Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z8dAjZ5F8zdAp1jq_dIxWipcbBw.roa
File: z8dAjZ5F8zdAp1jq_dIxWipcbBw.roa (raw, json)
Hash identifier: WCAdTrs7m/zYADmV5NKYz4Xvfetv+9K3ktKdLxlLZP0=
Subject key identifier: CF:C7:40:8D:9E:45:F3:37:40:A7:58:EA:FD:D2:31:5A:2A:5C:6C:1C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188FD694E3032BAD94AC3D0F7E4E6A6A254
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z8dAjZ5F8zdAp1jq_dIxWipcbBw.roa
Signing time: Tue 27 Jun 2023 15:11:56 +0000
ROA not before: Tue 27 Jun 2023 15:11:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 194.58.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 13:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fd:69:4e:30:32:ba:d9:4a:c3:d0:f7:e4:e6:a6:a2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 27 15:11:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfc7408d9e45f33740a758eafdd2315a2a5c6c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:db:fd:ff:2c:24:6a:74:b3:3d:86:3e:ed:
87:df:a6:4b:29:56:0a:2a:69:91:27:bc:c2:66:58:
d2:24:2e:32:e9:75:f9:56:06:82:28:7b:a8:b3:fd:
cd:12:84:5b:b5:8d:4f:ce:b7:87:51:c2:00:02:88:
b1:62:27:2a:75:fb:b3:fc:c1:2b:60:84:62:cc:5e:
99:bd:83:31:7d:89:d6:f0:32:10:96:d4:5e:c9:5f:
c1:11:cb:db:5e:93:4b:97:e5:f9:82:5d:c6:ac:ef:
9e:a6:3e:0e:0a:09:bb:d3:17:54:a6:0f:a0:63:4a:
3f:9f:ed:89:8a:fa:85:76:0c:ca:cb:38:d2:63:00:
e3:a6:95:71:43:d7:4c:b5:4e:9c:8b:2f:0d:3d:2d:
09:d6:32:11:dc:8c:c3:30:d3:8b:96:c0:c2:03:d4:
a5:86:3b:67:15:f3:c6:80:e2:6a:74:5e:ac:90:9d:
08:17:fa:12:1c:6b:ca:30:b3:56:44:61:48:c4:ab:
e9:3d:03:c4:0b:5e:04:2c:92:a8:be:72:14:0d:9e:
ae:a6:e3:0c:58:b9:bb:a5:65:09:ab:29:c9:69:c9:
0b:e5:eb:0a:59:ae:3a:71:9a:7b:7d:61:e1:87:a7:
1c:b1:93:2a:4c:61:c5:c9:b6:8c:3f:9a:ca:99:7e:
39:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C7:40:8D:9E:45:F3:37:40:A7:58:EA:FD:D2:31:5A:2A:5C:6C:1C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/z8dAjZ5F8zdAp1jq_dIxWipcbBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.67.0/24
Signature Algorithm: sha256WithRSAEncryption
76:8a:8d:fc:4f:04:2a:6b:91:46:ae:95:47:bf:93:19:26:38:
a5:6e:1b:43:52:dc:9f:3a:40:19:f8:cd:cc:0d:38:10:d2:ed:
15:4b:03:67:92:3d:e8:39:e1:cb:a3:83:79:98:e3:1e:b1:bf:
b4:c3:72:f7:bb:80:bd:f8:95:0a:9b:d3:8c:e9:cd:1f:70:61:
34:dc:de:3f:f9:f6:62:45:76:24:9c:4b:44:13:a9:a9:3c:1f:
dd:6a:a5:0d:82:ec:35:dd:d4:04:ec:2e:25:19:f4:e4:1e:a3:
ed:e8:ff:ca:62:2f:11:31:94:96:c4:03:f8:07:79:f7:0a:07:
ce:3f:d4:cd:30:0f:ec:27:31:e9:19:e1:09:df:97:50:bb:26:
99:04:59:06:71:1c:2f:39:0b:d2:25:37:90:c7:d9:e7:88:83:
bc:5f:e7:c7:fc:87:6d:a8:56:0d:b9:93:7a:14:3a:b3:00:57:
98:17:08:21:3d:c5:45:2c:96:83:f2:29:80:e8:d7:74:dc:54:
5e:24:8a:a9:d4:48:e5:0c:eb:99:b7:bb:5e:de:d1:8b:3f:2d:
cf:89:cd:f6:2c:d1:bb:bc:02:78:98:f3:69:29:ca:72:2c:f8:
a7:46:a3:10:50:5d:d5:c9:56:4a:fe:00:7c:5d:b4:73:50:16:
9e:f2:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:31 2024 by rpki-client on console-fra.rpki-client.org