Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kph2bLFvB98xCvxs08bM4wZixl0.roa
File: kph2bLFvB98xCvxs08bM4wZixl0.roa (raw, json)
Hash identifier: LOPP8i8SIfnBFXQeexTujRtYmVJ8qaRy23iHDasmjk8=
Subject key identifier: 92:98:76:6C:B1:6F:07:DF:31:0A:FC:6C:D3:C6:CC:E3:06:62:C6:5D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018949322AFE381F6C56CDE4F8181A58A161
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kph2bLFvB98xCvxs08bM4wZixl0.roa
Signing time: Wed 12 Jul 2023 08:22:51 +0000
ROA not before: Wed 12 Jul 2023 08:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 194.87.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:32:2a:fe:38:1f:6c:56:cd:e4:f8:18:1a:58:a1:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 12 08:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9298766cb16f07df310afc6cd3c6cce30662c65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:e4:27:fd:f8:8e:b6:17:25:53:65:ba:29:
07:aa:e6:dc:a9:1f:79:06:4b:ad:7c:9a:0e:4c:14:
7b:41:85:a8:e4:03:d8:1e:ed:f5:0f:72:66:69:6b:
9b:3a:5e:ed:f2:bb:ca:61:95:c2:41:5e:94:a6:33:
aa:9e:3c:e2:32:ab:5b:a9:00:e2:fb:9d:a1:d6:21:
fc:e4:8b:96:05:d8:53:d1:c0:84:d8:e4:93:a0:0b:
0b:b3:93:6a:20:f2:a4:49:39:37:7a:62:48:90:5e:
61:03:ac:c4:47:e5:8c:a5:51:42:f4:4b:af:ac:5d:
71:73:cc:28:6e:49:34:cb:68:83:b3:bc:0d:28:e9:
79:b8:08:e6:6f:e0:02:83:6b:39:7c:3f:6b:31:da:
f3:74:1e:f0:e5:23:e8:22:95:96:4c:cb:f8:6a:64:
a7:19:c6:3b:3c:b5:b7:00:41:37:62:ee:b0:5e:f4:
d4:e3:ee:d9:a5:a0:c7:13:2e:fa:ce:6a:21:f5:f8:
70:0b:5b:62:ee:7c:bd:ed:04:3e:f5:4a:43:fb:64:
62:1e:5d:1b:76:82:80:e2:0e:05:06:1c:72:cd:e8:
b1:d8:41:6f:a7:e6:a1:8b:d3:a6:e5:71:52:d6:29:
72:e7:e1:7e:8e:51:e3:4c:c6:2b:42:71:88:f3:73:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:98:76:6C:B1:6F:07:DF:31:0A:FC:6C:D3:C6:CC:E3:06:62:C6:5D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/kph2bLFvB98xCvxs08bM4wZixl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.116.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d6:d6:95:3e:e8:65:e8:11:52:c0:72:21:e3:70:23:80:86:
23:47:85:7c:85:38:9e:2f:e8:e0:27:be:4f:3f:d7:6a:b8:ad:
cc:71:fa:f2:d9:6f:21:c7:ae:60:1c:b1:18:ad:f1:4c:82:78:
ad:52:6c:76:7a:63:2f:1e:da:4f:19:df:8f:55:32:3f:b5:b5:
00:8a:ef:51:0d:b0:fd:84:5e:bd:32:37:8c:59:1f:6f:28:be:
f9:7a:93:cc:f3:c4:b8:8b:a0:62:9d:de:c9:91:78:f9:f0:b4:
04:cb:10:46:40:b5:65:48:5e:72:8c:a8:3f:07:d8:8b:b0:22:
5a:a6:1f:95:7d:03:62:8b:10:6e:31:22:ab:63:bd:75:c9:3d:
90:9a:41:77:47:97:c8:77:a2:f5:bd:bd:10:85:b0:cc:e4:e9:
d3:de:51:a5:8f:d9:3e:80:5d:f3:63:d1:92:e6:91:e6:07:3a:
bf:72:eb:41:b5:68:25:8c:42:dd:a8:02:51:54:ec:16:60:19:
ae:96:87:6a:d4:63:0a:a0:17:a0:62:47:9d:ad:67:77:0f:97:
82:93:8a:d8:6c:c7:af:9c:80:35:a7:df:49:35:21:ca:f4:59:
d0:7b:75:79:77:82:01:d2:f9:ff:0a:a9:88:88:71:34:f2:a3:
e9:d7:0b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 21 08:34:40 2023 by rpki-client on console-ams.rpki-client.org