Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3DHcEpuWxNL0XNOKudqlmb7Jq7o.roa
File: 3DHcEpuWxNL0XNOKudqlmb7Jq7o.roa (raw, json)
Hash identifier: Qc6F+zKfSCB89OTrUi3fDTJvxNLeKwvNL+tiqcgx/zM=
Subject key identifier: DC:31:DC:12:9B:96:C4:D2:F4:5C:D3:8A:B9:DA:A5:99:BE:C9:AB:BA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B94361CA088FD7F83D6D4A70EF4C2F293
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3DHcEpuWxNL0XNOKudqlmb7Jq7o.roa
Signing time: Fri 03 Nov 2023 08:04:16 +0000
ROA not before: Fri 03 Nov 2023 08:04:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203394
IP address blocks: 195.133.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:36:1c:a0:88:fd:7f:83:d6:d4:a7:0e:f4:c2:f2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 08:04:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc31dc129b96c4d2f45cd38ab9daa599bec9abba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:65:8c:59:c4:6a:c7:66:a8:98:99:16:3e:a0:
e6:c7:1a:da:dc:5a:3f:29:d3:11:ff:6e:ae:3f:dd:
60:9f:fb:c8:26:cc:5e:e8:a8:95:94:0e:49:48:75:
bb:2f:12:51:3e:4c:26:31:45:fa:d5:7d:ba:8d:ba:
25:bf:be:d9:e2:37:7b:63:c7:ae:93:66:d2:2f:18:
0e:2c:97:05:41:41:5e:fd:bb:bb:84:c0:f2:94:dd:
71:06:62:96:da:da:8c:74:a6:e9:b0:b3:2d:13:84:
30:23:51:d7:ee:6a:38:1a:15:d4:87:8e:aa:f9:75:
70:6b:74:86:d2:9e:76:e9:6c:6e:bc:50:1a:24:13:
c1:d4:78:5e:8d:f7:a8:32:d8:95:06:ae:50:7d:d5:
bc:00:19:3f:2b:01:45:da:e7:08:39:ff:64:ae:49:
a8:5e:8d:73:71:06:14:67:11:4f:38:86:63:c2:5f:
c9:3c:82:91:d0:f8:89:6f:5f:21:06:5b:22:52:61:
13:83:81:76:cf:0f:97:ed:30:57:39:8f:d4:ca:a5:
d8:fe:c4:c6:6c:52:06:09:5e:ff:fe:bc:f4:02:75:
53:7b:7d:40:4e:9e:d0:0c:4b:bb:41:a1:9b:24:ec:
9f:2e:1b:aa:c3:9f:16:10:b6:59:0e:50:97:86:53:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:31:DC:12:9B:96:C4:D2:F4:5C:D3:8A:B9:DA:A5:99:BE:C9:AB:BA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/3DHcEpuWxNL0XNOKudqlmb7Jq7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.74.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b4:40:16:17:a9:9a:bd:50:41:03:07:21:8c:98:5d:05:d1:
27:11:39:11:14:4d:b1:72:95:79:a4:15:2e:2a:60:a3:64:5e:
dc:0f:1b:f5:06:55:7f:79:95:fa:23:b0:27:bf:c0:db:f3:0b:
24:55:75:cb:cf:27:fd:57:f2:30:dd:2c:1c:eb:7c:c4:c9:02:
44:ae:64:47:bd:78:40:42:bb:ea:13:c5:6f:67:24:43:fd:01:
2f:76:c0:5e:f5:c0:7d:fd:6b:46:08:dc:f3:fc:39:63:99:14:
44:04:71:2d:07:20:d0:b0:93:2b:a5:4e:c3:08:a0:48:32:16:
72:bc:19:a0:bd:1c:cf:0b:2e:26:b1:4b:d9:ee:4f:19:33:5d:
70:4a:cb:1e:84:0d:41:37:f2:ab:46:75:62:d4:81:8a:ae:02:
77:c9:14:4c:8c:16:27:fc:e0:00:d6:0c:0f:61:1b:0f:02:96:
13:e6:94:6f:f8:97:09:7b:51:01:0e:7f:ac:6d:b4:2f:e4:1b:
b8:a4:df:cc:9d:af:57:8f:4d:99:9c:f8:f0:44:f4:1f:95:b8:
a3:a1:e1:0a:dd:df:f7:dd:75:f9:4b:cb:25:45:9a:9e:30:35:
7b:95:6b:d3:a6:e5:cc:92:c2:c7:8a:fb:f7:1b:2b:2b:12:52:
bd:b8:c7:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 17:56:22 2023 by rpki-client on console-fra.rpki-client.org