Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pTZ1zynnOLWnQG9CXOnfaai8KWs.roa
File: pTZ1zynnOLWnQG9CXOnfaai8KWs.roa (raw, json)
Hash identifier: Jiz8Tzb2Fqgcnuj7dGz7fHRIdh3QhdDtO0zQO77HKsg=
Subject key identifier: A5:36:75:CF:29:E7:38:B5:A7:40:6F:42:5C:E9:DF:69:A8:BC:29:6B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A82722AE136E0A680EF03DA9014EC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pTZ1zynnOLWnQG9CXOnfaai8KWs.roa
Signing time: Tue 02 Jan 2024 12:33:52 +0000
ROA not before: Tue 02 Jan 2024 12:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 194.87.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Feb 2024 16:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:82:72:2a:e1:36:e0:a6:80:ef:03:da:90:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a53675cf29e738b5a7406f425ce9df69a8bc296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:e8:85:70:f5:8e:86:87:ef:0c:26:5f:08:
1b:bf:2b:f5:68:be:30:35:aa:87:62:12:48:ee:31:
d9:4f:87:4b:0f:d1:38:d6:e5:1e:32:62:cc:a9:48:
33:4c:3d:3f:d3:eb:c1:e4:45:94:f7:07:de:90:11:
f5:6e:a8:59:07:91:2a:57:10:4a:23:ac:22:25:42:
89:4a:96:54:c8:29:89:2f:15:d8:80:34:5d:fb:8c:
d5:0f:b9:d2:6d:cf:db:d0:e2:ae:bd:a8:70:91:d4:
6f:e7:d0:6a:1d:44:d7:f0:56:9f:67:9c:f6:45:ca:
0b:71:10:56:5d:97:62:fd:c0:58:7b:bf:2f:27:91:
97:03:02:5d:f4:d0:d8:7e:f0:f8:41:42:d2:15:cd:
16:12:90:e9:a8:59:42:0b:7a:d5:19:b5:2a:43:a6:
3b:b0:f1:09:6e:f0:09:43:d3:48:88:d5:35:f3:ab:
44:e6:27:ed:00:b0:86:1f:6e:b5:c2:fc:36:80:56:
3d:4e:d8:be:b7:8b:e1:4c:15:8a:82:f2:a4:d7:80:
c6:70:7f:6f:e2:a3:06:4c:e9:ce:f1:d3:e8:96:43:
cd:b8:1b:06:49:4e:6f:06:86:b4:2d:a3:cc:01:dc:
f0:0e:a5:72:1e:33:a0:57:3b:36:0b:43:41:ca:8b:
50:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:36:75:CF:29:E7:38:B5:A7:40:6F:42:5C:E9:DF:69:A8:BC:29:6B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pTZ1zynnOLWnQG9CXOnfaai8KWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.86.0/24
Signature Algorithm: sha256WithRSAEncryption
33:db:ac:17:fb:1a:15:46:d8:60:83:1e:16:2e:5e:8e:fe:55:
11:ea:ac:78:47:7b:41:3b:3d:60:d7:15:1f:0d:cd:64:3c:40:
26:1c:c3:14:47:c9:e2:01:0e:c9:2d:f6:c4:1c:e3:09:dd:e9:
e3:ec:ef:70:72:0c:80:0c:03:d5:c2:cd:b5:1a:50:87:08:99:
63:f1:41:95:a7:94:9a:1e:ae:e9:88:1b:e4:4f:5e:dd:6b:e7:
6f:d1:12:03:0e:19:07:69:6d:54:7d:1f:2a:c8:99:e9:25:53:
87:fd:2f:de:47:30:cc:da:b7:48:bc:cc:6a:a7:66:df:cd:c2:
c9:f6:57:af:57:e7:4b:93:d6:fb:3e:4b:21:67:e5:65:4b:f6:
74:df:d8:86:dc:09:ef:60:89:5c:62:f2:2a:fa:0d:33:b9:ad:
ae:f2:27:27:cd:f6:13:0a:eb:de:4f:29:9d:f3:db:97:0a:b0:
35:c3:34:ee:47:c8:4d:ce:f8:67:aa:b2:b1:21:36:5f:0b:b4:
06:3a:f6:15:27:ae:e4:a2:67:ed:9f:84:95:1b:0d:5c:54:6b:
fc:5a:49:4f:d3:4b:f3:4e:24:01:a2:4d:81:67:ce:ff:a0:d2:
41:5f:c9:6e:92:07:6a:54:b3:94:16:5a:2d:a4:b5:82:22:ec:
01:4a:cd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 14 21:15:53 2024 by rpki-client on console-ams.rpki-client.org