Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IBOSM1iH_72IxBiO4D7OIZyxfVY.roa
File: IBOSM1iH_72IxBiO4D7OIZyxfVY.roa (raw, json)
Hash identifier: vlu7jMne1SjSsUFCH/84BKMEMR39tUOv17jk3iJEW+M=
Subject key identifier: 20:13:92:33:58:87:FF:BD:88:C4:18:8E:E0:3E:CE:21:9C:B1:7D:56
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187570168A190F61D8F072BC48A2E6B3A4B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IBOSM1iH_72IxBiO4D7OIZyxfVY.roa
Signing time: Thu 06 Apr 2023 14:38:42 +0000
ROA not before: Thu 06 Apr 2023 14:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 193.124.24.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.26.0/23 maxlen: 23
195.133.59.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:57:01:68:a1:90:f6:1d:8f:07:2b:c4:8a:2e:6b:3a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 6 14:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=201392335887ffbd88c4188ee03ece219cb17d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:03:d9:17:91:91:dc:c2:65:6e:1a:12:57:ab:
c1:2f:41:65:b3:a8:5a:32:8b:f9:31:e5:94:23:1f:
ce:7b:9d:3b:60:37:5c:cb:95:c4:5a:aa:84:47:1c:
b4:ab:e3:9f:38:19:9c:03:14:02:ee:ba:c2:73:6f:
2e:cf:a1:71:e1:f6:7c:86:5f:0e:68:a1:8d:cc:76:
8d:c6:4a:3d:89:60:b0:0d:1a:3d:a2:75:d5:38:6d:
02:81:e0:6e:55:89:21:09:3d:0a:28:81:6d:c2:60:
3d:fe:27:75:53:00:88:2a:fb:89:36:c6:89:0f:80:
6b:95:62:c6:d5:00:c0:f7:c6:34:69:e2:fc:7b:e0:
28:47:25:de:da:95:6f:6a:c9:b6:cd:f1:5d:ef:aa:
42:80:c1:74:65:21:08:03:c8:48:2e:d9:67:98:72:
6a:b0:c5:27:27:ee:72:2c:dc:ea:64:d0:0b:ec:19:
3f:55:00:26:12:67:fb:11:d7:db:4f:9c:f6:40:e7:
1a:58:22:00:b7:b9:0e:27:3b:e7:ae:1b:e1:2e:1d:
ae:0e:d6:44:40:18:d7:30:b1:1b:73:c0:f3:b0:ec:
c6:89:64:82:89:61:1b:f6:e4:68:79:c0:7d:4c:16:
b6:d3:4c:9b:4e:7c:c3:ca:23:e9:52:02:34:75:5c:
b7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:13:92:33:58:87:FF:BD:88:C4:18:8E:E0:3E:CE:21:9C:B1:7D:56
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IBOSM1iH_72IxBiO4D7OIZyxfVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.24.0/24
195.133.21.0/24
195.133.26.0/23
195.133.59.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9a:02:97:6f:18:c8:09:b2:11:26:5d:8a:00:33:00:1d:55:
ee:ac:c6:43:e3:ab:a4:83:48:8d:5a:5d:e8:19:e7:eb:d0:0a:
b4:d3:7b:f7:24:13:02:c1:cc:8a:46:7b:f7:81:44:c2:49:83:
24:07:ab:b7:fa:33:2a:04:19:50:4e:a9:3f:01:14:02:9a:95:
4b:bc:fe:28:bd:83:d0:1d:d1:ae:83:27:25:21:ef:79:5a:07:
08:a9:54:bf:9a:90:b8:41:75:80:1e:a3:29:c6:4b:a1:68:fe:
fe:16:a2:60:0d:50:a0:06:b7:dc:bf:10:c1:cb:7f:6f:38:23:
47:00:69:0a:fd:da:cd:bd:38:da:41:1c:b8:3e:7d:d1:d0:a2:
6a:68:c7:b2:14:67:b0:fe:90:ce:21:d6:54:d2:2f:b5:b2:93:
7c:25:c8:4d:ed:52:0f:33:20:13:b8:1d:fe:23:f6:3f:6a:2a:
e9:1a:1c:b1:26:c6:bd:93:b3:dd:03:fe:31:f2:14:f0:cd:0e:
dd:c0:3c:8f:9d:ff:ee:25:74:66:97:40:b4:21:ab:09:7b:5b:
85:fa:eb:18:e0:a7:d9:8c:a3:1a:12:96:ee:6d:93:33:95:9c:
94:d5:f5:df:f7:bd:c2:c7:75:f8:9f:53:08:a2:71:8a:6c:c9:
46:4e:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:00 2023 by rpki-client on console-fra.rpki-client.org