Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xd0ACa6VD242fpSwQ4mTlAoM_qQ.roa
File: xd0ACa6VD242fpSwQ4mTlAoM_qQ.roa (raw, json)
Hash identifier: HxXfnfMhhWZzRnLcS4ZPX+jFuj8Evf1eupZ48ggn8/s=
Subject key identifier: C5:DD:00:09:AE:95:0F:6E:36:7E:94:B0:43:89:93:94:0A:0C:FE:A4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F6716CE54CBC8530220BB8941AB99FB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xd0ACa6VD242fpSwQ4mTlAoM_qQ.roa
Signing time: Sun 01 Jan 2023 22:15:05 +0000
ROA not before: Sun 01 Jan 2023 22:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212598
IP address blocks: 194.87.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:16:ce:54:cb:c8:53:02:20:bb:89:41:ab:99:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5dd0009ae950f6e367e94b0438993940a0cfea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d2:ab:35:27:bb:56:84:a7:49:d3:d8:6f:83:
20:cf:1e:d9:ea:58:ac:ae:74:ff:9f:0a:ae:02:6e:
4f:d9:1f:12:f1:bb:1f:e6:6b:52:bf:f3:14:20:6d:
de:2f:36:8a:ca:5a:49:28:b7:f0:e0:72:60:fc:57:
6a:f0:b1:7b:8b:5c:d0:f4:12:97:fa:bc:de:28:c0:
78:8d:59:ab:b2:1c:02:3c:a7:25:78:d3:0d:3c:fe:
09:5e:68:21:a8:0f:26:66:d0:9d:82:40:ba:af:76:
23:75:fb:85:cb:01:9d:5d:9f:f4:80:4c:aa:37:eb:
c6:48:7e:ff:5a:e7:f9:f3:00:a9:f5:28:75:d4:af:
9b:70:5b:1a:12:83:c5:5b:18:53:25:7d:2a:5f:0d:
fb:28:8e:8b:55:24:35:3b:56:5c:f8:16:33:4d:0f:
a2:9a:0f:55:d1:9b:76:6f:21:03:a1:24:ec:1b:07:
f5:35:eb:80:9f:f6:a7:c5:25:27:62:a8:94:ed:5f:
e7:55:61:53:b1:5a:c8:39:0e:a6:15:5c:10:a8:23:
55:0d:b0:a1:c9:60:d0:b8:4e:d0:db:7f:9a:6e:1d:
c1:a0:66:b8:e6:98:26:1c:60:fc:94:07:7e:8d:0f:
e8:52:71:5d:25:85:df:80:81:e7:38:d7:d3:ed:f1:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DD:00:09:AE:95:0F:6E:36:7E:94:B0:43:89:93:94:0A:0C:FE:A4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xd0ACa6VD242fpSwQ4mTlAoM_qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.209.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b9:cb:46:6c:a3:fc:47:0e:7d:fb:37:52:f5:1a:15:cf:e8:
5b:4a:a3:08:08:ff:bc:ec:e9:99:e7:d1:ad:07:64:1d:9f:dc:
53:c0:8d:e1:fe:4b:42:0e:7b:e9:22:e6:9e:c2:d5:3f:54:8e:
c1:cd:48:87:e8:08:b2:5a:46:e4:32:62:5e:8e:d1:16:71:bc:
26:cb:a1:17:c9:67:f2:ee:5b:c5:74:8f:56:dd:f9:b7:c3:c2:
5b:ac:4a:46:43:9a:ac:b3:a2:4e:7b:2a:fc:4a:cf:b2:25:27:
74:ea:c2:c6:85:d1:6c:b8:0a:d2:b3:6c:0a:d0:28:c9:a1:7d:
30:7b:a1:3c:b7:6f:12:d0:01:e7:c0:00:15:e8:52:ea:5f:6f:
00:52:22:8b:ea:27:3f:38:b6:a5:ec:16:9f:12:2e:2e:9f:44:
2b:fb:48:6d:ab:2b:dc:36:e5:af:49:15:91:61:66:0c:79:0a:
13:82:f0:7a:6d:50:7f:3f:18:5e:a7:80:eb:44:bc:88:40:59:
8b:2f:59:92:a3:64:db:e3:c1:02:fe:1e:9a:08:dc:f6:ac:62:
35:02:2f:b5:fa:46:2c:9a:f1:ff:6f:25:0e:3c:d7:20:93:9a:
1b:2b:7e:7d:82:be:0e:ee:84:17:ab:e1:86:f9:6a:f8:c7:87:
bc:f2:7b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-ams.rpki-client.org