Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mqkhOOzxztLxSQ3Fju-jEcFyuCs.roa
File: mqkhOOzxztLxSQ3Fju-jEcFyuCs.roa (raw, json)
Hash identifier: PBMHCqXBlE0dZFtRfNb7FBddggxN75u38G2MFnsIRqo=
Subject key identifier: 9A:A9:21:38:EC:F1:CE:D2:F1:49:0D:C5:8E:EF:A3:11:C1:72:B8:2B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875AC488EEA7BBF4096379BAD2549FFB6B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mqkhOOzxztLxSQ3Fju-jEcFyuCs.roa
Signing time: Fri 07 Apr 2023 08:10:42 +0000
ROA not before: Fri 07 Apr 2023 08:10:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200113
IP address blocks: 194.87.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:c4:88:ee:a7:bb:f4:09:63:79:ba:d2:54:9f:fb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 7 08:10:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9aa92138ecf1ced2f1490dc58eefa311c172b82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:18:91:42:e9:56:67:e3:4f:9c:43:2f:2f:b5:
54:8b:fc:cc:44:38:b3:e9:d9:0a:82:c2:b1:10:3a:
18:88:9b:00:dc:15:d4:0c:a3:f9:af:4d:6b:3a:d9:
f3:55:46:be:f1:26:62:fc:37:30:71:3c:59:7d:38:
68:2d:01:4e:24:f7:18:cb:3b:eb:24:0a:ed:32:a3:
be:b6:6e:c9:eb:a0:9b:6a:e9:8f:32:4c:bf:d6:fb:
a3:7c:de:72:51:61:83:0d:15:a6:3a:32:2e:c7:37:
ee:ae:ef:c9:a8:be:de:39:72:53:50:fb:f5:08:d5:
c7:03:5a:7e:2c:99:f9:0f:dc:e0:d3:4d:7a:d1:ed:
eb:36:ce:74:39:56:81:9b:09:22:38:1d:bf:93:29:
a9:2a:13:3f:bf:53:1a:8d:e8:3a:d4:b3:aa:2a:27:
15:00:6a:89:0c:ab:87:61:7f:5d:19:d8:da:25:15:
04:f2:3d:ec:16:64:ca:d1:65:72:fc:a3:ba:10:e5:
29:49:f9:18:5f:7e:1c:f8:3c:f5:7c:a0:a9:34:ff:
7c:aa:00:c9:46:65:02:2f:0c:0d:ed:81:4a:07:22:
52:8a:69:d5:df:e0:58:af:37:33:72:61:8f:f8:ed:
79:af:7f:e8:dc:8b:eb:e2:19:51:a6:d6:28:b8:4c:
f4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:21:38:EC:F1:CE:D2:F1:49:0D:C5:8E:EF:A3:11:C1:72:B8:2B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/mqkhOOzxztLxSQ3Fju-jEcFyuCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.251.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a1:ab:89:30:fb:a1:1d:97:9a:a1:21:dd:e4:1e:fe:b4:e5:
7a:78:62:d1:a5:9a:bd:07:98:6f:cf:62:36:92:72:62:dd:7d:
f0:1e:5e:ab:78:1c:ca:29:44:c7:48:12:f4:f0:94:02:41:6f:
ae:69:ea:7a:d2:2f:b5:1b:e2:7a:03:c1:c8:49:c7:e0:39:07:
76:85:6e:7c:8f:96:34:d3:1c:91:cd:a6:67:16:07:75:42:ba:
fb:df:7f:12:fe:9b:2e:98:91:32:22:24:cc:f3:30:1b:c3:6d:
81:72:52:30:4c:da:97:90:c3:21:fa:a8:b7:b4:65:8d:c8:03:
99:25:ff:ba:b6:70:e2:1f:52:2d:4a:dd:70:9a:91:9f:cd:2f:
9d:a4:af:5a:a7:d8:48:40:69:8f:31:33:9c:01:6b:cd:26:33:
5d:0e:e5:66:62:48:1e:ae:18:fa:c3:ea:47:9e:8d:66:03:e0:
b5:3e:74:37:97:c4:4c:45:df:66:24:a9:4d:b0:b4:2c:e2:6f:
81:03:9f:df:71:0e:c1:ef:72:96:b2:50:e9:a7:ca:6d:bf:3d:
bd:0a:97:b9:52:53:50:19:44:98:d3:43:19:bd:82:29:6a:30:
ac:5d:76:df:43:47:cd:25:38:4e:cc:19:85:9f:08:7e:78:cd:
a1:25:da:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:21 2024 by rpki-client on console-fra.rpki-client.org