Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xvriTCtl4M0Q2GWPMXB_6w9XtUg.roa
File: xvriTCtl4M0Q2GWPMXB_6w9XtUg.roa (raw, json)
Hash identifier: 0ARbDCk+Kc6oWgD5lLb3N01x3DmNwFbZUBh4jPtrDQc=
Subject key identifier: C6:FA:E2:4C:2B:65:E0:CD:10:D8:65:8F:31:70:7F:EB:0F:57:B5:48
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66F09F40764694A2C1DBA48B81673F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xvriTCtl4M0Q2GWPMXB_6w9XtUg.roa
Signing time: Sun 01 Jan 2023 22:14:55 +0000
ROA not before: Sun 01 Jan 2023 22:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 194.87.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f0:9f:40:76:46:94:a2:c1:db:a4:8b:81:67:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6fae24c2b65e0cd10d8658f31707feb0f57b548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b9:48:89:3a:71:bd:13:6e:bf:3d:da:5d:19:
c3:96:76:c3:0c:68:d6:36:9c:22:f8:ec:8d:67:2c:
98:13:d5:95:db:41:93:58:b2:73:a2:2d:86:2e:2e:
a6:ec:53:1c:0e:84:5e:9f:1d:a0:56:9b:cc:a5:f0:
29:8a:43:79:60:8f:cb:12:77:fb:3e:d2:48:41:8d:
15:77:68:55:b5:94:d8:70:02:87:52:72:6b:a1:40:
94:18:d3:7e:8b:79:4f:12:34:56:12:50:5b:b3:fd:
f6:e3:19:39:8d:39:a0:e8:f1:85:87:b5:21:21:44:
d1:03:97:a4:79:d4:40:6f:ef:99:42:4a:4f:6f:06:
77:4b:e8:7b:e1:de:56:44:cc:0a:f0:33:c5:ee:aa:
f5:f5:18:d4:8f:d8:f5:73:16:e6:70:f2:fa:9a:49:
c1:dd:93:47:ac:d5:cd:25:5c:8b:26:23:9a:c1:fe:
9a:17:a3:0c:c7:63:85:d5:39:8a:63:66:7e:a4:f7:
a0:7e:e0:e2:af:4d:90:68:79:24:77:01:2c:0b:90:
ee:11:ee:6d:83:6f:3a:91:9c:d5:c5:df:0b:ec:f9:
e4:c7:6a:13:cc:38:0e:02:ec:2f:28:46:5e:2a:12:
48:e8:dd:13:73:e8:15:9d:c1:97:1c:97:ce:7e:f6:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FA:E2:4C:2B:65:E0:CD:10:D8:65:8F:31:70:7F:EB:0F:57:B5:48
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xvriTCtl4M0Q2GWPMXB_6w9XtUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.165.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c7:00:76:68:24:f3:25:e5:82:62:6e:66:5d:35:3e:c1:3f:
91:91:2d:2b:0d:41:49:d9:94:13:ad:da:fb:a7:13:ff:09:82:
1c:55:fa:ad:48:37:14:65:ac:92:50:2d:e4:ab:5d:40:11:b7:
2a:45:1b:92:31:b4:f1:f0:de:59:2d:9b:d6:8e:9b:a1:8a:04:
ff:ca:7a:9d:89:81:f3:7e:86:a7:1c:70:12:69:d0:ad:a1:65:
05:d4:64:43:4a:20:e1:5c:34:92:9b:d3:a1:3b:0e:c3:40:03:
a8:c4:c5:fa:30:d3:4b:59:4a:14:de:26:b4:7e:d5:5c:21:ce:
ca:ca:ac:7b:8b:d4:9d:20:4c:aa:9a:b5:a0:02:6b:39:dd:16:
12:1a:ef:6c:f6:45:6d:e0:56:81:f9:0a:a1:d6:7f:5c:a0:db:
bb:d5:36:23:f1:5c:93:f0:f7:d1:84:3d:97:3d:7b:2b:3e:ce:
c2:5c:3e:dc:47:3f:ef:5e:10:00:d5:60:00:3b:50:20:2a:6a:
ca:08:42:89:ad:84:70:f7:03:3b:55:bb:e3:04:58:7a:6f:91:
af:09:34:4b:fb:fb:26:f9:6d:62:5c:a4:43:15:fb:6f:50:4b:
3d:3b:e1:8e:9b:e0:ba:8d:e2:08:14:dd:60:36:9a:c1:4a:93:
86:f8:e9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:14 2023 by rpki-client on console-fra.rpki-client.org