Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xmvX_uYOChM60uS8sI4raeCUh98.roa
File: xmvX_uYOChM60uS8sI4raeCUh98.roa (raw, json)
Hash identifier: aNe+8GdPUIMVy7YlCpOT87x2qNP/9ONGiFZnFUVX2JI=
Subject key identifier: C6:6B:D7:FE:E6:0E:0A:13:3A:D2:E4:BC:B0:8E:2B:69:E0:94:87:DF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018F66ED46B39173AF13E882AE81E9D4E745
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xmvX_uYOChM60uS8sI4raeCUh98.roa
Signing time: Sat 11 May 2024 09:12:57 +0000
ROA not before: Sat 11 May 2024 09:12:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 194.87.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 May 2024 16:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:66:ed:46:b3:91:73:af:13:e8:82:ae:81:e9:d4:e7:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 11 09:12:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c66bd7fee60e0a133ad2e4bcb08e2b69e09487df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:03:0f:b5:c2:ff:12:9e:ae:60:2b:9c:e4:4a:
e4:d3:22:69:fb:9f:2a:c4:f2:65:f5:77:b3:6e:4e:
76:ca:1d:4a:c4:5a:56:69:e7:bc:ab:42:9a:da:e6:
2a:a2:83:36:49:9f:b3:98:0e:91:32:c1:d3:40:4b:
a0:31:bd:0a:6b:fb:28:0e:13:c2:c4:a3:07:35:5d:
69:b3:74:f0:5f:81:4c:7f:41:df:b8:98:ea:8d:09:
ae:02:08:4f:50:06:05:a3:85:9e:21:36:da:a4:8d:
4c:f7:36:f0:7b:e2:7a:0e:0f:e7:2e:b2:79:48:83:
da:5b:fb:1a:10:50:88:c7:74:be:16:f2:d5:d8:2b:
8f:06:24:c4:f9:ea:b8:53:14:8c:d1:27:5e:14:39:
cd:ff:20:7c:52:20:e5:f7:bc:71:07:4e:17:f6:c3:
b4:cf:ad:9d:fc:8a:08:17:17:5e:53:29:96:d8:35:
88:dd:3d:08:23:19:18:54:51:da:8c:05:e1:3d:07:
ba:a1:d8:d8:97:67:4b:6d:81:78:f1:0e:24:f8:1e:
19:fc:b2:ba:5c:9e:23:e7:d7:41:e2:16:60:ec:7c:
97:8c:60:97:56:cf:9f:76:bf:f1:48:08:88:a5:49:
0e:c9:d9:dd:19:34:6c:00:32:53:cc:cd:80:4b:69:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6B:D7:FE:E6:0E:0A:13:3A:D2:E4:BC:B0:8E:2B:69:E0:94:87:DF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xmvX_uYOChM60uS8sI4raeCUh98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:42:b8:e3:3c:ae:64:75:58:76:67:26:31:9d:cb:57:61:27:
9c:0a:d0:7b:c4:92:31:76:7c:2d:d0:c4:4f:10:df:09:b7:76:
c6:29:83:91:06:c2:05:65:8c:13:cd:99:22:aa:ec:e8:6e:07:
23:d8:ea:bb:9c:d0:0d:d1:d8:cb:ec:e2:27:1d:dd:7f:cb:71:
3b:e1:c5:d2:a8:c1:e8:76:fa:19:81:5a:e4:cf:7f:64:5e:16:
9f:fe:43:63:6c:c2:f5:13:5c:14:fd:54:b4:79:60:4a:c1:2c:
86:42:c8:70:8a:a2:1f:3d:cf:d2:69:fc:fa:24:a0:b1:fa:49:
8c:6b:65:b2:e6:0b:2e:2a:d8:52:73:56:50:77:98:5a:da:69:
bc:d2:e9:c8:a3:8f:10:67:fc:f9:df:21:6d:07:c7:78:58:a1:
03:48:56:12:68:b9:df:c2:f2:ac:16:d2:26:4c:c8:51:c6:3c:
83:18:36:73:5b:a1:14:53:bc:39:8d:ac:00:1b:f0:09:b6:86:
90:f0:77:1d:07:ee:48:e8:45:42:29:75:1a:cc:e1:31:1e:16:
77:a4:df:32:0c:95:77:59:bc:88:66:2c:53:b6:43:11:f2:51:
85:6a:ab:ea:ac:ed:5f:e8:39:95:70:d9:d7:78:fb:96:38:04:
e1:4a:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org