Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xPYcByuuHCom-f8PO8DhbkOFygM.roa
File: xPYcByuuHCom-f8PO8DhbkOFygM.roa (raw, json)
Hash identifier: l2O1qYqIfz8pMulP+npXvRa/D03OBRqVTu9llusly0A=
Subject key identifier: C4:F6:1C:07:2B:AE:1C:2A:26:F9:FF:0F:3B:C0:E1:6E:43:85:CA:03
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F671E2FDE2A892C82846D8F37463C33
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xPYcByuuHCom-f8PO8DhbkOFygM.roa
Signing time: Sun 01 Jan 2023 22:15:06 +0000
ROA not before: Sun 01 Jan 2023 22:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400536
IP address blocks: 194.87.123.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:1e:2f:de:2a:89:2c:82:84:6d:8f:37:46:3c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4f61c072bae1c2a26f9ff0f3bc0e16e4385ca03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:39:76:d0:d4:e5:da:09:fb:5d:e2:c4:34:
97:8f:8f:d6:41:94:0d:04:5e:a1:b6:67:c8:f3:58:
eb:eb:34:fb:9d:65:1c:f3:a8:ec:8e:e9:7b:20:d7:
dc:4d:2d:f3:ab:23:61:8d:d8:e5:86:e5:1b:21:69:
30:47:79:62:10:97:63:c6:1f:8f:ff:f7:60:13:42:
d3:18:a6:2d:8a:70:7b:67:30:aa:11:67:fe:2a:e7:
dd:3e:24:cd:89:b1:60:17:7c:6f:13:87:2a:82:c9:
3b:3e:05:a2:3c:9d:22:d6:66:d5:a6:ca:bc:d4:db:
b0:04:a9:24:d6:42:60:54:c7:53:de:64:90:3c:84:
19:6f:39:f3:f2:48:6a:ae:4a:81:85:ba:cd:45:d4:
00:91:ba:fb:a2:47:f3:50:20:20:a7:94:92:ec:88:
bd:99:62:fe:f7:83:ae:e3:88:11:a1:bc:4a:9c:89:
2d:ca:de:e5:1f:b6:5b:a6:56:00:46:9b:e1:1a:97:
b7:56:4d:b5:5f:d2:58:e4:fa:c4:6d:82:92:66:21:
3f:cc:e6:db:be:b6:c8:5a:b7:bc:f8:27:47:1b:35:
2c:80:13:ed:3b:92:ad:e6:ee:3a:a8:81:2e:fd:04:
90:c9:93:3d:34:2e:6a:28:98:b7:18:8f:a8:d1:6a:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F6:1C:07:2B:AE:1C:2A:26:F9:FF:0F:3B:C0:E1:6E:43:85:CA:03
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xPYcByuuHCom-f8PO8DhbkOFygM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:31:56:a7:22:e5:7c:31:1e:90:5f:48:a4:6d:db:23:5f:67:
ae:fe:7b:9d:cf:dd:5e:4d:96:df:75:b0:6e:63:c1:f7:ed:2a:
4b:0a:85:c2:16:27:46:f1:d6:f5:a2:67:83:c4:3e:86:e8:71:
ce:7b:bf:19:ed:e5:f3:b7:d7:14:f1:89:a4:f4:0b:06:9f:5a:
13:57:99:1e:ed:0d:c3:48:0a:e9:c3:f7:2b:f5:2e:a3:aa:fa:
c5:a7:a0:95:e8:a4:61:7b:03:1e:f6:6e:39:d8:4c:15:2c:a3:
37:6d:93:bb:f4:33:3c:cc:cc:58:64:9f:5a:66:fb:7b:89:28:
2e:13:d0:ba:b8:c8:f0:f9:82:99:d2:ad:ee:0c:1d:75:4f:cd:
ce:9e:c7:f1:d6:56:15:76:b7:c5:10:11:28:f9:35:5d:11:8e:
07:02:d3:fd:ec:10:68:b1:e9:44:12:e0:7d:db:25:49:da:98:
5d:6c:ac:ca:49:71:70:db:84:22:df:14:d4:4d:53:13:cd:30:
22:e1:d5:6a:db:3f:3d:d9:b8:79:92:51:b6:bf:a3:fa:47:62:
de:0a:67:ac:cf:bb:7c:0c:f7:07:b0:3c:56:fc:b7:c3:e2:6f:
ac:1a:61:ec:8f:b3:41:f3:7d:30:64:ec:9e:35:86:17:ed:8b:
ba:6b:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-ams.rpki-client.org