Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7_ASfiODe-TRHKAhp3Ax9US64ss.roa
File: 7_ASfiODe-TRHKAhp3Ax9US64ss.roa (raw, json)
Hash identifier: ggBRGk+iHswCpdEa4acDAib1420jkGvYjTHfz+NTPUE=
Subject key identifier: EF:F0:12:7E:23:83:7B:E4:D1:1C:A0:21:A7:70:31:F5:44:BA:E2:CB
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018BD2833AA2C99A68839CA326BE850ECE57
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7_ASfiODe-TRHKAhp3Ax9US64ss.roa
Signing time: Wed 15 Nov 2023 10:24:57 +0000
ROA not before: Wed 15 Nov 2023 10:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49805
IP address blocks: 195.133.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d2:83:3a:a2:c9:9a:68:83:9c:a3:26:be:85:0e:ce:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 15 10:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eff0127e23837be4d11ca021a77031f544bae2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:de:40:ad:e1:a1:f5:69:5a:09:be:ac:f3:
ae:22:2d:b5:20:1a:cd:c5:d2:44:fc:41:22:a5:46:
cc:07:95:60:82:0f:08:9c:45:a2:7a:3b:6b:e5:1b:
b9:0a:44:dd:eb:5a:c2:8a:f8:46:20:17:05:35:25:
83:95:f6:a2:62:66:5d:5f:08:d6:8e:5f:0c:3e:c2:
00:b0:b8:d9:6f:82:5a:73:1e:09:cf:91:b0:4b:12:
10:74:4c:57:aa:9b:9d:92:aa:87:bd:90:4e:9b:7e:
a0:31:f2:e3:48:af:e9:c0:0a:e1:bf:de:5e:09:17:
e1:86:75:36:9c:86:86:98:fc:61:f7:4b:7c:b2:ec:
d3:33:fa:c7:30:8f:38:d0:83:41:58:49:ea:89:c4:
7f:a7:af:e3:49:5e:b1:46:8e:8d:28:fa:cf:40:f7:
6c:1e:b6:5c:8f:52:f2:74:4f:0c:68:6b:7f:96:40:
65:49:15:76:2a:ad:9a:dd:d2:e8:86:31:3c:97:8e:
58:80:d4:3d:22:23:53:a8:b5:fa:ad:7a:fd:e0:e4:
d9:b9:d9:e7:4d:22:bf:4b:9d:f2:32:10:64:e9:e4:
92:be:a6:32:f3:9a:02:aa:34:06:d1:93:c0:c0:9e:
cd:4e:c3:4f:9d:68:cb:fd:b2:39:d1:1e:f4:29:b2:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F0:12:7E:23:83:7B:E4:D1:1C:A0:21:A7:70:31:F5:44:BA:E2:CB
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7_ASfiODe-TRHKAhp3Ax9US64ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.84.0/24
Signature Algorithm: sha256WithRSAEncryption
02:51:02:f6:7a:32:22:8c:60:e2:48:7c:b0:9e:60:fe:50:f6:
dd:5a:d5:bd:3c:e3:20:79:53:48:13:e7:ae:be:0a:45:6e:17:
a5:6c:e0:ad:3d:48:73:8e:f0:ad:40:c8:6f:7c:98:8b:ee:6b:
d0:35:9a:15:9e:27:90:3d:60:18:3f:97:5b:f3:1d:c6:ba:9d:
d4:0b:1e:ec:72:4d:a0:26:89:99:c6:8d:25:15:39:b1:5c:d7:
9c:f4:a1:66:28:19:7c:65:bd:d6:a7:43:56:3f:dd:dd:cf:54:
50:64:7c:6c:6f:67:fe:77:23:6b:d3:fe:fb:d5:45:4c:65:0b:
4d:44:66:c8:c7:dd:c0:66:5d:2b:4f:cf:c2:da:7a:69:e3:bd:
c8:03:f5:43:df:05:68:ee:85:1d:fb:10:09:cd:da:13:a0:d5:
04:04:e7:9c:d5:91:ec:fc:70:8c:45:c1:ef:2d:b4:b5:8d:88:
08:c1:61:01:42:93:7e:13:6c:f8:63:cf:83:63:a4:c5:80:13:
ac:14:c0:3b:28:84:62:73:0a:b8:18:87:03:d3:87:f3:8a:91:
29:bf:3e:51:38:68:cd:de:cf:3c:de:d5:b4:b3:24:cb:23:2b:
02:12:23:90:61:27:05:82:5d:87:c4:3b:fe:46:ea:44:24:a4:
43:03:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 10:55:40 2023 by rpki-client on console-fra.rpki-client.org