Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2WsTGcE5SUAwl45W2fS_QJ-ipoE.roa
File: 2WsTGcE5SUAwl45W2fS_QJ-ipoE.roa (raw, json)
Hash identifier: 0Ud4j9uY5qI8rz8VqutFpKzsihXKmwQlBtn5O3DDzyI=
Subject key identifier: D9:6B:13:19:C1:39:49:40:30:97:8E:56:D9:F4:BF:40:9F:A2:A6:81
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018756EB6DCE6D33315E9BA8CDF86536D55A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2WsTGcE5SUAwl45W2fS_QJ-ipoE.roa
Signing time: Thu 06 Apr 2023 14:14:42 +0000
ROA not before: Thu 06 Apr 2023 14:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51659
IP address blocks: 194.135.38.0/24 maxlen: 24
195.133.5.0/24 maxlen: 24
195.133.8.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.133.23.0/24 maxlen: 24
195.58.48.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:eb:6d:ce:6d:33:31:5e:9b:a8:cd:f8:65:36:d5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 14:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d96b1319c139494030978e56d9f4bf409fa2a681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:20:2c:5e:2e:18:ed:f7:70:99:33:19:85:
b6:14:d4:1c:85:58:41:ef:06:ab:1f:ed:60:8c:87:
a5:f5:17:62:5a:9f:37:b7:a9:a1:e2:83:98:e5:7a:
31:6e:59:88:d8:5c:f3:96:ee:65:15:a4:8e:e3:0c:
72:cc:2c:21:42:3f:cf:cf:2e:6b:06:43:6f:8b:64:
f2:59:e4:66:bb:28:00:56:9a:a3:55:9a:8c:12:2d:
38:f6:e7:f4:bb:35:ce:55:6b:b3:ec:5e:88:93:4b:
18:34:da:73:17:b4:ac:bb:9b:c2:1c:84:59:ac:88:
58:c2:51:6c:46:fd:56:7b:ac:90:92:4a:85:cf:1e:
2c:67:98:96:f8:a4:9e:75:50:de:d4:4f:2b:c7:1f:
d1:30:ad:30:14:1c:fc:c9:f1:8e:fa:4f:b0:97:ef:
b3:31:79:2c:8a:2c:dc:a7:6f:91:e0:87:25:73:b2:
19:dd:38:04:1a:51:28:f3:92:e4:58:cf:95:23:5a:
97:21:28:c5:db:cd:ed:d0:78:a2:ba:c1:ee:a5:55:
3c:4b:31:0c:df:5a:f1:68:bb:0a:6b:aa:bb:0f:28:
b9:d7:3f:61:a6:49:84:2d:25:3a:b7:eb:55:e6:d6:
94:00:ef:f0:68:3e:fc:27:d0:11:95:f6:88:78:32:
e4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6B:13:19:C1:39:49:40:30:97:8E:56:D9:F4:BF:40:9F:A2:A6:81
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/2WsTGcE5SUAwl45W2fS_QJ-ipoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.135.38.0/24
195.58.37.0/24
195.58.48.0/23
195.133.5.0/24
195.133.8.0/24
195.133.23.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3e:fe:b8:3a:34:1c:57:a6:08:02:2a:71:d4:b6:d9:27:37:
8d:7a:81:be:37:6d:25:a3:39:99:8b:e6:a3:d6:87:31:19:a1:
29:58:52:b6:5d:e6:0e:97:97:c4:0a:84:1a:14:e5:ce:d6:82:
e5:0a:27:19:93:6b:e5:e9:9a:e5:cf:0c:2f:54:73:b7:7d:f6:
e8:3f:40:7e:8a:f2:96:ce:52:a1:07:4f:bd:a6:88:69:de:93:
0c:d8:94:9c:cb:92:73:58:f1:37:1f:b7:d9:9c:0f:37:e8:1b:
e7:68:8e:04:a3:39:ba:56:89:f3:d3:59:12:68:7e:8a:52:39:
8a:34:91:2e:f4:f1:fa:da:fa:1a:99:94:2c:97:99:a2:4c:c9:
d7:b5:b2:4c:e0:f2:dd:f7:09:ea:f7:6a:c7:73:28:c3:03:5e:
14:a2:c6:da:03:a6:6c:ae:de:cc:0b:48:d7:9c:2e:90:d9:ef:
36:bf:3f:22:bf:5c:16:67:e4:51:84:e1:5e:a9:37:e0:a2:ab:
d3:5b:50:02:6b:bc:ef:af:a0:f6:ee:5c:a9:fb:6b:f4:cb:84:
5a:20:c2:75:f3:f1:20:60:6e:50:d8:94:35:ca:3c:52:fc:10:
72:10:2a:97:e4:b2:07:9e:dd:d5:67:50:1e:8a:8c:cc:84:de:
c4:66:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:54 2023 by rpki-client on console-fra.rpki-client.org