Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/12Da4M0BJMn0zzVadJ5MKaIY7fo.roa
File: 12Da4M0BJMn0zzVadJ5MKaIY7fo.roa (raw, json)
Hash identifier: oLM8J1/xTPFGG9knL2+OZn2kZarCK+1JO1pjUdttsRM=
Subject key identifier: D7:60:DA:E0:CD:01:24:C9:F4:CF:35:5A:74:9E:4C:29:A2:18:ED:FA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189B6DA2AC384DCC92CB84237CB237D4F49
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/12Da4M0BJMn0zzVadJ5MKaIY7fo.roa
Signing time: Wed 02 Aug 2023 15:24:58 +0000
ROA not before: Wed 02 Aug 2023 15:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 195.133.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:da:2a:c3:84:dc:c9:2c:b8:42:37:cb:23:7d:4f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 2 15:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d760dae0cd0124c9f4cf355a749e4c29a218edfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dd:4d:a1:f0:a8:95:56:17:1b:44:4e:72:7c:
23:e6:26:dc:4f:80:42:f1:50:9f:1c:88:26:c5:e3:
f8:e7:d5:0c:e8:35:ea:9f:51:5e:84:26:44:16:09:
bd:2c:f7:c0:5e:3e:ad:de:e1:76:60:e9:56:9c:f2:
5c:a4:e6:86:62:37:2a:0c:61:01:a9:62:1d:b9:c4:
79:f5:35:da:7a:3d:24:3d:4e:04:5f:c7:c2:04:cd:
01:d5:f4:38:99:0d:cd:ff:09:ea:e8:3f:3c:51:57:
b3:b3:0c:ca:c6:c4:fe:d4:5f:9c:3c:03:a0:00:32:
26:ea:67:01:81:98:6b:93:bb:08:de:9f:58:e5:bb:
4c:0b:ef:11:11:41:fb:01:14:54:9a:49:e7:9f:c6:
d3:5e:8b:a3:5d:88:b8:81:29:f7:df:f8:8e:c7:93:
8c:78:99:77:fe:af:25:c0:1e:c3:9a:ce:86:e5:07:
27:12:db:96:69:3e:77:b1:40:d8:c8:e8:bb:a2:40:
3b:55:30:7c:a7:96:f0:c7:bb:3a:73:20:5c:64:25:
f1:33:0a:4a:51:6e:ff:57:e3:2f:fe:f5:d2:69:27:
8d:46:57:01:2b:ae:a0:f5:50:1b:41:f4:7d:77:dd:
26:a7:79:e0:45:17:3b:fc:f3:73:74:f2:97:da:09:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:60:DA:E0:CD:01:24:C9:F4:CF:35:5A:74:9E:4C:29:A2:18:ED:FA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/12Da4M0BJMn0zzVadJ5MKaIY7fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.79.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:85:17:5f:c2:32:4e:c1:78:1a:5e:69:83:49:12:7b:2b:b3:
02:84:b8:a6:01:20:e6:a0:ea:39:e1:a8:b6:67:28:15:0b:af:
99:7f:54:e4:74:1f:19:2a:39:43:d0:42:46:84:c9:b1:f8:d9:
b7:00:cc:a8:db:9c:1e:6a:62:f2:eb:76:63:82:fa:0c:a3:80:
99:24:72:1e:4a:3c:14:af:6d:03:0f:82:50:ba:e1:c0:bb:2b:
b2:4a:21:e0:c7:a3:f8:f2:66:c5:53:d7:c8:d5:c7:4d:2d:cc:
71:63:52:f1:10:20:9f:9d:73:9c:f7:e4:32:b8:c4:e3:39:bf:
33:e6:e0:ac:ad:e5:ac:b5:4a:d8:8a:89:e3:7e:d9:65:c6:67:
e9:62:b3:d5:ad:49:9c:a8:91:2d:ce:87:6f:b6:fb:b2:e9:2c:
54:22:c8:c3:36:2f:d7:7b:96:d2:4b:f7:cb:b8:21:29:03:9f:
72:3b:1a:f2:69:e2:9d:82:81:89:47:75:5b:41:7e:fb:09:ff:
e1:45:83:bb:d0:ac:b7:33:bf:bb:c1:0b:66:ad:a2:ef:2e:c1:
08:ac:14:97:d6:92:81:c2:95:a7:83:84:95:e4:1a:56:0e:46:
7e:e7:09:fa:9e:ad:0a:cb:48:75:6e:97:07:11:82:8f:9d:31:
a6:d6:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 06:31:56 2023 by rpki-client on console-fra.rpki-client.org