Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zc81zQi1zx_O57UglAFPh6EmkVg.roa
File: zc81zQi1zx_O57UglAFPh6EmkVg.roa (raw, json)
Hash identifier: mKb3/RKalBqO9w36HY3xO185GQx8ecVifeil2EPIdxA=
Subject key identifier: CD:CF:35:CD:08:B5:CF:1F:CE:E7:B5:20:94:01:4F:87:A1:26:91:58
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B8BE1D9018E5846CE1D66FC4B1888796B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zc81zQi1zx_O57UglAFPh6EmkVg.roa
Signing time: Wed 01 Nov 2023 17:15:16 +0000
ROA not before: Wed 01 Nov 2023 17:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 146943
IP address blocks: 194.87.204.0/24 maxlen: 24
212.192.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Nov 2023 09:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8b:e1:d9:01:8e:58:46:ce:1d:66:fc:4b:18:88:79:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 1 17:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdcf35cd08b5cf1fcee7b52094014f87a1269158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1d:98:1c:2c:b1:63:03:bb:fe:22:c0:d6:3d:
c2:75:85:8a:f5:5e:f9:94:74:a8:64:54:09:93:e3:
22:1c:b9:bf:5c:37:7e:0b:46:99:51:de:aa:75:a5:
c3:f5:a1:27:2e:75:28:d9:8d:aa:9f:5a:de:d1:e2:
4e:f2:5f:5f:5b:8b:69:41:f9:37:7e:af:cb:39:1a:
3f:23:94:19:e1:3e:17:45:7f:99:e9:57:e3:a2:94:
de:8c:e8:0b:5a:1f:c6:78:e4:79:e9:4c:26:92:f5:
23:37:d0:34:86:d4:9e:92:9d:73:c1:c2:e0:b7:e0:
6f:30:b8:83:92:bf:aa:10:4c:a8:83:29:65:f6:38:
c4:ec:d2:24:5e:93:38:57:0c:7c:a4:e6:fc:30:f6:
2e:83:3b:73:14:71:58:42:bb:da:21:e3:5d:c7:03:
65:74:d8:52:07:86:d3:e0:f1:6f:3f:c3:0e:82:44:
df:5e:06:44:b8:cb:d2:bd:d4:89:47:77:d0:d5:b0:
38:3e:66:5d:b8:2a:af:51:8a:6b:16:ac:c4:83:db:
28:4f:ce:f6:56:f4:dd:9d:30:db:37:d2:95:05:75:
18:be:8b:ee:df:21:5b:37:b4:ae:df:0e:86:16:13:
e3:c7:4b:c3:cd:c4:eb:c5:aa:d7:11:33:18:b8:f7:
bf:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:CF:35:CD:08:B5:CF:1F:CE:E7:B5:20:94:01:4F:87:A1:26:91:58
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zc81zQi1zx_O57UglAFPh6EmkVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.204.0/24
212.192.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:a9:b9:74:3a:b1:f7:48:78:ad:27:91:36:ae:6e:f5:3a:cb:
2d:81:91:4d:39:6c:fe:30:ed:46:d4:94:4e:88:4b:22:7d:29:
52:11:46:15:01:b1:ff:4d:24:23:01:12:70:d5:53:9a:4e:6d:
fe:eb:41:a3:65:59:d4:d8:48:83:24:cc:29:47:56:75:9a:15:
ef:88:cf:90:f3:5d:92:d7:7f:7b:12:18:3f:b6:51:47:0d:41:
12:34:9c:f7:e9:b9:0e:3e:1f:4b:1a:5b:61:ee:b3:79:3f:ed:
de:7f:53:53:6f:b7:6d:be:61:60:ca:6f:87:8a:e4:de:c6:67:
73:af:4b:3a:3c:61:43:2e:08:6f:2c:39:40:01:9f:d4:27:ab:
e2:d2:af:70:81:8b:b5:15:0b:05:1d:46:a5:f1:c0:b5:d8:8f:
ec:82:20:53:75:09:f2:a7:7e:38:10:64:49:c1:10:68:18:02:
02:9d:41:44:06:d8:03:89:82:3d:03:a3:19:b7:fe:69:49:a8:
06:1d:26:65:fa:45:ed:fa:11:9d:2f:20:fd:e8:63:bc:ea:58:
67:a5:ce:4d:9e:31:4a:31:13:23:7b:da:fb:52:17:6f:aa:8a:
e7:d1:a7:8f:a7:70:25:90:65:ea:ba:15:1d:b7:50:d2:57:c2:
d6:fd:5d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:31 2024 by rpki-client on console-fra.rpki-client.org