Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OTosuj7Rn2b6I-feqKcJtqqT8YY.roa
File: OTosuj7Rn2b6I-feqKcJtqqT8YY.roa (raw, json)
Hash identifier: npm7CA9Ok8l0iouJlfR4EnjQWGi28u5F4YkDJvQz4xc=
Subject key identifier: 39:3A:2C:BA:3E:D1:9F:66:FA:23:E7:DE:A8:A7:09:B6:AA:93:F1:86
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B71BD584B78E1D150CB6B1C64FFF04AFE
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OTosuj7Rn2b6I-feqKcJtqqT8YY.roa
Signing time: Fri 27 Oct 2023 15:25:16 +0000
ROA not before: Fri 27 Oct 2023 15:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 195.133.9.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Oct 2023 16:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:bd:58:4b:78:e1:d1:50:cb:6b:1c:64:ff:f0:4a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 27 15:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=393a2cba3ed19f66fa23e7dea8a709b6aa93f186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:cc:d1:ba:45:66:cf:b7:e8:83:28:61:fe:
9d:fb:2e:1e:d1:b3:cd:da:78:b7:50:2b:70:98:d1:
de:9e:f6:72:63:3a:6e:16:fa:e2:ef:08:a8:15:c1:
3a:8a:f5:e7:03:cb:ec:46:40:6f:be:11:c2:aa:4f:
56:4b:df:ba:15:93:9e:bc:03:90:00:81:ff:14:a7:
e1:c2:f8:d4:9e:30:23:49:66:6e:ba:31:cc:9c:f1:
9f:e2:98:1f:7c:d7:c6:2e:8f:5d:12:5c:91:78:1c:
3d:6c:74:98:87:f5:9b:8a:3c:96:f8:5e:a4:99:ea:
69:55:df:23:b6:af:40:18:6b:25:e2:10:cd:93:3d:
8f:17:ea:4a:d5:21:0c:49:5e:2f:fc:b5:bc:b6:dc:
e8:21:a1:6e:77:97:8b:9f:16:37:c9:3b:3d:32:d2:
f3:e9:ab:37:74:d8:7f:38:1f:ac:1a:8f:d3:15:3a:
db:90:c0:47:66:7e:29:97:2f:e2:06:cb:68:ff:12:
88:e8:98:8d:bf:c7:3a:e9:79:fe:99:a5:c1:cd:89:
37:1c:c5:c2:66:eb:21:7e:16:b3:40:9b:38:b3:30:
ad:d1:a9:c8:a8:74:89:d9:42:5f:75:98:cd:d5:98:
d3:66:e4:bf:ee:22:2e:53:66:d4:81:d0:b7:00:a2:
f0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3A:2C:BA:3E:D1:9F:66:FA:23:E7:DE:A8:A7:09:B6:AA:93:F1:86
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/OTosuj7Rn2b6I-feqKcJtqqT8YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.52.0/24
195.133.9.0/24
195.133.41.0/24
Signature Algorithm: sha256WithRSAEncryption
47:12:5c:7e:3d:4b:40:6c:d7:02:95:69:8b:13:cb:65:b6:e6:
70:82:4b:5b:c4:23:5c:37:bc:37:0c:c1:54:9e:15:51:cb:ac:
5c:12:4b:17:e0:cf:cc:d3:b9:c6:19:ee:f3:6a:28:71:f5:41:
d3:dc:eb:60:1e:df:a1:bb:97:d3:e0:cd:1a:5a:ed:67:52:9e:
e3:a7:6a:5d:62:6f:44:49:fa:1c:a4:c4:70:28:9c:ae:ae:90:
c7:fe:28:e1:e8:52:bd:40:c6:ac:00:94:48:b4:d2:44:b5:8c:
4e:0c:66:03:ad:48:81:d1:76:56:ca:80:d4:bd:57:eb:b8:17:
17:8a:f1:5b:91:69:cf:aa:fb:ca:a6:3a:d8:51:7c:8b:12:2e:
c9:57:ba:f9:83:50:ee:f4:f9:5f:e2:0c:51:c9:20:55:c9:8e:
a2:3e:83:8d:70:c5:8a:b8:fe:fe:62:bb:90:2e:d7:08:6a:0b:
6e:2f:57:8e:a7:76:fb:05:47:d9:a4:17:ad:68:5c:f5:ef:d1:
d6:53:cc:09:f4:51:17:75:85:2f:c1:65:09:ac:28:c6:1c:21:
a5:76:6f:8b:5c:9e:11:de:94:27:79:1b:26:8d:4c:67:d9:04:
e1:4a:42:d6:b5:cc:17:2b:65:04:d8:4c:91:61:61:58:99:03:
e1:be:01:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org