Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0QfyCuf-Wv2c9ADls5S3Ca7hj-8.roa
File: 0QfyCuf-Wv2c9ADls5S3Ca7hj-8.roa (raw, json)
Hash identifier: h2QN17LvBWZK7awtlI6ZA/WRt2gpVsjxtm0oUZ+zrhI=
Subject key identifier: D1:07:F2:0A:E7:FE:5A:FD:9C:F4:00:E5:B3:94:B7:09:AE:E1:8F:EF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B24119CA688A126C8E5C6AA13F42CC06E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0QfyCuf-Wv2c9ADls5S3Ca7hj-8.roa
Signing time: Thu 12 Oct 2023 13:26:55 +0000
ROA not before: Thu 12 Oct 2023 13:26:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400402
IP address blocks: 195.58.60.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:24:11:9c:a6:88:a1:26:c8:e5:c6:aa:13:f4:2c:c0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 12 13:26:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d107f20ae7fe5afd9cf400e5b394b709aee18fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:55:84:e5:ac:a3:cd:e5:52:eb:cd:c9:6e:
d1:6b:34:24:bd:c7:5e:cb:02:36:02:f3:86:d9:c1:
d8:f3:6b:17:25:51:77:6f:c6:cb:14:37:a3:7f:4f:
4a:91:69:4d:94:b2:74:72:6f:35:93:28:2c:3b:24:
7e:d4:2c:28:b8:e6:df:ba:86:b6:b3:bf:42:77:8a:
22:74:e9:a7:18:99:40:aa:c7:8c:76:b0:c1:87:f2:
fa:b9:7c:c8:a1:1c:d7:b5:a3:8e:83:8d:ba:1a:ee:
20:78:03:ca:98:d7:64:df:3f:4d:e8:59:b4:af:60:
c7:f3:52:f3:a9:22:07:bf:6b:70:b1:30:67:c3:0e:
33:bf:bc:48:10:15:37:e3:c7:e7:78:3d:fd:3f:17:
ae:e6:d4:95:43:b9:4e:72:9b:e2:e3:47:b5:96:94:
72:80:47:d9:da:d7:63:03:03:99:22:0b:d9:64:b2:
19:e0:81:43:17:2e:48:8a:66:f0:4d:f3:75:a5:12:
d6:7b:22:41:98:16:dc:02:4c:55:a9:39:a9:1f:25:
32:1d:9e:8e:91:5d:c0:a3:b9:53:2b:8b:3e:65:1d:
34:af:e3:2c:81:3d:09:eb:64:22:5f:0b:33:db:de:
ba:2e:1d:53:6a:e7:58:22:be:04:51:63:d3:8c:62:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:07:F2:0A:E7:FE:5A:FD:9C:F4:00:E5:B3:94:B7:09:AE:E1:8F:EF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0QfyCuf-Wv2c9ADls5S3Ca7hj-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.95.0/24
195.58.60.0/24
Signature Algorithm: sha256WithRSAEncryption
88:25:77:58:97:48:61:9b:ba:2e:9b:13:f4:56:a2:a8:8d:70:
3d:94:05:07:55:07:94:10:0f:37:74:66:63:88:49:c5:6c:cd:
00:7e:17:bf:83:b9:67:8c:b2:44:07:7d:07:bd:fc:86:9f:80:
77:2c:24:64:d4:f2:95:bf:85:1e:e8:8a:90:5d:9a:bd:cc:93:
15:a3:d9:b0:77:8b:02:85:e8:f9:3f:c4:0d:49:78:62:d9:03:
ee:3f:1e:84:5d:e6:e3:d0:44:59:9f:96:f5:79:6a:d0:94:10:
25:6e:1d:d5:79:88:1f:92:e2:3e:5e:09:1a:56:50:75:e4:ee:
58:6e:ec:75:57:5f:6f:d4:e5:03:8a:25:41:80:90:57:61:90:
fd:bb:0b:fc:91:67:03:fc:f7:1f:2b:c2:0b:c9:c8:1c:e3:ec:
75:03:4b:de:b2:2c:8c:c5:45:cd:62:8e:61:62:4d:d4:d5:6c:
41:2c:bc:0b:74:d4:ea:b9:18:a3:81:53:bf:05:23:63:c5:54:
f5:36:0d:7b:44:71:3b:79:c3:40:ae:11:84:e6:1a:bf:fc:70:
7c:4b:98:f1:fb:61:e9:ea:89:5b:c7:4c:7b:55:6d:b8:7f:c2:
23:a6:92:5f:63:9c:aa:f3:ca:4f:6e:e4:6c:5a:51:e1:a9:57:
dc:11:05:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 10:47:26 2023 by rpki-client on console-fra.rpki-client.org