Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rH5yOi8-fRd1Gu9VQCpcKeaBIF0.roa
File: rH5yOi8-fRd1Gu9VQCpcKeaBIF0.roa (raw, json)
Hash identifier: 8XI5b1rZnkdoz4OruseGJfLX9l8fRyVpK1W7t/YeMKI=
Subject key identifier: AC:7E:72:3A:2F:3E:7D:17:75:1A:EF:55:40:2A:5C:29:E6:81:20:5D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A734B131349236AC3432468FC318EBCBB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rH5yOi8-fRd1Gu9VQCpcKeaBIF0.roa
Signing time: Fri 08 Sep 2023 05:36:54 +0000
ROA not before: Fri 08 Sep 2023 05:36:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198037
IP address blocks: 194.87.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:73:4b:13:13:49:23:6a:c3:43:24:68:fc:31:8e:bc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 8 05:36:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac7e723a2f3e7d17751aef55402a5c29e681205d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c0:09:4b:5f:25:ed:46:cf:4a:91:11:94:c6:
0e:81:46:70:73:33:be:16:e3:18:06:c8:a5:dc:fc:
81:ea:e5:0c:c1:2c:f7:34:57:60:a1:4b:8e:53:74:
7e:fa:4e:65:1f:87:f8:1d:d2:7a:40:be:b3:a2:a8:
05:e0:dc:2f:13:a6:8c:86:3d:af:6c:fe:94:6c:d1:
5d:2d:c3:e5:b5:a6:47:38:62:71:bc:1f:14:d8:26:
10:17:8e:63:5d:cf:a0:61:ce:4d:bc:29:b5:68:20:
76:e3:30:e0:2f:29:8c:41:24:f6:27:c2:0e:ae:d8:
b0:57:6c:bc:ab:ac:c5:71:8c:b5:2d:7f:02:06:10:
c0:87:0c:28:0c:f9:54:83:17:bc:13:2f:4d:10:63:
37:0f:5f:13:fc:13:00:03:84:5b:7a:1d:0c:46:fb:
d9:75:f0:59:74:1d:39:f7:db:5b:ed:1e:f5:4e:9a:
c1:3c:f9:94:8b:1f:ec:2e:b5:b8:9b:bf:45:e0:42:
2a:aa:4d:f2:47:ff:dc:08:84:6b:96:a5:e0:c3:18:
97:5a:75:63:8b:de:51:8e:b0:90:50:13:86:d1:a9:
a5:74:7e:bf:33:30:44:0e:13:75:be:dc:1f:12:c2:
7e:62:70:f1:10:e7:b0:bb:1c:c9:95:46:00:b6:33:
34:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:72:3A:2F:3E:7D:17:75:1A:EF:55:40:2A:5C:29:E6:81:20:5D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/rH5yOi8-fRd1Gu9VQCpcKeaBIF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.25.0/24
Signature Algorithm: sha256WithRSAEncryption
86:05:23:28:e7:db:7e:18:92:c1:c2:e8:fb:c3:04:e0:cf:fe:
5b:0f:fe:e4:82:4e:dd:ae:24:e8:da:8f:60:90:0d:a6:2e:3e:
89:ce:7f:66:74:5c:64:9c:a7:f6:5e:1d:15:b0:c8:45:84:cb:
61:09:35:44:bf:9d:0f:3f:56:d5:22:13:3d:75:2f:4c:4e:21:
4e:8e:7e:d2:8c:df:6f:4f:c2:e6:69:26:76:34:d5:d6:62:c6:
ab:c6:6f:47:18:82:0c:b4:88:19:6f:eb:c8:3f:fc:c9:17:f3:
c3:86:53:42:8f:63:47:b4:12:8d:85:a0:c3:5e:6c:cb:e2:41:
71:de:4f:bb:9c:e6:8b:bf:31:3c:86:fc:41:b0:36:3e:75:84:
2b:f1:42:f3:a6:47:13:3c:aa:f1:50:b9:12:91:22:9b:80:36:
88:a7:33:51:01:40:ce:78:fe:53:f2:83:11:b2:54:4c:c2:c6:
94:32:21:c6:3e:20:0c:05:25:82:ee:5a:b6:97:26:52:6a:2f:
f2:c0:c5:c8:a1:9a:7b:75:2b:32:fc:e9:aa:2c:67:af:b7:40:
26:d3:7a:99:6b:8d:a5:0b:a1:09:a2:19:92:56:4d:24:bb:81:
94:e6:04:15:d8:3b:2b:64:d2:23:96:69:eb:58:b8:3c:dc:3f:
79:19:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:47 2024 by rpki-client on console-ams.rpki-client.org