Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zM_EW26NojqEnQw6pyqgJhZdhnI.roa
File: zM_EW26NojqEnQw6pyqgJhZdhnI.roa (raw, json)
Hash identifier: 6TEDKQavGCdiSYhrBF6649rV+r+gRVLJ0fTXP+BwN30=
Subject key identifier: CC:CF:C4:5B:6E:8D:A2:3A:84:9D:0C:3A:A7:2A:A0:26:16:5D:86:72
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189B10822368E19E488AF6E88BEC8D7E3BB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zM_EW26NojqEnQw6pyqgJhZdhnI.roa
Signing time: Tue 01 Aug 2023 12:17:27 +0000
ROA not before: Tue 01 Aug 2023 12:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 194.87.7.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
194.87.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b1:08:22:36:8e:19:e4:88:af:6e:88:be:c8:d7:e3:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 1 12:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cccfc45b6e8da23a849d0c3aa72aa026165d8672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:df:17:3b:fb:7f:49:37:95:ea:ac:f7:59:
c6:c4:d2:0b:23:b3:c9:4a:d1:96:b6:d8:b9:8b:6d:
82:44:2f:cb:2b:9d:c9:20:68:76:84:e0:49:e1:44:
e0:84:ce:a1:77:62:00:76:31:79:f0:dd:f3:27:62:
a7:9a:39:3c:a1:c4:8c:4c:62:6f:e1:d7:e7:66:8f:
90:c4:dc:cc:e2:dc:a3:04:5b:c4:e4:05:36:24:a2:
44:62:62:52:e6:a1:09:42:82:20:90:12:27:d3:6f:
7a:fe:94:55:e6:ba:53:63:75:b2:af:49:7c:86:f4:
f3:1c:0d:2f:78:ae:61:19:39:c1:cf:f5:d3:f5:23:
4c:b0:ce:92:59:2b:13:c5:3d:5d:a7:c2:3f:ad:90:
c7:9f:09:e0:cc:3b:21:f5:3d:17:85:c8:29:2d:8a:
56:d9:b3:11:cf:ea:04:41:5d:e9:ce:b2:d3:56:49:
ae:41:5c:ab:77:83:69:f5:08:36:e4:c5:3e:da:9a:
de:84:f4:0c:f5:d6:d6:f9:a3:8d:bd:b0:02:52:82:
50:26:f3:59:8c:95:2c:93:e9:5b:a9:d2:75:19:94:
ec:10:2c:36:1b:d2:ca:56:47:c5:8e:0c:95:32:a6:
a1:01:4e:78:6d:db:e6:de:c9:d8:e9:d4:48:fa:1c:
d9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:C4:5B:6E:8D:A2:3A:84:9D:0C:3A:A7:2A:A0:26:16:5D:86:72
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zM_EW26NojqEnQw6pyqgJhZdhnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.7.0/24
194.87.163.0/24
195.58.38.0/24
195.133.195.0/24
Signature Algorithm: sha256WithRSAEncryption
33:fc:2c:a4:89:df:dc:96:5b:40:a8:84:58:d3:f2:71:b7:e9:
ce:d2:f8:43:5d:34:fa:09:61:12:ca:22:c8:c7:1b:e7:81:32:
6f:49:3b:e4:e9:86:ba:2d:8b:4a:70:e0:68:c3:8e:f2:4a:b1:
70:dc:93:f1:ed:65:c1:10:15:5a:9a:e9:97:b8:a3:09:02:e2:
e8:51:4d:53:16:55:6a:bb:de:c4:07:8f:d7:26:df:84:97:35:
80:1b:f7:77:7f:a1:43:e3:76:7d:7b:db:39:75:5d:bc:bb:94:
4f:c9:0f:d9:df:a6:08:2a:6f:bd:54:4a:12:36:7f:a3:60:b1:
ef:79:86:32:4b:3f:1e:d7:a1:ef:13:21:b9:7c:e0:09:16:38:
89:80:d4:7e:91:73:18:9b:74:ff:8e:47:a6:98:d3:c0:d2:d6:
ea:c1:6d:b5:45:72:85:d7:c2:57:8f:b2:19:e2:80:ae:b4:b9:
c5:4e:f9:45:36:63:3a:10:ec:cb:fe:eb:64:97:87:49:bf:3f:
f5:6c:07:61:c2:7a:9d:7b:81:b7:f5:47:8c:1d:ca:30:85:ff:
80:46:2c:38:59:01:87:2a:9b:aa:f5:cb:46:98:dc:7d:75:f1:
97:4b:3c:77:97:b5:b3:e1:a8:27:56:a4:1a:fb:46:61:88:fa:
fc:53:4d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 12:20:23 2023 by rpki-client on console-ams.rpki-client.org