Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IcyaeccL96YLMdL04BMNTDY8o9Q.roa
File: IcyaeccL96YLMdL04BMNTDY8o9Q.roa (raw, json)
Hash identifier: DNXcSD1PjOSSBZLCzmSU3/tNChrq5/7EM1NoA/u4PLc=
Subject key identifier: 21:CC:9A:79:C7:0B:F7:A6:0B:31:D2:F4:E0:13:0D:4C:36:3C:A3:D4
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D443441963BFE3F621F478623032041B1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IcyaeccL96YLMdL04BMNTDY8o9Q.roa
Signing time: Fri 26 Jan 2024 05:18:11 +0000
ROA not before: Fri 26 Jan 2024 05:18:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 195.133.24.0/23 maxlen: 23
212.193.26.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 03 Feb 2024 07:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:44:34:41:96:3b:fe:3f:62:1f:47:86:23:03:20:41:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 26 05:18:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21cc9a79c70bf7a60b31d2f4e0130d4c363ca3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:39:f7:a1:2a:cf:be:97:35:57:b4:62:6b:
4f:60:9d:e6:2d:6a:f4:4a:f7:ba:4c:c8:2f:49:7e:
ad:82:d0:fa:72:f7:e4:35:cf:06:dc:51:c2:08:c0:
04:77:81:52:a3:a3:aa:72:73:90:f7:82:2b:9b:71:
a2:1d:c9:35:66:b9:04:d0:82:5a:d4:2e:b2:63:a9:
2e:d2:e3:00:56:6a:f3:ec:25:ad:c7:91:13:81:b2:
b7:8d:a7:e5:31:a9:87:f0:67:38:08:51:05:6d:e8:
45:70:a5:6e:87:3e:2e:36:af:c7:4c:6c:8a:ec:c5:
c1:ea:23:09:b6:78:db:c7:5a:0d:ea:5e:3f:10:95:
a1:c9:f4:16:a4:28:58:85:0f:20:c9:d9:b6:59:87:
cc:ec:28:fd:79:b6:6b:44:a4:b8:32:0c:81:03:94:
09:bd:6b:7d:11:48:69:7f:ac:8a:c4:0a:49:5c:b9:
ab:5e:51:fb:c2:72:12:d3:04:f0:fe:35:ed:d0:a8:
36:c8:38:f3:4b:3c:21:c0:88:4a:a6:ce:84:5c:f1:
c6:bc:b7:df:1f:ed:89:a0:12:14:41:5b:80:b0:f5:
08:ee:a3:86:35:11:ab:96:8c:fa:87:6c:94:82:f2:
a0:9a:6d:09:dd:52:66:d7:5b:2c:55:b4:5a:e4:90:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CC:9A:79:C7:0B:F7:A6:0B:31:D2:F4:E0:13:0D:4C:36:3C:A3:D4
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/IcyaeccL96YLMdL04BMNTDY8o9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.24.0/23
212.193.26.0/23
Signature Algorithm: sha256WithRSAEncryption
64:fe:13:12:78:cc:01:26:25:94:a6:d9:6a:63:b6:ca:a0:a9:
4f:03:ba:43:3d:e7:18:04:bf:43:f5:e8:ec:00:43:19:1c:8a:
3d:37:d9:6f:c3:d5:06:6c:77:94:7a:c9:27:9e:d2:9c:58:4c:
29:27:22:d7:06:d4:d9:d0:17:9e:6b:c6:05:ae:45:db:22:08:
cd:09:ef:99:a2:61:38:96:a3:ac:35:62:7a:ec:46:ce:ba:b5:
21:2b:b0:25:84:63:82:fd:12:f5:de:25:fc:d0:e1:75:a4:5a:
ca:e8:9b:13:3d:bd:c3:14:6d:26:c0:fb:44:bb:d5:cb:8c:be:
21:91:cc:ca:93:91:ad:58:8f:5b:93:d3:fa:77:2b:a9:47:8d:
bc:9b:89:30:7e:d5:66:90:15:92:9e:36:80:0e:30:fc:04:f5:
9b:20:90:8b:ad:04:66:4e:42:33:6f:c4:95:62:48:a8:71:f0:
c9:ec:3e:41:c7:a3:90:ae:58:26:1b:a7:bb:72:aa:d1:31:e7:
76:c8:7b:7c:8e:4a:6d:e1:15:82:e4:f0:ef:0f:55:d8:b3:e7:
5d:4b:4d:ee:1d:e2:bf:00:8b:26:a9:bd:c2:cb:08:8a:e4:0e:
52:d8:7d:b4:fe:69:33:c5:9f:cb:0e:4f:72:e7:82:dd:db:a2:
bb:55:31:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 08:35:28 2024 by rpki-client on console-ams.rpki-client.org