Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pG2DFwu0wgrZMFIu9m-7qGnu4Pk.roa
File: pG2DFwu0wgrZMFIu9m-7qGnu4Pk.roa (raw, json)
Hash identifier: z+IRrvnwteIjM1tlQn1+UlesYROueqVx3ix1avetq94=
Subject key identifier: A4:6D:83:17:0B:B4:C2:0A:D9:30:52:2E:F6:6F:BB:A8:69:EE:E0:F9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C19E92F59214D08553BC644B534F46915
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pG2DFwu0wgrZMFIu9m-7qGnu4Pk.roa
Signing time: Wed 29 Nov 2023 07:09:21 +0000
ROA not before: Wed 29 Nov 2023 07:09:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142519
IP address blocks: 194.87.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:e9:2f:59:21:4d:08:55:3b:c6:44:b5:34:f4:69:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 29 07:09:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a46d83170bb4c20ad930522ef66fbba869eee0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c4:41:07:1a:8c:dd:ca:5a:ee:44:22:e0:3b:
07:89:f2:eb:40:a0:82:97:24:13:79:ac:71:ef:41:
de:06:d4:ae:e7:73:f7:4c:7d:58:7a:b2:80:52:12:
2c:d8:ae:51:9a:8e:39:37:e4:a6:16:c1:1d:76:1d:
cc:42:8f:cb:a1:6e:ad:b3:50:52:15:10:15:aa:cb:
86:4e:06:68:59:ed:dd:f2:e2:fa:a9:f4:ee:de:7b:
d3:d9:e7:91:78:d9:6b:7a:ae:41:8a:e1:96:6d:ae:
63:35:ee:33:00:bf:2d:b9:d7:73:5d:30:80:76:1d:
d4:de:bd:ac:83:20:68:e5:a1:0a:e5:6e:92:65:e1:
c5:2e:20:31:ca:13:7f:6e:c8:0c:40:b8:c7:f1:71:
70:91:74:da:10:df:4e:29:9f:d4:57:47:1b:46:bc:
bf:75:3e:6b:4e:f9:76:c7:f9:77:83:f3:29:65:be:
e5:64:27:c6:fc:75:a5:0f:53:f9:5f:10:da:63:96:
73:b0:f9:98:f1:ad:86:77:33:82:ce:76:e2:4a:77:
63:38:08:28:36:fc:12:82:fe:c8:84:22:41:c7:8a:
ea:98:18:8b:d0:76:1a:32:da:46:d7:c3:98:61:5f:
b5:5c:2b:8d:66:9d:e3:13:65:2b:58:0c:89:56:b9:
04:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6D:83:17:0B:B4:C2:0A:D9:30:52:2E:F6:6F:BB:A8:69:EE:E0:F9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pG2DFwu0wgrZMFIu9m-7qGnu4Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.226.0/24
Signature Algorithm: sha256WithRSAEncryption
31:7d:74:9f:68:bc:42:30:7f:f3:0e:5e:f9:38:f5:16:c3:37:
22:0e:eb:6b:9b:ee:57:fc:d9:d3:cd:2d:d9:41:5c:a1:c9:0c:
2c:9e:cc:15:a5:22:22:54:55:2d:9b:1b:a4:4a:47:fa:c1:1e:
db:3f:8b:dc:d5:bd:c5:eb:4a:d2:b9:91:23:13:55:21:86:1c:
1d:3d:27:8c:7e:25:be:44:bb:0e:23:09:aa:30:a8:36:b9:f4:
a7:92:67:72:67:bb:94:3d:d2:d4:30:e9:7e:6d:bd:90:da:03:
1c:bd:73:78:a3:40:da:10:36:a0:47:9c:79:68:2c:9b:78:97:
12:19:3d:4e:ca:95:0e:71:b8:c2:d6:0e:6d:10:75:12:4f:38:
f7:5c:1c:e9:09:ed:28:0e:ef:95:df:fb:d0:74:9f:2a:11:18:
dd:48:da:48:29:07:a1:32:cb:7f:68:a8:8f:47:0d:2b:01:7e:
9e:7f:40:65:3f:f1:3a:85:a9:67:49:bf:50:f7:47:db:4b:37:
3e:27:92:f8:04:5d:af:7a:2c:ca:b8:49:d3:2e:33:1f:53:c1:
6f:b5:95:7b:27:eb:45:33:80:82:72:04:b6:3c:b3:d0:08:d1:
2b:77:d9:cd:c4:4b:d6:b3:be:32:f1:5d:d1:28:47:12:6f:3a:
95:3d:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 11 04:50:12 2023 by rpki-client on console-fra.rpki-client.org