Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uUbaFfkdLpC4B97Vnx_vox5mzPg.roa
File: uUbaFfkdLpC4B97Vnx_vox5mzPg.roa (raw, json)
Hash identifier: JPikJwyXEAIYIK2RIkKlvYbw4gZmdJXzKyZbqB6pHFc=
Subject key identifier: B9:46:DA:15:F9:1D:2E:90:B8:07:DE:D5:9F:1F:EF:A3:1E:66:CC:F8
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B28915892FE2906A1F0909580CBDDB2D7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uUbaFfkdLpC4B97Vnx_vox5mzPg.roa
Signing time: Fri 13 Oct 2023 10:24:55 +0000
ROA not before: Fri 13 Oct 2023 10:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 194.87.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:91:58:92:fe:29:06:a1:f0:90:95:80:cb:dd:b2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 13 10:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b946da15f91d2e90b807ded59f1fefa31e66ccf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:51:ff:7f:d0:46:a6:eb:c9:50:15:12:66:39:
f3:22:4e:cb:98:3d:4c:06:b6:e7:dd:42:6c:58:a9:
c1:c8:7e:5b:4b:7c:4c:b1:93:75:99:2a:d0:27:d9:
df:12:dd:7b:b3:6b:cf:f1:e5:58:2f:6d:76:07:80:
74:fa:97:0e:b7:ed:fb:c3:a6:e7:78:22:1c:56:e5:
92:64:41:fd:d5:01:08:68:78:c8:09:0b:39:dd:51:
95:e1:32:7e:1e:b3:4f:16:09:f4:23:24:f6:b1:0c:
c2:2c:5e:9a:6b:26:37:0e:33:f2:a4:15:3e:34:92:
3d:1f:fc:ee:dd:37:44:7b:e0:77:2a:d8:02:42:89:
31:ca:ea:9b:04:72:81:62:bc:fa:9f:20:45:24:ac:
5e:ac:a1:fc:2d:1a:c4:44:74:b7:f4:77:02:22:6d:
70:2f:da:71:53:93:1a:76:eb:c8:e9:46:02:56:3a:
5e:23:08:9c:01:3e:03:f4:38:a7:dc:23:79:fb:01:
ce:f4:ad:41:29:a7:80:94:bb:58:2a:ab:14:7c:2e:
96:9d:05:9d:a2:1d:f8:60:cf:81:26:42:93:27:14:
86:26:8e:c3:86:b9:d8:2e:3c:5f:12:eb:ad:a9:fa:
83:a1:e6:f9:43:90:5f:85:45:dc:aa:49:c6:7f:60:
8c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:46:DA:15:F9:1D:2E:90:B8:07:DE:D5:9F:1F:EF:A3:1E:66:CC:F8
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/uUbaFfkdLpC4B97Vnx_vox5mzPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.229.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:05:ec:b4:f3:4e:af:87:d2:73:aa:c1:32:f1:19:da:3a:bc:
8b:d6:38:2d:45:33:13:c2:10:89:47:f8:20:05:3b:e6:14:fe:
d7:1d:65:bc:35:52:2b:1d:8b:03:02:7e:12:1b:39:ab:ee:50:
40:c0:19:12:1f:b1:c7:0b:2e:bb:b0:40:19:40:79:be:25:22:
4f:69:b1:da:f3:09:61:db:b1:9e:f7:9c:6c:a9:22:45:0a:5f:
ff:9d:80:dd:43:3f:7c:ba:d7:bc:8e:40:d3:09:bf:45:ce:a9:
80:8d:5a:b5:53:9c:cc:32:f4:38:b9:6c:22:57:c3:71:da:0d:
61:df:0f:4a:23:96:e9:d6:99:17:d6:97:b9:8b:99:29:00:03:
a5:63:4d:e7:10:f8:4d:5a:76:bb:ae:e0:37:ac:0e:ad:27:19:
68:b3:90:b6:c3:a6:4b:ab:76:e2:e5:ec:94:a9:a9:2e:fc:fe:
de:ce:15:b6:86:e7:4d:e6:4b:55:a4:28:bd:29:f7:4c:16:4c:
2d:ac:03:79:68:05:a9:40:47:a5:94:42:d2:10:a7:16:e1:69:
55:5a:c2:76:34:f8:7f:1b:48:33:fa:16:f0:d1:b6:c4:4f:5c:
00:71:7f:68:aa:49:19:9b:51:1e:88:41:0c:ec:22:58:d6:61:
3b:c6:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 17:46:32 2023 by rpki-client on console-ams.rpki-client.org