Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/H6cqVvOAnpjc4hl-FcBxNuYCn3s.roa
File: H6cqVvOAnpjc4hl-FcBxNuYCn3s.roa (raw, json)
Hash identifier: HuZNTxPrNyUVWWy2x2oQRHVJp/K9ZbfbP1/oM7WPPpA=
Subject key identifier: 1F:A7:2A:56:F3:80:9E:98:DC:E2:19:7E:15:C0:71:36:E6:02:9F:7B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670580E15AAA14DCE25F99F8CADAA7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/H6cqVvOAnpjc4hl-FcBxNuYCn3s.roa
Signing time: Sun 01 Jan 2023 22:15:00 +0000
ROA not before: Sun 01 Jan 2023 22:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204613
IP address blocks: 195.133.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Jan 2023 18:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:05:80:e1:5a:aa:14:dc:e2:5f:99:f8:ca:da:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fa72a56f3809e98dce2197e15c07136e6029f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:72:d0:af:47:32:20:13:55:0c:ad:71:40:7b:
24:7a:8a:36:d9:38:1c:03:3c:16:84:49:c1:45:59:
fb:22:b4:91:bd:ff:dd:e6:68:f3:09:b0:ea:38:b9:
78:b6:76:5a:6e:12:3d:2f:3b:6c:62:a4:6c:cb:dc:
78:d7:78:c1:6a:20:54:4c:6d:fe:e0:b6:95:df:dc:
bb:6a:f6:76:5d:68:5c:75:39:9f:a7:5d:ac:1b:90:
68:e2:f8:0f:62:78:b5:70:f4:91:b3:fa:0f:35:51:
61:63:a2:10:7c:70:40:12:6c:45:8c:ba:01:87:9f:
4b:9e:78:bc:aa:26:1f:af:ef:8b:3f:89:dc:d4:fe:
8b:d8:86:60:d0:41:43:6a:16:2f:c9:4c:42:70:30:
9b:27:e9:df:44:58:07:a7:08:29:c4:5f:cf:b6:1c:
2c:73:f6:91:e3:ae:49:3f:1c:07:e1:bf:b5:d1:5f:
3d:bf:32:d7:42:e4:20:a1:b8:dd:22:58:a5:ed:43:
41:ed:0a:1a:db:32:d6:c7:e8:7a:d1:c5:e5:79:79:
15:9c:15:06:1a:95:98:4a:7d:60:fd:08:fe:a8:ef:
6a:10:6c:f6:56:18:a8:06:2f:8e:d3:c9:ce:34:92:
d6:35:8e:7b:a1:ae:8a:2a:2d:17:11:e4:b6:a9:cc:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:2A:56:F3:80:9E:98:DC:E2:19:7E:15:C0:71:36:E6:02:9F:7B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/H6cqVvOAnpjc4hl-FcBxNuYCn3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
37:d0:27:46:cb:43:86:2b:91:8c:74:19:f9:65:12:7c:68:1b:
6e:6a:e9:a6:cf:11:19:68:7a:9d:64:60:52:81:3a:f2:c6:39:
72:d3:ae:40:ce:2d:b3:33:a7:a8:19:e2:7d:71:a0:61:ea:62:
5a:27:9d:0b:34:83:75:b2:52:81:9e:8f:7d:7f:d1:10:2f:66:
b8:58:b1:fc:d7:e3:30:00:7e:8b:ff:96:79:92:c7:cd:c9:c8:
be:14:4f:a6:b5:e5:2b:44:68:c5:bb:30:d4:ab:ce:ba:72:36:
c9:67:a1:38:85:60:7f:2b:dc:61:7f:44:41:08:5f:e4:f2:c6:
c2:13:a0:8d:75:0b:d4:11:9e:a5:7d:0d:8e:a3:6c:66:33:83:
30:34:5b:eb:99:ca:10:51:c7:27:64:5e:7d:e7:a7:1a:72:48:
de:b6:a3:1b:02:f1:1c:8b:84:26:b4:f1:fc:68:dc:6f:b6:5a:
45:eb:56:e6:a1:ac:f1:28:09:fa:e0:76:08:4f:37:6a:2b:12:
27:71:5b:8e:d5:cd:9a:6e:b5:b7:bc:89:05:01:17:1a:d7:1d:
18:d3:2a:68:d5:95:38:81:29:b3:58:a1:19:93:fd:88:3c:95:
5a:fb:80:9e:e1:6f:8b:9d:64:f9:15:d6:51:db:ac:bc:e1:d3:
0f:77:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:11 2024 by rpki-client on console-fra.rpki-client.org