Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yPFfG9RP37vEhlgl1POR9m9eF1w.roa
File: yPFfG9RP37vEhlgl1POR9m9eF1w.roa (raw, json)
Hash identifier: hmmYT10vZOAE5i+lAmuEwFVhmyQrHGCuiqEf64o3jB0=
Subject key identifier: C8:F1:5F:1B:D4:4F:DF:BB:C4:86:58:25:D4:F3:91:F6:6F:5E:17:5C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D4AC9427FAD7B9453B5969062EAC12659
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yPFfG9RP37vEhlgl1POR9m9eF1w.roa
Signing time: Sat 27 Jan 2024 11:58:40 +0000
ROA not before: Sat 27 Jan 2024 11:58:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200482
IP address blocks: 194.87.169.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 08:25:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:4a:c9:42:7f:ad:7b:94:53:b5:96:90:62:ea:c1:26:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 27 11:58:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8f15f1bd44fdfbbc4865825d4f391f66f5e175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:83:bd:70:1f:9f:2c:74:f2:c3:f2:e7:5e:
7f:4e:3a:a1:d9:d9:bd:58:91:90:cf:6e:4b:56:cf:
15:aa:2f:de:4a:e7:da:61:ae:81:b9:5d:52:cb:76:
80:9d:05:9c:b5:3e:15:26:30:9c:d1:70:76:1f:d6:
21:77:ac:13:7d:bd:15:d8:15:dc:66:6a:71:8f:b8:
82:03:05:c6:e7:73:6a:f6:cf:14:c2:04:fc:08:50:
76:24:40:f4:15:8e:95:3d:71:74:97:a1:ec:30:43:
f5:20:76:dd:d7:1f:0c:d4:83:e6:41:22:01:59:66:
98:6f:7a:a1:9f:05:79:63:4b:84:f8:36:c2:15:b2:
d6:2d:3f:fc:bd:37:0b:e7:7f:60:f8:72:0c:ba:b1:
28:81:a2:11:10:f2:71:a2:3a:d0:03:f6:5e:ba:44:
2d:ac:5c:10:d3:82:b9:70:b8:2e:1c:13:28:6c:6f:
ae:39:c3:b0:07:ae:c9:e1:ee:eb:6d:3f:42:59:90:
fb:03:5f:8f:8d:d0:ba:29:6e:98:93:80:20:00:05:
a0:d2:e9:2d:3d:02:6c:c8:8c:2b:31:ee:5d:8a:82:
b9:a3:2e:76:9b:4e:6a:aa:27:3d:52:b7:ee:95:db:
97:71:b6:c1:cb:0e:36:a0:d0:38:e6:e9:e5:27:46:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F1:5F:1B:D4:4F:DF:BB:C4:86:58:25:D4:F3:91:F6:6F:5E:17:5C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/yPFfG9RP37vEhlgl1POR9m9eF1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.169.0/24
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b7:b9:69:e8:d4:10:27:ce:fa:65:5d:98:87:f7:53:1c:68:
bd:be:c2:dc:e5:a0:4c:d7:83:15:60:09:71:f1:a1:2b:d4:3c:
56:41:e8:a8:06:a2:35:53:26:c0:64:76:ef:28:6c:ea:53:1d:
84:32:f1:51:c3:c5:8d:28:39:4f:4b:e6:3b:fd:c5:a8:73:f0:
cc:1f:67:57:0c:eb:c3:10:90:5e:0b:3a:aa:28:d9:69:12:a5:
e4:c5:d1:5a:b0:07:51:fc:c8:10:87:28:f7:70:75:50:38:1c:
5b:7d:b0:62:f6:b2:f6:3e:26:1a:7a:2a:f9:56:f7:f2:82:25:
74:0f:63:ef:fa:0d:b8:07:f7:72:5f:ca:ee:ff:0b:1a:94:ee:
0b:50:0e:81:9c:1b:12:dd:4a:25:15:17:7a:ee:74:c0:a0:3d:
51:df:48:9a:82:32:66:9b:ac:1c:a7:9d:8e:bc:ae:ae:ad:c6:
45:1a:24:25:07:a8:b0:68:75:6f:71:da:ef:a7:ed:12:5d:95:
f4:64:ef:fe:31:af:55:c7:a9:1c:f0:1c:9c:15:67:ae:0f:58:
f9:54:a6:6e:da:46:21:0a:1b:5c:1e:5f:a9:57:0f:fa:50:d7:
6d:1e:c7:21:ba:fa:52:1e:8f:b2:92:24:e5:08:e0:67:52:3a:
0c:4b:8b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org