Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tiztDMDNRvA14hTaALiasiCg1DA.roa
File: tiztDMDNRvA14hTaALiasiCg1DA.roa (raw, json)
Hash identifier: AcXlJvMPT+6O+wUZDKBgFK8McYDRUdi01hofGp43F6k=
Subject key identifier: B6:2C:ED:0C:C0:CD:46:F0:35:E2:14:DA:00:B8:9A:B2:20:A0:D4:30
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C97AE1903D08F5692298559405CA7ED14
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tiztDMDNRvA14hTaALiasiCg1DA.roa
Signing time: Sat 23 Dec 2023 17:16:58 +0000
ROA not before: Sat 23 Dec 2023 17:16:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21769
IP address blocks: 194.87.22.0/24 maxlen: 24
193.124.44.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:97:ae:19:03:d0:8f:56:92:29:85:59:40:5c:a7:ed:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 23 17:16:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b62ced0cc0cd46f035e214da00b89ab220a0d430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:23:9a:dd:05:58:9b:13:7c:3b:6d:35:52:
3a:f0:85:6b:52:fc:ce:26:26:85:4f:a0:17:4e:f2:
a2:9c:00:2c:79:b3:09:2e:be:03:09:9b:59:4f:17:
5f:fb:e8:9d:c2:06:47:38:c2:57:5b:29:9f:89:54:
72:94:74:b8:4d:97:14:41:77:3a:90:10:f6:fd:65:
19:11:38:eb:e5:6e:84:5d:63:c7:72:20:f2:2b:9a:
02:4e:5a:2f:48:69:df:9b:41:b1:20:e8:f3:e3:35:
56:9c:b2:79:d8:8d:3b:a6:e1:ec:46:14:76:5a:5b:
82:78:49:4a:3c:28:21:81:59:d1:ba:c2:97:a1:f5:
97:4e:a6:0f:26:e8:59:fc:75:0b:e3:0d:a5:f7:6e:
83:3b:2d:54:96:e8:38:65:d6:e8:75:42:fe:fb:44:
2f:cb:ca:b3:42:24:48:62:44:c5:a2:99:f8:6c:e7:
35:97:ce:df:dd:5a:25:ed:5a:20:f3:5f:cf:e6:b7:
e5:13:1c:cc:66:50:c1:24:77:2f:8e:35:cb:67:ef:
e7:d9:83:f9:55:ba:94:b1:5e:d2:87:35:0f:96:5f:
50:86:13:10:17:d3:a6:c5:53:a9:13:03:97:ae:bc:
04:d5:aa:07:e4:e6:ab:ff:e1:d1:d7:f0:96:ad:5f:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:2C:ED:0C:C0:CD:46:F0:35:E2:14:DA:00:B8:9A:B2:20:A0:D4:30
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/tiztDMDNRvA14hTaALiasiCg1DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.44.0/24
194.87.22.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:7b:c1:e3:5a:6f:12:a1:82:62:4b:1a:8d:7a:fa:dd:5b:c4:
57:1b:9f:20:d6:03:65:52:d2:aa:ac:6f:b9:9e:cb:b8:8b:2d:
37:4f:78:f6:b0:2b:e4:c7:88:a7:a6:9e:43:df:d2:c3:c9:84:
6e:3c:69:b7:f3:3e:f1:8f:64:01:6a:3a:ca:c6:31:fc:6a:3a:
56:c8:6b:e1:82:0a:d3:42:9e:12:43:2f:75:52:a2:27:91:d3:
de:da:46:dc:54:5c:67:ca:09:ad:09:f3:98:4b:a8:73:a6:21:
85:8b:0c:26:6d:7f:14:38:eb:bb:b6:db:5a:93:52:0d:9c:70:
39:f2:ba:5b:b1:96:7d:15:2c:31:59:3a:bc:71:4b:e6:ea:f9:
f5:40:01:d4:dc:76:62:45:6a:30:f4:9c:e1:fa:f7:45:eb:ef:
e9:5e:4f:67:c1:d5:d8:8d:a4:ce:17:e6:8e:ef:17:e9:0d:7d:
f3:ab:ef:fd:fa:6d:9e:65:b3:be:8f:da:df:e0:20:e6:65:ee:
9b:54:db:92:bc:4e:d9:a8:83:1e:12:2c:fe:ed:41:e8:84:52:
d7:7e:00:88:74:b1:5d:79:3d:51:15:c5:44:e5:53:76:f4:a8:
6e:97:99:30:24:83:0d:e2:d9:90:d6:59:04:14:0b:e8:a7:80:
57:d9:f2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:29:33 2023 by rpki-client on console-fra.rpki-client.org