Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/miPNneT1SToEiUg1lhkQ92kfGN4.roa
File: miPNneT1SToEiUg1lhkQ92kfGN4.roa (raw, json)
Hash identifier: iR38wQQtrKJxoZ2nhySM4ZQLuhXOgTSsVIeNi1ZGxYo=
Subject key identifier: 9A:23:CD:9D:E4:F5:49:3A:04:89:48:35:96:19:10:F7:69:1F:18:DE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188E68F1675E5AC143736A3E25D8C9138C3
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/miPNneT1SToEiUg1lhkQ92kfGN4.roa
Signing time: Fri 23 Jun 2023 04:41:57 +0000
ROA not before: Fri 23 Jun 2023 04:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199614
IP address blocks: 194.87.171.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 19:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e6:8f:16:75:e5:ac:14:37:36:a3:e2:5d:8c:91:38:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 23 04:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a23cd9de4f5493a04894835961910f7691f18de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d3:d4:47:4d:52:bc:1b:e9:19:0f:2a:47:a0:
0f:87:50:fb:74:71:d4:dd:b7:31:77:ef:46:ed:e7:
b5:7d:c4:92:b2:84:d4:aa:6e:d5:7a:27:57:86:dd:
ca:06:06:aa:6b:44:cf:ce:fc:19:d3:94:99:53:7d:
da:0c:06:be:d5:4e:20:50:4f:dc:b0:89:0e:56:b2:
63:d5:cb:cf:0a:4e:99:8d:76:43:39:70:60:ce:10:
f1:66:e9:ac:f2:58:b6:3d:c9:1d:ab:e9:e9:a4:e9:
d8:1a:ae:66:7a:79:6a:76:49:63:c0:be:df:57:4e:
13:67:1c:e4:95:d7:8f:19:31:f5:7b:4b:0a:57:8e:
24:17:cf:f5:54:51:d2:b7:dd:29:c7:5d:28:78:5f:
31:2a:98:c2:b0:a2:35:6d:da:cf:60:d6:e0:ba:59:
70:31:99:c4:ea:05:16:38:e8:40:c2:da:ab:e0:d8:
8a:d4:0d:5f:a6:43:d3:11:a1:63:cd:f5:90:ef:33:
50:bf:c1:5f:af:02:17:26:0c:c3:19:c8:d6:e0:66:
3b:76:6d:da:fc:5e:20:0c:78:ab:37:c0:f1:cb:dd:
fb:86:ed:5d:37:83:5f:6b:66:32:78:77:e0:a8:a7:
07:cb:01:da:3b:95:17:ce:d2:a4:bb:9a:f5:85:18:
1d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:23:CD:9D:E4:F5:49:3A:04:89:48:35:96:19:10:F7:69:1F:18:DE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/miPNneT1SToEiUg1lhkQ92kfGN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.61.0/24
194.87.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a7:3e:d7:fb:15:39:7a:f1:a0:d2:e9:1d:50:30:f5:b7:13:
d0:0b:60:c6:95:3f:f2:d0:a4:14:6e:ef:d0:e2:72:bd:70:4b:
22:2d:45:93:c9:1d:29:1f:0d:aa:76:d3:16:e4:16:cf:59:50:
80:8f:96:7b:91:54:0b:a5:47:e6:2c:a8:c7:fe:48:15:e8:22:
f1:27:cc:e8:c2:ee:94:db:90:d9:b8:87:9c:f6:04:ac:6b:11:
38:e9:56:17:8d:1d:a2:54:cc:60:fe:48:e7:c3:26:58:52:9f:
8c:56:13:68:88:4f:f0:f6:00:10:44:85:af:1b:c1:45:8a:5b:
6b:30:b6:bc:06:18:18:6e:30:5f:9b:a1:57:5d:0a:1f:c4:c6:
f3:86:6f:6b:84:14:a4:e7:3b:6b:a7:d7:3b:22:d0:cf:41:85:
87:f1:91:61:46:67:be:c2:0f:d7:90:77:8a:03:f1:a0:99:3d:
48:ac:84:05:d8:fa:e4:74:d6:39:a9:07:8d:97:f0:74:0b:4a:
95:2b:bd:52:38:d2:74:2f:9c:95:70:85:b2:5f:41:60:78:3e:
89:23:56:31:b7:d8:6f:38:35:0a:42:e4:6d:9a:d3:a4:13:9d:
d4:0f:9c:2a:b6:39:d9:b2:b8:35:77:81:76:54:38:73:a1:96:
b3:45:81:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:45 2024 by rpki-client on console-ams.rpki-client.org