Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KV5TVLJN_NsG5ABvSCH7CBZZcSI.roa
File: KV5TVLJN_NsG5ABvSCH7CBZZcSI.roa (raw, json)
Hash identifier: vm/Z8K6563Sm8nyCouPvnm5vy4MndNYwZwTtJK9zoiU=
Subject key identifier: 29:5E:53:54:B2:4D:FC:DB:06:E4:00:6F:48:21:FB:08:16:59:71:22
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A88BAAE573F6DE1E81DE983FBCB93F58C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KV5TVLJN_NsG5ABvSCH7CBZZcSI.roa
Signing time: Tue 12 Sep 2023 09:30:50 +0000
ROA not before: Tue 12 Sep 2023 09:30:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 212.192.213.0/24 maxlen: 24
195.133.42.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:ba:ae:57:3f:6d:e1:e8:1d:e9:83:fb:cb:93:f5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 12 09:30:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=295e5354b24dfcdb06e4006f4821fb0816597122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:11:2d:7b:be:c5:7f:9e:30:a1:a3:98:70:7f:
7b:fc:76:30:30:b6:a3:cc:72:0e:91:cb:ad:99:ab:
98:6d:6c:cb:3e:bb:7d:cc:cb:1c:dc:59:58:11:2d:
18:ef:dc:75:f9:90:53:46:80:95:b3:09:62:6d:60:
d2:d3:f7:3d:af:7f:41:e7:2b:52:90:6a:f9:8f:8c:
84:61:4a:98:17:41:c3:f4:a3:cd:6b:75:f6:18:ce:
ec:46:af:2d:a9:40:1a:97:82:ce:0d:39:d9:d3:56:
89:ce:8e:b3:21:68:66:7a:80:53:69:df:8e:8d:ba:
f0:a2:92:54:d9:f6:85:28:54:ad:c3:74:df:48:7f:
5e:a4:f1:08:87:55:8e:a1:ac:68:85:10:44:94:d3:
7e:8b:cd:a8:70:e4:ba:3b:28:82:59:6b:f7:e2:3a:
18:12:21:90:1e:b0:0b:0f:90:be:e8:ed:43:43:87:
70:f7:1d:bf:b8:e1:49:27:02:b6:32:de:65:a9:c9:
a5:dd:e5:04:3a:82:45:72:60:3a:4d:69:b6:74:05:
13:cc:8f:93:15:6e:3b:25:f3:e2:59:14:a8:df:f9:
4b:e6:30:1d:68:cd:5c:79:3c:f7:6f:49:eb:53:45:
10:fc:f0:b1:1d:63:99:91:32:15:67:ff:9f:e2:05:
4d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5E:53:54:B2:4D:FC:DB:06:E4:00:6F:48:21:FB:08:16:59:71:22
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/KV5TVLJN_NsG5ABvSCH7CBZZcSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.42.0/24
212.192.213.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:17:c7:94:88:c3:46:ec:d3:d7:ce:ab:56:97:66:bb:15:b9:
9e:fb:09:77:50:52:a7:4a:a6:2b:7b:0c:a6:a3:c3:70:ac:a7:
3d:66:5e:38:67:fb:35:a4:c7:e8:8c:03:d2:4a:ab:e8:51:f3:
93:e7:8f:60:b6:73:72:84:c6:8a:90:44:6f:07:57:8c:27:76:
fc:c8:18:68:63:4e:96:42:f6:7a:db:ef:2b:9c:7f:af:5f:fa:
32:83:17:4a:b7:db:ed:dc:e6:80:8b:29:be:8a:7a:fc:65:9a:
45:d9:b4:80:17:0e:65:45:da:4a:76:67:83:06:80:e4:bc:be:
36:3e:e5:31:ac:2e:57:3f:8a:b3:8d:b2:bc:2f:62:94:69:ce:
11:49:7a:9c:61:3b:37:ac:41:a5:d1:19:58:34:bd:1c:5e:a8:
f2:94:8d:87:fc:6b:bc:e5:00:93:7f:4f:e0:30:e6:17:ee:e7:
b8:56:19:0b:08:91:14:44:4c:98:25:73:18:13:82:5a:a5:81:
01:34:83:25:79:6f:81:ac:be:fe:6a:55:c9:52:1e:61:a0:2b:
04:90:be:00:38:c8:91:fa:38:17:2e:b7:13:28:cd:e4:3f:95:
b5:74:3b:5a:a2:f9:2d:bc:55:f1:08:e2:f0:d7:47:90:25:31:
af:98:2f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 13:18:47 2023 by rpki-client on console-fra.rpki-client.org