Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jkkwuNL71upJYCK3wUOCxaj7gOY.roa
File: jkkwuNL71upJYCK3wUOCxaj7gOY.roa (raw, json)
Hash identifier: xYCO6Zk0QVP4ezFRspHEsqRGbkw/cqjgA3GNK9Bb7Dw=
Subject key identifier: 8E:49:30:B8:D2:FB:D6:EA:49:60:22:B7:C1:43:82:C5:A8:FB:80:E6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189AAAC53D74E2937D900829D9C39D5E0BA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jkkwuNL71upJYCK3wUOCxaj7gOY.roa
Signing time: Mon 31 Jul 2023 06:39:27 +0000
ROA not before: Mon 31 Jul 2023 06:39:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44620
IP address blocks: 194.87.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Aug 2023 09:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:ac:53:d7:4e:29:37:d9:00:82:9d:9c:39:d5:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 31 06:39:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e4930b8d2fbd6ea496022b7c14382c5a8fb80e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:75:0e:61:a7:6b:a0:1a:82:f0:3f:df:06:aa:
10:8a:a1:bd:82:19:8e:fd:86:34:b6:e5:25:6a:95:
f2:e1:bb:44:da:9b:55:e4:0f:9a:74:38:da:dd:30:
ab:79:04:06:fe:fe:af:b5:ec:0f:f2:13:c8:a1:99:
db:97:c6:de:42:da:37:1e:2f:7b:9f:10:c7:ee:12:
f8:da:c7:c2:44:ed:3c:69:b4:2e:54:58:00:a9:0d:
6b:73:f9:27:7a:27:56:00:cc:0c:e7:e4:27:4c:75:
a7:19:08:a7:66:6d:b1:7c:91:ad:19:53:57:cd:36:
df:85:20:59:c7:6b:19:2c:b6:8d:2f:75:e9:15:e7:
17:43:ea:1c:cb:85:53:2f:19:1f:79:c0:b1:a0:91:
cb:70:8d:41:a4:7a:7c:87:04:83:ed:e8:ea:71:c6:
5f:89:9a:29:0b:da:51:7d:b4:f4:e3:b1:ef:a7:ff:
5d:b4:84:ea:cd:8c:ae:ec:d4:71:f4:ee:2c:28:a2:
cc:bb:f9:94:e8:13:05:b9:76:27:4c:dc:7e:b5:e4:
8d:fe:95:09:b7:e3:cc:90:22:c8:1a:71:af:8a:ed:
34:ae:18:34:73:12:a0:22:6c:a2:97:c5:56:66:45:
f6:cf:f9:9b:ee:d8:f1:b9:9c:e1:5f:50:6a:2e:a2:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:30:B8:D2:FB:D6:EA:49:60:22:B7:C1:43:82:C5:A8:FB:80:E6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jkkwuNL71upJYCK3wUOCxaj7gOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.246.0/24
Signature Algorithm: sha256WithRSAEncryption
60:4b:b6:e8:d1:a7:c9:27:b0:56:43:2a:03:6f:c3:c5:e5:6b:
01:22:e3:04:11:e4:54:74:4b:c7:59:44:9a:64:3a:af:b4:f6:
31:71:3a:dd:69:fe:17:9e:82:16:7b:5d:af:ee:8f:a2:0a:01:
85:65:b2:63:d7:b4:67:a9:d1:fb:6a:cf:7f:c8:8b:0c:5c:78:
a6:e4:6b:e5:db:fb:7e:77:68:74:49:16:d0:1e:97:69:38:bc:
f2:8e:9a:98:2b:82:a5:b5:b5:ea:bf:e6:8e:15:f2:e1:b2:60:
35:02:91:42:7c:31:66:3a:fd:0e:d1:84:4e:f8:0e:f8:06:ba:
78:82:2d:a8:5b:7b:ad:b0:a9:bb:08:12:eb:62:96:cf:20:f1:
60:dd:ef:da:be:7b:b1:e0:59:c0:ad:ff:7a:6f:85:19:f0:e0:
66:42:21:e8:f9:76:49:99:7c:3c:63:0e:d2:7b:53:8b:e3:2b:
cd:fc:38:96:9b:e1:8d:f9:81:7f:9a:31:26:0f:d3:e4:66:21:
94:db:d8:80:78:2f:cc:ac:e6:5b:fa:b9:f8:91:10:20:13:f1:
b7:74:ca:d4:74:c1:fb:9b:cc:31:9c:6d:53:58:c7:a3:aa:d9:
00:79:01:7c:3a:40:05:af:60:f1:b1:54:11:69:99:39:f2:27:
87:f4:14:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:24 2024 by rpki-client on console-fra.rpki-client.org