Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1cDcxldwtn4BVNOUKOqHsAgpqfs.roa
File: 1cDcxldwtn4BVNOUKOqHsAgpqfs.roa (raw, json)
Hash identifier: qKedooOeTOZ2XSZZtey82jwrRzFXCQK/c2j1qqRKzUo=
Subject key identifier: D5:C0:DC:C6:57:70:B6:7E:01:54:D3:94:28:EA:87:B0:08:29:A9:FB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018759E092EC3DDB013FC54CE6E88FD52BE9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1cDcxldwtn4BVNOUKOqHsAgpqfs.roa
Signing time: Fri 07 Apr 2023 04:01:42 +0000
ROA not before: Fri 07 Apr 2023 04:01:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211138
IP address blocks: 195.58.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:59:e0:92:ec:3d:db:01:3f:c5:4c:e6:e8:8f:d5:2b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 7 04:01:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5c0dcc65770b67e0154d39428ea87b00829a9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:13:70:8a:c5:1d:d4:62:30:96:84:64:5e:
ad:61:d8:13:87:09:55:39:ab:2f:2a:56:2a:bc:41:
f6:10:23:51:b3:28:3c:c5:93:64:61:0b:72:2a:0f:
ae:8a:9b:07:6d:da:62:51:39:1d:54:8a:be:57:13:
00:51:3f:2a:14:f2:ce:54:df:de:65:6e:44:e4:b0:
e8:03:f1:12:f6:73:21:4a:96:ba:ab:87:60:09:d6:
54:40:da:1f:d2:c9:40:46:a6:6c:2d:75:09:e1:a6:
8d:64:8f:9c:57:f0:1e:e0:f6:ef:10:f3:d8:10:5f:
9a:31:7d:11:23:c8:ce:6f:21:ee:3a:83:e5:57:d1:
fb:d3:6d:a1:af:ab:46:c3:2b:94:be:29:d1:37:b3:
5f:38:83:5c:1a:c3:af:e2:60:c8:d6:2f:e3:15:bc:
e6:9a:da:da:b0:7c:da:5f:7b:1c:8e:47:9e:27:63:
ec:6d:79:ea:7b:fc:9a:c0:08:98:f4:03:50:51:52:
73:fc:6c:38:33:88:8f:f4:e9:70:6d:2d:33:a1:c6:
58:02:17:b8:51:52:49:cf:14:c0:35:2a:51:45:e4:
14:c2:de:2a:96:b7:61:46:ed:ea:93:ec:f4:9e:1e:
69:17:77:6e:a3:95:45:52:23:2f:14:a0:12:b6:4b:
14:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:DC:C6:57:70:B6:7E:01:54:D3:94:28:EA:87:B0:08:29:A9:FB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/1cDcxldwtn4BVNOUKOqHsAgpqfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.39.0/24
Signature Algorithm: sha256WithRSAEncryption
41:eb:76:8d:10:6b:09:d7:0b:19:70:f9:2a:02:1b:af:c8:c9:
a7:a4:de:ad:0d:d5:21:26:b8:b2:17:74:e3:66:80:cb:99:af:
41:a9:72:66:85:ca:30:c2:18:72:1b:24:a2:04:35:3b:31:00:
af:b7:05:b6:b8:99:9c:9d:34:b9:07:db:7e:ac:fb:c8:19:00:
d7:58:4c:4f:d1:c1:e6:c5:cb:34:86:5c:5d:db:5f:74:3f:94:
5a:87:ed:0a:3f:ea:6e:2c:68:a2:82:be:20:36:23:a4:87:a1:
23:bd:bd:5b:37:7c:1f:11:bc:70:27:bb:e4:72:f6:42:43:cd:
56:f4:f4:5d:8e:ca:23:51:00:ca:17:a8:b9:02:f3:9d:e8:ea:
5a:d9:64:12:ff:81:71:41:bf:b3:c7:11:33:9b:94:63:bf:52:
98:08:60:72:0d:2a:60:ce:70:cb:de:c3:35:65:bd:d6:e8:e2:
9a:69:7d:66:b4:5d:4e:2c:1b:9c:33:26:3b:de:43:00:56:09:
fc:3c:ff:f8:5c:fa:45:28:31:3e:f3:2d:68:86:7d:17:05:35:
43:5f:88:40:28:c1:6b:9c:e0:01:2a:a9:47:ff:a1:cf:82:a8:
34:e4:bd:5f:4f:1c:d4:44:39:0e:03:36:c0:2e:a1:7e:e9:93:
bf:02:97:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 15:46:55 2023 by rpki-client on console-ams.rpki-client.org