Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zw8ex7ol78Ze-8wqf4SwGof_NMk.roa
File: zw8ex7ol78Ze-8wqf4SwGof_NMk.roa (raw, json)
Hash identifier: tRaay4AvaNGNKNNfaNmNTYDc5ePJLI3OciTAHWv5byQ=
Subject key identifier: CF:0F:1E:C7:BA:25:EF:C6:5E:FB:CC:2A:7F:84:B0:1A:87:FF:34:C9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01875275F413B2D83511BAF980B86503A446
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zw8ex7ol78Ze-8wqf4SwGof_NMk.roa
Signing time: Wed 05 Apr 2023 17:27:54 +0000
ROA not before: Wed 05 Apr 2023 17:27:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399471
IP address blocks: 194.87.227.0/24 maxlen: 24
194.87.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 15:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:75:f4:13:b2:d8:35:11:ba:f9:80:b8:65:03:a4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 17:27:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf0f1ec7ba25efc65efbcc2a7f84b01a87ff34c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:a5:80:b5:c8:65:4a:80:4b:3a:7c:54:01:
37:c3:cc:4e:6f:40:de:0d:4b:7f:0b:10:98:97:44:
b4:54:a5:03:ce:f0:f6:d5:c4:a8:80:53:c0:8d:4a:
38:1e:9f:fb:7e:4a:7b:22:36:c2:e0:21:da:a9:2b:
58:f6:cd:d9:23:0e:3d:9f:f1:fa:0f:ba:f1:d9:14:
8d:cd:f8:99:80:74:27:ab:b5:16:4c:78:43:56:9c:
6b:5d:11:00:85:bf:80:e4:35:65:b3:e1:88:31:69:
81:5e:40:08:74:d5:cd:73:1b:70:b5:33:ff:6e:39:
5d:50:45:3b:72:c8:cb:81:57:35:eb:73:5b:ec:f9:
ec:0f:59:96:8f:46:43:48:e5:68:37:38:f4:f0:89:
25:6a:00:84:42:9d:f2:3b:c4:e1:7c:74:2a:7c:a4:
cb:1b:7b:c0:cd:94:b5:00:74:ee:0e:71:48:68:38:
e2:f3:98:5f:51:65:ff:60:c9:b0:88:01:00:2b:de:
ac:ad:f2:e8:a6:58:d3:f8:cc:e6:f8:4d:1b:b0:81:
9d:26:8a:fa:57:8a:82:1c:6e:b9:ae:b9:cd:50:62:
eb:23:42:1e:a9:a8:3e:38:ae:0b:71:9e:2c:93:f4:
d6:68:fd:13:70:9a:e9:b5:1c:54:96:f4:7f:0a:d3:
78:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0F:1E:C7:BA:25:EF:C6:5E:FB:CC:2A:7F:84:B0:1A:87:FF:34:C9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/zw8ex7ol78Ze-8wqf4SwGof_NMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.67.0/24
194.87.227.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5f:b4:c4:2d:cb:2d:ff:69:9d:f2:80:25:91:60:08:2e:48:
a8:6d:3b:cd:58:24:e2:f4:54:fb:25:8d:d7:14:a0:1e:89:b4:
78:31:1d:1f:8d:bb:1a:4f:8e:6d:3c:b9:84:e3:35:9f:bf:3b:
00:6f:85:cd:9b:22:98:e0:6d:bb:ae:3a:66:18:5c:94:9f:ba:
87:e4:3f:1c:93:90:5d:ba:48:f3:b4:12:c6:f4:1a:fa:10:9f:
db:66:2f:01:96:ae:d9:6b:93:61:92:a3:5a:90:31:08:e7:cb:
d5:32:a4:9f:c3:3e:0f:d2:2f:91:f9:27:d5:4b:51:50:2b:31:
3f:b8:81:80:d7:7b:08:99:42:bd:84:e4:bf:ea:27:84:5c:5d:
7a:86:34:af:94:c5:36:37:39:67:b0:7c:bc:b1:02:39:42:7a:
66:3e:8c:dd:21:21:a2:0a:70:61:59:51:33:80:ab:65:62:13:
f4:e4:13:99:38:39:fb:e5:fb:19:f8:29:6d:5a:d3:27:fa:c0:
49:01:e7:38:81:f1:52:12:9a:aa:e1:e2:6b:40:56:9d:88:00:
52:b3:c1:24:31:4c:69:69:c0:fb:49:9b:68:ef:0c:8b:e8:c2:
e1:43:74:c3:d3:fa:fa:ea:04:c9:9c:c2:49:05:25:e8:d8:55:
3a:76:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:52 2024 by rpki-client on console-ams.rpki-client.org