Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4jtV87LiAOKixVDgpFkll6INXrA.roa
File: 4jtV87LiAOKixVDgpFkll6INXrA.roa (raw, json)
Hash identifier: 9K3w0YrkG10A1uA5Un6bxdshY4/pVJmWMc8nbQkSXZw=
Subject key identifier: E2:3B:55:F3:B2:E2:00:E2:A2:C5:50:E0:A4:59:25:97:A2:0D:5E:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01874FF1A9499A3606E5F33E66B4784E5415
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4jtV87LiAOKixVDgpFkll6INXrA.roa
Signing time: Wed 05 Apr 2023 05:44:10 +0000
ROA not before: Wed 05 Apr 2023 05:44:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:f1:a9:49:9a:36:06:e5:f3:3e:66:b4:78:4e:54:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 5 05:44:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e23b55f3b2e200e2a2c550e0a4592597a20d5eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ef:2d:ed:6f:0a:dc:0c:0e:40:65:0d:14:1b:
f3:18:3b:47:fc:5b:81:6e:d8:42:09:72:82:b5:c0:
11:c5:a4:72:d0:6a:f6:26:de:ff:38:39:51:19:02:
a7:85:83:14:ce:6f:d7:1b:a0:f6:ac:24:40:11:fa:
cf:c9:29:c9:3a:b6:ef:32:4b:fa:c1:77:d1:b2:d6:
0b:27:1c:93:ef:7a:5b:31:09:41:78:51:90:3f:eb:
32:bb:ab:63:7d:aa:c4:1e:1e:d8:38:98:ea:44:11:
26:1e:23:86:31:81:51:0d:35:cf:f6:5b:c8:4b:4b:
99:f9:98:95:bf:77:bf:e7:a9:be:aa:3c:11:c0:95:
aa:9c:db:63:6e:10:14:dc:4b:37:9b:ba:cc:31:c8:
46:1e:d3:78:1b:1f:ec:f9:b8:55:d1:a1:3b:bc:32:
38:cb:69:28:ce:5c:2f:40:e9:8a:c8:bf:64:59:8e:
80:b6:95:7f:28:06:93:b2:79:20:90:be:38:64:63:
62:41:7a:1c:9c:05:de:56:60:3c:33:19:1a:ce:fc:
47:7b:5f:05:40:fa:7a:63:d1:e1:c4:2c:f5:27:ac:
ae:a7:62:d2:d8:b3:57:2c:aa:98:e3:36:9a:41:67:
d9:d2:ed:a3:c8:cb:0f:0e:11:15:b9:b7:63:a2:a7:
e4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3B:55:F3:B2:E2:00:E2:A2:C5:50:E0:A4:59:25:97:A2:0D:5E:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4jtV87LiAOKixVDgpFkll6INXrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.73.0/24
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
60:9d:eb:77:99:6c:ce:1b:28:94:55:78:6b:ea:95:cf:f4:ea:
b7:6a:b8:67:7e:82:a1:3c:b8:30:3a:65:80:81:87:dd:b3:fa:
5a:5c:5b:68:c6:c7:43:b0:f7:a3:31:10:83:a9:f9:86:81:64:
d7:df:32:45:26:a1:78:81:98:2d:a2:fa:11:f4:ae:73:03:f5:
35:86:5d:7c:b4:84:b9:f4:b9:e9:5f:cd:19:c8:ae:27:66:eb:
73:9f:e0:2d:54:81:45:be:22:b8:e2:ad:45:2d:af:9b:bc:2c:
32:b3:fc:2b:e6:b2:02:cd:b5:bc:ce:78:be:14:df:70:03:9f:
91:c6:a0:7b:f2:13:17:5e:16:3c:0b:9e:fe:26:f6:f6:ef:27:
a3:23:73:8c:0b:27:ea:f0:d1:76:8a:fc:93:fc:75:76:97:89:
70:64:92:91:7b:57:a5:27:5e:93:c5:6e:c1:59:f8:8a:97:1a:
20:7a:bb:19:3a:54:75:00:28:55:04:38:a2:9e:e6:4b:d9:0e:
b5:0a:79:fc:8e:81:15:6a:ba:ce:2e:ba:98:b6:c0:35:e5:00:
b6:41:04:69:a0:12:34:e1:09:c2:7d:d7:93:08:21:14:5a:e2:
6d:a3:2a:f3:26:3b:f8:00:1f:d4:79:c1:d2:f3:48:26:5d:e7:
7e:e9:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-ams.rpki-client.org