Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4n3JVnPc9A-3KMg9q_JDuh-zn8c.roa
File: 4n3JVnPc9A-3KMg9q_JDuh-zn8c.roa (raw, json)
Hash identifier: WMFWCgw7OcDeDU38nndKvlw7aTA5YYT6h5+fzbJJajI=
Subject key identifier: E2:7D:C9:56:73:DC:F4:0F:B7:28:C8:3D:AB:F2:43:BA:1F:B3:9F:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D59C5502727FD962A4E589D08F6D1206F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4n3JVnPc9A-3KMg9q_JDuh-zn8c.roa
Signing time: Tue 30 Jan 2024 09:48:39 +0000
ROA not before: Tue 30 Jan 2024 09:48:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 195.133.36.0/24 maxlen: 24
212.193.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 06:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:c5:50:27:27:fd:96:2a:4e:58:9d:08:f6:d1:20:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 30 09:48:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e27dc95673dcf40fb728c83dabf243ba1fb39fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e4:b3:25:30:7d:d8:be:3f:5f:6f:80:ea:2f:
8d:0b:c9:fe:74:f0:63:c3:01:f5:72:fa:17:72:32:
d5:63:30:74:26:f0:83:59:d8:99:70:6f:33:ba:56:
6b:8b:24:19:8b:4d:d1:1e:20:a6:3a:17:58:cb:75:
8e:48:81:31:62:d7:39:77:9e:1c:14:4a:d9:e5:90:
2a:66:e8:8f:92:b6:5d:bc:91:e1:5a:b4:d3:b0:6c:
76:99:d4:48:a0:ee:43:ef:55:60:90:a4:94:75:be:
cf:a3:d4:0a:ae:60:5f:42:d7:36:37:9b:fa:13:4e:
4a:6d:9d:18:40:d2:d6:60:47:9f:14:fc:c7:a4:7f:
f1:bb:a9:7e:da:df:4a:f9:f7:7e:85:43:49:53:d6:
ee:df:e8:d6:4f:30:8c:69:cb:b8:f9:0f:2f:49:9d:
38:a0:d4:d3:a5:5d:94:96:75:ff:af:97:3c:4c:ef:
ef:c0:ab:94:d0:29:10:c7:93:62:04:6b:a4:2d:24:
0c:4b:41:da:8c:d4:06:a6:e5:c4:33:0c:d7:3f:7d:
2f:96:7a:f5:8a:8f:91:e3:77:1c:1a:e6:52:7d:de:
b6:32:27:af:7b:13:a9:4d:4e:73:45:c7:56:b7:d2:
e0:be:67:b9:58:bd:bf:82:a4:3d:e1:b5:92:5c:37:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7D:C9:56:73:DC:F4:0F:B7:28:C8:3D:AB:F2:43:BA:1F:B3:9F:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/4n3JVnPc9A-3KMg9q_JDuh-zn8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.36.0/24
212.193.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a7:24:78:bc:3b:75:1a:62:71:97:cb:2a:83:bb:13:8d:0c:
7c:7a:26:c6:1f:39:b8:0e:23:9e:c3:a2:20:3e:81:ce:5f:17:
94:38:35:26:f2:d8:05:c3:20:dd:f5:22:76:40:1e:92:88:62:
43:c0:fe:4e:18:52:83:56:ce:77:f5:a6:2c:80:c8:e1:5c:d1:
c8:70:e0:a2:69:c0:c2:9a:18:da:92:58:f2:9e:f9:8e:8b:6d:
ce:f4:27:fc:13:73:1d:91:5c:66:7b:30:31:50:37:ee:73:05:
5c:cc:0c:e3:1a:c8:48:47:40:a9:d4:51:d3:7a:30:c0:2d:ff:
ba:bb:78:2e:b4:20:fd:67:b0:90:3e:91:7e:70:d3:8d:d2:b8:
4f:43:ae:81:e4:97:67:cf:38:cc:0a:37:be:f7:eb:d7:5a:33:
d9:05:bc:a6:1c:e0:2c:08:5e:ea:33:3e:7c:5a:dc:b3:12:92:
22:2c:27:82:4d:88:d5:d4:7c:74:a2:c5:52:ce:29:67:e5:23:
c9:bc:34:0c:56:b0:a9:8a:2e:83:6b:67:4d:49:0c:93:7b:74:
78:9a:22:b5:a8:fd:44:8e:4d:2c:ac:ab:8a:c3:80:37:a6:f6:
7c:ea:e6:11:33:5b:04:10:3e:b5:69:85:0a:bb:6e:58:09:05:
a2:0a:80:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 09:27:08 2024 by rpki-client on console-ams.rpki-client.org