Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7zfPryOrOwGGSTj-8zICR1RJVdY.roa
File: 7zfPryOrOwGGSTj-8zICR1RJVdY.roa (raw, json)
Hash identifier: eN8uNHxIhMoMh/NLV54l5auZ13o2if3XzUqJleBduYg=
Subject key identifier: EF:37:CF:AF:23:AB:3B:01:86:49:38:FE:F3:32:02:47:54:49:55:D6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B6C79B00B186B87CDC4FF9CE0CCE6566F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7zfPryOrOwGGSTj-8zICR1RJVdY.roa
Signing time: Thu 26 Oct 2023 14:53:16 +0000
ROA not before: Thu 26 Oct 2023 14:53:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211138
IP address blocks: 195.58.39.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:79:b0:0b:18:6b:87:cd:c4:ff:9c:e0:cc:e6:56:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 26 14:53:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef37cfaf23ab3b01864938fef3320247544955d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:eb:ce:e6:8e:be:5b:e9:83:fd:51:ad:86:2b:
cc:60:44:ed:d3:72:d5:2a:68:7d:08:63:42:73:dd:
4e:66:3f:73:79:8f:08:e9:16:f2:f5:c0:81:8d:64:
a7:e6:61:15:c9:b8:34:2f:fc:1d:51:26:6d:8f:d0:
41:60:ed:5e:87:5f:69:40:68:72:ab:00:87:38:d4:
f9:57:28:cf:9a:8a:41:66:b0:08:d8:69:ea:e6:e6:
9d:2b:2c:8d:1c:68:9f:43:37:a4:67:73:bc:56:be:
de:15:04:e9:98:f9:0f:ab:1c:2c:18:3f:98:d6:00:
8b:cc:ce:2f:23:2c:c4:b5:c0:85:99:09:04:bf:27:
3e:63:a4:63:ed:02:68:fc:4c:d4:de:a6:fe:f8:6b:
74:a5:a3:49:f9:77:b4:a3:a6:24:a8:53:ab:63:79:
70:ca:e3:8a:77:8a:17:f3:ac:5c:b7:60:b5:2e:ca:
3a:08:dd:d1:81:21:93:16:08:d4:36:3e:83:7f:51:
07:58:c7:8f:2b:99:f6:ba:65:91:bf:33:91:58:c3:
40:36:bb:34:85:6e:94:49:24:22:98:fe:8e:6f:11:
dc:1a:bf:21:de:6f:72:70:8b:19:ef:46:ca:61:bb:
01:a7:c9:b0:fb:18:0c:d8:b1:0c:ec:ed:9a:86:e4:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:CF:AF:23:AB:3B:01:86:49:38:FE:F3:32:02:47:54:49:55:D6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/7zfPryOrOwGGSTj-8zICR1RJVdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
195.58.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:d1:ea:ae:40:19:91:bc:d0:a8:59:2b:35:aa:a3:5f:d4:dd:
7c:6d:ca:32:6b:bb:e6:92:7c:9c:ae:af:3d:f3:5a:ad:a6:89:
c9:cf:d5:82:9f:16:73:24:1b:17:0d:ab:ee:f9:d4:e1:29:9a:
94:ee:b4:50:80:e2:64:72:23:ba:e0:30:a0:19:ad:79:ab:ca:
b8:20:ef:28:65:29:d8:ed:39:28:87:57:0a:72:b3:21:a3:66:
03:e5:ec:3d:1d:a8:2b:11:2d:2e:d9:9f:3c:db:71:7f:0c:e7:
03:7e:84:d4:73:57:81:f8:05:ac:3f:f8:93:fd:f2:3b:c7:68:
67:f6:d2:7a:af:38:60:f9:50:e4:2d:66:d9:0f:11:0b:31:08:
3a:b7:9e:d0:fe:75:c8:cb:76:42:8a:ce:48:24:9c:6f:d7:a2:
81:10:37:44:9f:d1:63:3e:96:48:b2:4b:f7:42:70:0a:11:22:
d2:7e:26:55:35:61:fa:3f:a4:de:81:43:fd:00:6a:81:5b:b3:
8d:5e:b3:87:3b:69:25:46:d7:6e:61:f0:ee:db:9e:d7:61:78:
48:18:5f:46:5f:26:be:73:15:4a:68:2a:4c:14:bf:74:1e:05:
9c:9f:b6:e9:70:d9:bd:ae:71:70:56:f7:6f:e1:3a:5f:a4:13:
3a:fb:ea:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 15:14:18 2023 by rpki-client on console-ams.rpki-client.org