Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lWdBxIscGC_ABbti9XLZVzvgWOo.roa
File: lWdBxIscGC_ABbti9XLZVzvgWOo.roa (raw, json)
Hash identifier: IKUzE3MeFwckR85DgP8ytOB1jnk1OWhGOZd3qSEVh1M=
Subject key identifier: 95:67:41:C4:8B:1C:18:2F:C0:05:BB:62:F5:72:D9:57:3B:E0:58:EA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018586C96015EB725D8E6BB80DBF2F8AED1C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lWdBxIscGC_ABbti9XLZVzvgWOo.roa
Signing time: Fri 06 Jan 2023 11:13:42 +0000
ROA not before: Fri 06 Jan 2023 11:13:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 194.87.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:c9:60:15:eb:72:5d:8e:6b:b8:0d:bf:2f:8a:ed:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 6 11:13:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=956741c48b1c182fc005bb62f572d9573be058ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:74:17:d3:2f:33:f1:3e:01:2c:5c:05:db:
38:b2:3e:db:c1:c3:f2:f8:04:08:98:90:6a:02:14:
e8:92:1d:0c:6d:42:3a:30:ef:5e:9d:38:e1:1d:5c:
99:b4:dd:a2:02:29:48:0b:a8:ed:37:4d:dc:27:42:
6d:04:63:c5:21:c8:96:2f:35:eb:bd:ed:2e:a2:c8:
71:ea:b3:05:00:9c:06:dd:3c:a5:c2:2f:fb:6b:83:
15:30:ba:ea:f0:7a:a9:b5:62:7c:4e:27:a7:c9:df:
da:d9:07:ee:a9:5b:e3:79:08:d7:1f:c1:ef:58:91:
b3:fa:29:ac:dd:9d:98:0b:f7:2a:15:e3:93:e2:74:
9b:11:f6:fc:cb:dd:6f:b0:16:86:ba:b0:c3:6c:c7:
8e:c8:43:9f:f4:30:26:fe:86:df:53:1b:e8:69:e1:
f4:3c:14:55:e6:ea:a8:72:0f:cc:10:63:ff:85:18:
67:f1:5c:4d:df:d3:20:04:54:c5:41:22:38:af:9b:
16:04:2c:91:f6:32:c5:5d:65:16:53:2a:76:38:03:
a3:8c:9b:4b:57:70:d6:5b:71:78:83:cd:66:e4:03:
50:3a:b6:0b:c5:67:c7:b6:de:86:ff:96:82:2c:39:
fe:02:bd:18:60:f5:8d:a8:eb:2a:05:dc:fd:b5:b4:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:41:C4:8B:1C:18:2F:C0:05:BB:62:F5:72:D9:57:3B:E0:58:EA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/lWdBxIscGC_ABbti9XLZVzvgWOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.25.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e8:7b:11:3a:83:39:be:28:b6:ef:22:e3:52:68:04:a8:a0:
76:f3:7a:5c:fd:9c:9c:2f:79:02:79:f3:2b:b4:5c:34:2a:36:
22:d3:61:9b:10:c5:46:cf:41:e2:04:c9:ec:7f:dd:93:50:67:
84:2e:a3:96:44:46:df:79:5f:d6:3b:32:cc:cb:08:31:6e:9c:
e9:7f:f5:95:30:9a:93:4f:e3:bb:2d:fe:eb:4b:75:6b:68:1f:
16:c0:c2:9c:a4:77:a9:53:88:38:22:c2:83:8e:14:35:3d:37:
db:a5:22:73:30:82:c5:11:4f:a0:36:50:4b:08:25:65:1e:40:
4e:5a:25:e9:c5:10:8e:aa:c4:64:0e:8f:05:a9:c6:a6:4d:e8:
64:cd:72:15:d9:99:43:b7:61:0b:6e:01:84:8f:96:12:ce:aa:
12:f9:70:cd:3d:7d:f9:57:d6:76:73:49:76:33:2a:24:1e:39:
56:8e:5b:2a:69:e9:41:c3:50:cc:c7:e7:80:f1:a2:c1:aa:2e:
c7:12:52:d0:eb:b6:4d:36:03:06:83:3a:0a:8e:c3:21:a2:84:
21:eb:e5:cd:44:5c:5f:65:36:50:2e:51:c0:3b:f3:26:fa:b5:
62:5c:ad:05:23:57:9f:68:78:ae:ca:bb:53:b1:2a:83:b6:e8:
7e:ad:ce:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWGyWAV63Jdjmu4Db8viu0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMTA2MTExMzQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTY3NDFjNDhiMWMxODJmYzAwNWJiNjJmNTcyZDk1NzNiZTA1OGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXJ0F9MvM/E+ASxcBds4sj7bwcPy
+AQImJBqAhTokh0MbUI6MO9enTjhHVyZtN2iAilIC6jtN03cJ0JtBGPFIciWLzXr
ve0uoshx6rMFAJwG3Tylwi/7a4MVMLrq8HqptWJ8Tienyd/a2QfuqVvjeQjXH8Hv
WJGz+ims3Z2YC/cqFeOT4nSbEfb8y91vsBaGurDDbMeOyEOf9DAm/obfUxvoaeH0
PBRV5uqocg/MEGP/hRhn8VxN39MgBFTFQSI4r5sWBCyR9jLFXWUWUyp2OAOjjJtL
V3DWW3F4g81m5ANQOrYLxWfHtt6G/5aCLDn+Ar0YYPWNqOsqBdz9tbRM8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJVnQcSLHBgvwAW7YvVy2Vc74FjqMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvbFdkQnhJc2NHQ19BQmJ0aTlYTFpWenZnV09vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlcZMA0G
CSqGSIb3DQEBCwUAA4IBAQBl6HsROoM5vii27yLjUmgEqKB283pc/ZycL3kCefMr
tFw0KjYi02GbEMVGz0HiBMnsf92TUGeELqOWREbfeV/WOzLMywgxbpzpf/WVMJqT
T+O7Lf7rS3VraB8WwMKcpHepU4g4IsKDjhQ1PTfbpSJzMILFEU+gNlBLCCVlHkBO
WiXpxRCOqsRkDo8FqcamTehkzXIV2ZlDt2ELbgGEj5YSzqoS+XDNPX35V9Z2c0l2
MyokHjlWjlsqaelBw1DMx+eA8aLBqi7HElLQ67ZNNgMGgzoKjsMhooQh6+XNRFxf
ZTZQLlHAO/Mm+rViXK0FI1efaHiuyrtTsSqDtuh+rc7i
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org