Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0_cSBWi6JUjIPB8jUhqln2J3QOs.roa
File: 0_cSBWi6JUjIPB8jUhqln2J3QOs.roa (raw, json)
Hash identifier: JKtUTlhKUMJNeZYtsEsI9B7h6QDN7Tf8f+or40QCAFs=
Subject key identifier: D3:F7:12:05:68:BA:25:48:C8:3C:1F:23:52:1A:A5:9F:62:77:40:EB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188BD55E7FAE7B8B85A65881D76CCF50D6E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0_cSBWi6JUjIPB8jUhqln2J3QOs.roa
Signing time: Thu 15 Jun 2023 04:35:03 +0000
ROA not before: Thu 15 Jun 2023 04:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 195.58.55.0/24 maxlen: 24
212.193.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:55:e7:fa:e7:b8:b8:5a:65:88:1d:76:cc:f5:0d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 15 04:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3f7120568ba2548c83c1f23521aa59f627740eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:c1:75:08:93:b8:a3:b0:99:77:01:ab:73:
55:d3:ce:f7:01:a9:cc:80:b2:38:5a:1e:90:b0:6c:
72:b5:27:42:eb:5d:32:9d:f1:2b:78:07:8c:0c:09:
6d:17:9a:a3:1f:4a:41:e5:06:97:c0:99:91:39:88:
00:f9:50:80:f5:53:f9:de:06:ca:72:0e:11:d7:8e:
4c:e7:66:77:5b:b0:b8:0e:6c:25:eb:03:34:d7:7f:
8a:e2:07:fd:06:36:3d:60:21:f8:e4:55:e8:ef:30:
c4:84:a0:7a:3d:24:97:5c:b2:1a:8a:26:6c:57:93:
4d:c0:51:cc:11:0d:22:02:18:ce:c7:86:6d:fe:1e:
c8:d7:90:2d:2b:49:cd:6c:e1:ad:3f:04:da:56:8e:
1d:0f:57:18:a6:8a:84:d6:87:b7:c3:49:b9:1d:6a:
e3:21:64:cc:57:7b:79:10:cb:72:31:e1:86:bf:e5:
f1:78:a9:6c:c3:f7:90:b8:49:e1:4e:2f:7e:b6:90:
72:a8:59:3f:13:55:b9:90:c8:48:d2:e7:25:cd:79:
49:f4:d7:68:9e:57:6b:06:20:85:45:78:13:20:c5:
9c:ed:c9:59:0e:a1:19:3b:28:26:df:3e:b1:f3:6d:
34:02:48:47:67:f6:bc:9c:2a:fe:55:63:1f:5e:07:
6f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F7:12:05:68:BA:25:48:C8:3C:1F:23:52:1A:A5:9F:62:77:40:EB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/0_cSBWi6JUjIPB8jUhqln2J3QOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.55.0/24
212.193.6.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:29:e1:f0:72:f1:70:4b:c6:3d:b2:fc:ad:8f:b5:4e:42:3a:
08:c1:4c:98:3b:6d:87:5a:b3:6e:fa:fd:62:9b:bd:84:55:b6:
af:69:8b:e8:1b:27:d3:c6:cb:d2:d8:9c:9f:9f:fa:51:b2:86:
be:6e:44:ee:61:2f:34:3f:ce:91:f9:ff:76:86:3a:2e:62:2b:
33:b1:04:f0:b7:cf:64:81:7a:90:ad:39:65:0a:85:94:76:84:
d0:19:56:d2:1f:a5:a5:56:67:55:43:e9:14:30:89:3f:9e:39:
54:b5:07:1a:20:c8:95:09:a5:dd:35:21:b4:42:7d:52:17:9e:
75:7f:93:95:9f:a2:ad:bf:0b:87:32:4a:f3:8d:e5:42:19:01:
66:33:9f:ed:8d:c1:40:c2:d3:a0:d7:9a:f5:8b:8a:c8:01:9b:
e1:12:fd:01:f5:21:c7:bf:11:ad:02:3e:4c:ad:9f:57:bc:43:
aa:48:d1:7d:10:35:b8:39:86:4a:f8:d5:79:a9:1b:a7:8d:9b:
f5:79:07:d8:f0:a5:65:a3:e0:80:fb:eb:cf:76:4a:97:b2:ce:
80:c1:e2:44:c8:e6:d8:6a:55:6a:06:47:ba:23:32:32:2c:3f:
1c:27:12:42:8a:ed:b5:04:a5:64:c6:0c:be:d6:33:e7:fe:32:
ae:ac:17:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 12 11:17:14 2023 by rpki-client on console-fra.rpki-client.org