Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L8KOyJq7UIZ9mSUlyKyfKTb5Z8E.roa
File: L8KOyJq7UIZ9mSUlyKyfKTb5Z8E.roa (raw, json)
Hash identifier: EQ9mioSv1WBgDErEGcz6GXBpKf+YlDVKpvQvV4eR5yQ=
Subject key identifier: 2F:C2:8E:C8:9A:BB:50:86:7D:99:25:25:C8:AC:9F:29:36:F9:67:C1
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A1CA130062E5E894AB852B2907035BC3F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L8KOyJq7UIZ9mSUlyKyfKTb5Z8E.roa
Signing time: Tue 22 Aug 2023 09:44:00 +0000
ROA not before: Tue 22 Aug 2023 09:44:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198802
IP address blocks: 195.133.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Aug 2023 12:05:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:a1:30:06:2e:5e:89:4a:b8:52:b2:90:70:35:bc:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 22 09:44:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fc28ec89abb50867d992525c8ac9f2936f967c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0b:60:62:9e:91:6b:1c:7a:0e:7b:ea:18:76:
b6:12:fe:99:c7:ca:5c:4a:e5:59:84:73:0b:3a:6d:
4a:26:46:1e:5e:a4:c8:2f:43:cf:13:b6:3a:d5:5b:
aa:f3:c5:0a:3e:aa:80:c5:67:11:5d:d0:c1:8d:45:
1e:b5:2d:a8:d2:2f:67:76:9b:c6:58:79:eb:ab:d5:
ac:ca:af:bc:62:fb:88:0b:0d:11:63:ac:3b:dc:f5:
c1:1e:43:44:de:28:90:cc:5c:80:a8:cf:a4:38:7f:
f8:22:83:b2:26:a6:b0:26:62:12:43:d9:16:25:d4:
6c:71:4b:e2:43:a1:24:8b:29:b9:68:e2:63:c3:46:
07:28:de:30:d5:ab:4a:a4:b5:58:90:0a:38:6a:6a:
9a:2e:3a:32:0c:09:f5:18:22:cd:fe:88:91:a0:9e:
83:85:b5:b9:6a:5a:50:c4:e1:a7:96:c5:5a:da:cb:
e8:7b:bf:c0:eb:a4:e4:d5:17:a4:b4:7e:60:0d:4b:
dc:8d:82:76:48:7e:00:81:6c:e1:0e:14:86:20:80:
26:72:e8:d4:bb:df:77:4f:6f:9a:ce:fd:b7:d7:b9:
41:93:c3:93:5a:78:08:22:d0:e5:35:63:07:e0:9d:
93:a0:d8:8d:64:82:a0:7f:cf:f3:69:43:49:6d:6c:
d8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C2:8E:C8:9A:BB:50:86:7D:99:25:25:C8:AC:9F:29:36:F9:67:C1
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/L8KOyJq7UIZ9mSUlyKyfKTb5Z8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.22.0/24
Signature Algorithm: sha256WithRSAEncryption
98:45:e2:5a:4a:c5:60:05:31:78:90:cb:27:52:13:de:cb:0e:
ab:fd:ae:a3:8c:91:7a:92:84:98:e7:c6:83:41:90:d8:41:a1:
89:59:2f:e2:af:16:49:af:db:d0:98:b8:91:f2:93:cc:c9:3f:
0b:d7:42:ef:c1:f8:db:a0:f4:f7:31:83:8d:c0:ca:53:1a:06:
ed:aa:71:ed:0d:6e:ad:0a:17:cd:08:df:48:37:e6:a1:04:53:
d8:c4:01:84:1e:85:e0:e0:05:b1:b9:4c:b3:a1:57:bf:ce:2d:
02:36:8e:e5:44:3b:c3:b4:94:96:27:40:54:42:44:5e:e1:8e:
d4:19:17:02:29:6f:42:b5:c9:f8:29:aa:05:ce:b4:8f:79:91:
4e:a6:28:28:43:3a:e3:a5:08:96:0e:67:83:3b:f2:f2:84:bd:
cd:b0:e1:dc:24:9b:61:06:a7:83:5f:29:ee:a6:f7:c8:43:76:
ed:30:8e:6e:59:e6:c4:74:d5:8e:6e:c4:44:de:2d:a2:9c:10:
7d:32:f2:13:15:87:14:f5:f1:39:79:8c:04:a7:7a:db:29:89:
0a:81:67:0b:76:50:89:29:1c:04:d4:3e:48:e7:33:55:d3:8b:
c2:64:78:de:21:92:87:48:e2:b9:0b:23:57:5d:13:f8:53:b0:
fe:b9:ba:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:13 2024 by rpki-client on console-fra.rpki-client.org