Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1Fe2Am9w42ivHvxBpl5obKXU-Zw.roa
File: 1Fe2Am9w42ivHvxBpl5obKXU-Zw.roa (raw, json)
Hash identifier: S3/Bz5+qgJ9h/FeVpcmZt2fiK/lkxOFxRJVj/jsvoNU=
Subject key identifier: D4:57:B6:02:6F:70:E3:68:AF:1E:FC:41:A6:5E:68:6C:A5:D4:F9:9C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AA82FA8C721191658C1928138B87E354E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1Fe2Am9w42ivHvxBpl5obKXU-Zw.roa
Signing time: Mon 18 Sep 2023 12:06:50 +0000
ROA not before: Mon 18 Sep 2023 12:06:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 195.58.63.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a8:2f:a8:c7:21:19:16:58:c1:92:81:38:b8:7e:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 18 12:06:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d457b6026f70e368af1efc41a65e686ca5d4f99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b4:27:db:cf:3d:1c:7e:95:db:ca:bf:7b:08:
60:a2:7b:c0:59:75:69:93:4d:aa:6d:58:29:9f:3a:
54:d6:24:d4:b8:04:f7:e9:d2:63:a6:63:03:27:1c:
7d:68:78:67:99:fc:ad:d6:39:b0:f1:d8:17:ff:87:
38:53:e3:5d:37:e9:10:f9:f9:c6:eb:a5:c0:a2:e5:
42:f9:77:96:0c:53:eb:35:95:d6:7a:00:f0:3a:ac:
a1:9e:f4:3d:9b:15:82:2c:bf:40:18:db:4a:7b:1f:
3e:2e:a5:06:24:dd:2c:e7:12:cb:38:03:5a:13:37:
7d:49:97:d0:44:ac:49:b8:e8:c0:ff:35:52:3f:99:
20:d9:96:6a:ee:bb:64:3b:7a:21:47:39:0c:ee:2e:
84:3d:18:64:ba:b3:db:b2:cc:7b:46:ed:42:3f:c5:
20:07:d5:dc:1c:89:6f:02:49:af:22:cd:37:b1:ec:
fe:5b:90:f2:cf:b6:84:19:21:af:fe:8b:c7:e6:59:
14:ab:37:da:2e:f5:3d:24:e8:9c:49:c7:77:09:ad:
ac:8e:7a:34:d1:57:dd:88:da:6e:84:7e:27:44:fa:
c1:22:f4:d7:f2:13:44:98:1e:8d:79:c4:93:c5:0c:
0a:5f:02:5e:49:c0:52:b5:28:d2:59:70:b7:ac:4a:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:57:B6:02:6F:70:E3:68:AF:1E:FC:41:A6:5E:68:6C:A5:D4:F9:9C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1Fe2Am9w42ivHvxBpl5obKXU-Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
07:7a:1c:d8:1f:70:88:c5:07:12:7d:77:65:bd:a3:7e:f5:89:
ff:6f:82:63:38:fe:da:16:ae:22:8f:28:86:08:3e:0d:eb:f2:
3c:aa:04:9c:c9:d5:7e:3f:86:a4:66:c5:7a:a5:71:ef:e6:1f:
6a:47:61:2e:c5:12:92:05:70:81:c1:25:08:4d:ac:09:40:54:
ac:1c:8d:7f:73:0c:59:f9:cc:f4:0d:4f:bb:b4:db:a7:35:6e:
3c:f2:0e:8d:e4:3e:78:19:64:9c:46:a2:e8:12:51:d7:44:f0:
51:07:86:76:90:41:3d:e3:08:0c:a6:56:b0:ce:cf:1d:bc:80:
01:48:4e:27:5d:db:f5:8b:d8:22:c4:da:75:2d:6b:f0:23:1b:
13:09:b0:40:31:d2:8f:c2:90:38:66:ee:79:bc:25:02:f6:97:
05:4b:6f:43:94:fa:51:6b:1c:12:0a:79:8f:ad:c4:37:88:0c:
fd:48:de:4e:56:55:41:e6:27:ff:43:e6:41:e6:16:e1:2d:bd:
97:11:1c:71:58:e1:f9:04:20:8f:4b:93:be:71:a2:6a:e6:60:
2a:b5:fd:09:59:bb:57:a4:be:63:1e:02:65:0f:37:c0:5c:cc:
87:28:0a:de:f9:86:fe:42:79:0b:a1:dc:2d:e7:3c:d8:1f:7b:
76:ed:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 6 05:44:44 2023 by rpki-client on console-ams.rpki-client.org