Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1--_0LG1tDxlYlGO0artz6lhd2xU.roa
File: 1--_0LG1tDxlYlGO0artz6lhd2xU.roa (raw, json)
Hash identifier: t/1Jsb/pNvH+TWpbrbAPCyavmA+R4wbCjAvY++12YvM=
Subject key identifier: FB:EF:F4:2C:6D:6D:0F:19:58:94:63:B4:6A:BB:73:EA:58:5D:DB:15
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189BD2F91DDC6B0B4F0C78D2CE9F924F98E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1--_0LG1tDxlYlGO0artz6lhd2xU.roa
Signing time: Thu 03 Aug 2023 20:55:58 +0000
ROA not before: Thu 03 Aug 2023 20:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60528
IP address blocks: 195.133.40.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:2f:91:dd:c6:b0:b4:f0:c7:8d:2c:e9:f9:24:f9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 3 20:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbeff42c6d6d0f19589463b46abb73ea585ddb15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:94:16:9f:fa:a0:17:50:f3:04:68:6b:02:
d3:05:91:28:5d:71:0c:6b:69:df:43:f3:28:c3:d9:
60:55:12:3d:f2:da:ae:b3:f8:43:6c:23:b5:cc:dd:
45:b6:ca:25:58:b9:34:50:1b:e5:7d:ec:92:c8:ed:
d2:76:0a:85:e4:cc:b4:f3:02:22:50:af:5d:2c:78:
c9:88:fa:c1:da:a1:2b:c0:85:f2:e5:3b:36:56:5c:
20:23:36:ea:27:a4:7f:31:32:22:87:74:64:53:61:
d0:21:5e:b0:0a:ff:d5:31:17:05:8b:da:c6:7e:b6:
95:82:fa:51:5f:71:92:33:32:d0:0e:72:0c:51:5a:
d8:c7:54:ab:f5:20:6f:f3:ea:20:a5:ed:9f:79:e9:
ba:fa:9a:f4:ca:d0:89:05:ae:f7:fc:c9:29:b6:94:
db:85:dd:fd:2e:00:e9:9f:ea:a2:35:a9:5c:24:97:
0c:a3:48:fd:a8:cb:4a:08:db:bf:da:6a:1d:27:4a:
a3:d8:e7:e4:d4:d2:0d:25:4c:42:bb:ad:a4:61:84:
f1:dc:56:4e:2a:02:06:34:82:a4:f8:ba:4c:49:5b:
f0:28:0d:ba:45:21:63:8b:a4:c7:ab:22:1c:80:67:
e6:c2:30:7f:9e:49:36:de:d4:34:d1:c0:2c:a6:96:
30:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EF:F4:2C:6D:6D:0F:19:58:94:63:B4:6A:BB:73:EA:58:5D:DB:15
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1--_0LG1tDxlYlGO0artz6lhd2xU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.40.0/23
Signature Algorithm: sha256WithRSAEncryption
80:8e:36:56:cd:b7:80:fb:63:7a:48:c0:bd:57:58:dd:7e:e1:
09:1b:46:73:a4:95:a1:7e:2a:9b:79:cb:48:42:6e:99:49:6a:
eb:f8:28:d5:47:92:dd:7f:5d:37:a7:4b:ff:fa:bc:86:34:49:
3e:63:12:00:3d:66:31:fb:ec:3e:d1:92:f5:f5:6d:3e:ca:e4:
10:70:08:b7:9f:50:31:22:de:60:08:37:5b:d7:a0:a3:41:83:
e3:4a:e3:39:ed:35:8d:bb:a6:5e:93:b0:57:6b:b4:47:08:89:
e1:10:9a:ad:bb:8f:67:21:4c:57:cb:71:b0:d9:3f:a2:36:30:
17:43:71:48:f8:97:7a:bd:b0:c9:af:84:d0:40:86:67:f4:78:
fa:07:36:33:49:82:45:27:a0:64:67:a5:47:ff:c3:a8:ae:3f:
da:98:c9:6a:e6:95:54:a2:a5:56:61:06:58:13:89:da:3d:1c:
b1:e5:bc:23:ea:73:e4:a2:f1:75:ad:37:5a:7c:28:47:e7:90:
02:cc:ba:94:b1:92:7e:ab:a0:6a:81:bb:8b:fe:06:c3:5c:20:
17:19:4d:e6:0a:58:2d:a9:1c:61:14:43:36:78:9e:f1:be:6d:
ce:15:9f:d6:99:02:ba:a1:88:93:07:7c:d7:c6:b8:67:9c:be:
0c:f5:49:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 3 10:49:16 2023 by rpki-client on console-ams.rpki-client.org