7:c2:47:e3:33:f3:17:84:e2:
91:65:58:12:1c:ac:03:de:3c:21:d8:61:03:f1:6f:cb:fc:d0:
c5:a8:a8:f3:35:c4:38:d1:f4:fe:4b:98:03:a6:2e:39:3a:67:
36:d6:65:fc:5a:a0:98:2a:1b:75:c1:88:4f:05:3a:5d:2e:9e:
b7:3f:bb:7d:ea:c4:0c:4f:72:05:8b:ee:b9:84:4b:b6:89:b9:
c1:18:f7:28:60:2b:42:09:6c:21:94:52:4e:56:33:79:79:cf:
cf:4f:b3:2d:7a:92:3c:bf:d5:9a:64:f3:72:50:57:a5:aa:a2:
85:57:ad:5b:3d:8b:ae:10:ec:1e:9c:62:9e:00:e8:f9:33:f0:
5f:11:52:fb:7b:08:68:8b:d2:f4:ef:7e:ac:07:c5:44:83:97:
c6:8e:b4:7d:ed:eb:4f:60:fd:55:dd:cb:02:d2:f9:7a:6d:24:
ff:d7:20:a0:39:96:78:1c:52:96:c4:8a:bd:39:1e:a2:52:42:
76:60:66:67:25:e0:38:0f:96:af:13:eb:6b:d1:fd:f2:61:5c:
34:dd:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:24 2024 by rpki-client on console-fra.rpki-client.org