Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/69Ny0YUelGWZZZdQIVNNmdD1NmY.roa
File: 69Ny0YUelGWZZZdQIVNNmdD1NmY.roa (raw, json)
Hash identifier: HlmBbJlB7wjMQN+Zj3PsvRFt+d55U1aV6OmfJl1ITNQ=
Subject key identifier: EB:D3:72:D1:85:1E:94:65:99:65:97:50:21:53:4D:99:D0:F5:36:66
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189E87A05A8E1551F99C0FD892E8E56765E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/69Ny0YUelGWZZZdQIVNNmdD1NmY.roa
Signing time: Sat 12 Aug 2023 06:40:58 +0000
ROA not before: Sat 12 Aug 2023 06:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 195.133.81.0/24 maxlen: 24
193.124.91.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:7a:05:a8:e1:55:1f:99:c0:fd:89:2e:8e:56:76:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 12 06:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebd372d1851e94659965975021534d99d0f53666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:90:94:13:10:8f:2d:c5:08:58:59:23:c4:cc:
74:b3:68:35:24:27:d4:7b:3f:9f:a3:c2:c4:e8:93:
d0:7c:c6:b4:61:58:a5:00:ca:fd:ba:ef:a3:65:13:
01:f3:84:6a:4a:8a:2a:f7:2b:d8:9f:fa:db:20:76:
4f:1e:42:03:e8:bd:da:54:76:cb:eb:c3:25:e4:4a:
ba:82:b1:5a:3a:49:ee:f7:a2:31:cd:25:5c:81:47:
76:c1:ec:99:4f:2a:4f:84:69:80:10:e2:5b:ce:0b:
49:77:25:9f:19:90:8c:4a:09:79:37:2e:88:99:b5:
7b:6c:00:f0:a8:37:76:11:16:ee:91:bf:ff:fe:6a:
2f:53:91:8d:d5:7d:37:aa:e7:a6:af:3f:5f:b6:d3:
cd:79:b1:36:87:8d:cc:c8:ce:87:9e:0c:84:53:62:
95:66:a0:3d:96:a9:c8:3d:a8:dc:bc:f1:a3:04:bc:
b7:4d:82:26:92:b0:a4:74:f4:de:57:64:c0:87:8e:
b5:44:8b:84:cb:99:70:cd:ac:2b:5a:6f:99:11:06:
1f:8d:0e:f8:8a:36:ad:f7:12:c6:05:36:7e:66:81:
67:fc:15:cc:eb:66:0f:28:ad:55:6e:ed:4f:91:2a:
8f:e2:31:24:88:47:0c:16:53:5e:00:4d:56:a3:ea:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D3:72:D1:85:1E:94:65:99:65:97:50:21:53:4D:99:D0:F5:36:66
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/69Ny0YUelGWZZZdQIVNNmdD1NmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.91.0/24
193.124.95.0/24
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
98:b2:b0:bc:81:3b:9e:9f:7c:51:f3:06:93:bf:fd:98:a3:80:
11:39:97:35:ce:7d:90:c9:9b:db:a7:61:8d:f2:a6:6c:2f:62:
17:92:b4:91:99:9e:a6:08:47:cc:ef:0b:69:e4:e9:30:ac:45:
58:a2:80:b6:00:a0:bb:7d:bb:1c:ab:dc:ba:8b:71:f4:3f:c2:
76:21:98:2e:4a:c2:c2:6d:28:03:51:60:c0:20:d6:8e:77:34:
c8:87:dd:f6:9f:d1:a4:fd:ea:59:5b:62:a6:af:95:fb:45:71:
c3:6c:aa:05:9d:33:6b:b1:10:2b:75:81:1f:e3:80:6f:81:5b:
88:17:1f:a1:9a:b7:26:e3:10:c8:37:24:73:c2:c0:94:4c:8e:
96:90:41:0a:0b:b4:e9:e5:9f:d1:cf:99:f8:95:b6:4e:ee:56:
85:74:27:49:59:d3:d4:bb:cd:28:ad:7e:74:fb:ac:f5:5a:d3:
cb:ac:86:57:90:e3:ca:dc:98:a1:fd:8a:4d:8a:1b:78:6a:94:
f1:da:96:8f:53:ea:be:08:7d:fc:f0:75:29:de:cc:3f:d4:bb:
20:9c:2b:8b:cb:9b:99:ac:18:c7:3a:4f:9d:01:0e:aa:a0:00:
a4:2c:45:f4:19:af:e4:e2:3f:99:d8:61:99:1d:ae:88:d7:a8:
7b:46:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 06:32:02 2023 by rpki-client on console-fra.rpki-client.org