Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PVdvdNNa2sdSp_yCdIl_-WvE9vI.roa
File: PVdvdNNa2sdSp_yCdIl_-WvE9vI.roa (raw, json)
Hash identifier: Ac3T+3bMVSAmxLGdBl5tdTDC9jm1KZzeOLBTVNhkvhM=
Subject key identifier: 3D:57:6F:74:D3:5A:DA:C7:52:A7:FC:82:74:89:7F:F9:6B:C4:F6:F2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C16D141A3410B08FC87CFF1612A1BD86A
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PVdvdNNa2sdSp_yCdIl_-WvE9vI.roa
Signing time: Tue 28 Nov 2023 16:44:21 +0000
ROA not before: Tue 28 Nov 2023 16:44:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211138
IP address blocks: 195.58.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Nov 2023 08:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:d1:41:a3:41:0b:08:fc:87:cf:f1:61:2a:1b:d8:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 28 16:44:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d576f74d35adac752a7fc8274897ff96bc4f6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:a1:43:fb:dc:16:3e:0e:24:03:e3:0d:16:
23:26:aa:e7:35:37:e9:a2:85:c7:47:18:62:ec:64:
e9:4d:69:d1:54:6a:57:3c:16:81:71:97:b4:ca:b1:
6c:b8:53:8c:75:b4:66:8a:dc:00:a9:f1:70:3c:05:
4c:35:db:e5:bf:30:6c:9d:4a:cb:26:e9:34:8b:8e:
2c:e0:0c:79:f3:29:8a:73:57:7b:5d:80:4a:f8:96:
43:4e:05:90:2c:af:4a:cc:46:d0:3f:e7:45:d2:eb:
43:9f:dc:83:c9:cd:bd:27:59:d7:bb:cf:84:b2:63:
75:40:7d:00:12:15:d9:4a:a0:a2:78:59:77:3d:a6:
6b:71:69:54:af:15:97:66:92:10:18:05:d5:7c:68:
24:12:c1:a5:eb:72:7e:83:83:60:35:87:58:90:63:
60:ba:31:b2:aa:2d:b2:aa:7d:57:1a:c1:7c:a3:5b:
62:81:18:34:03:5b:ca:a7:eb:bd:c9:19:85:72:0e:
f7:22:fe:a8:b0:05:3e:99:df:23:52:44:1b:47:51:
aa:05:ab:31:85:ad:8e:6e:e4:93:1c:80:b7:3e:1b:
10:a1:b4:6f:a2:dc:7b:a4:29:83:27:4e:f1:6a:c7:
1d:24:30:02:e0:40:17:d0:3e:bb:88:ae:30:20:12:
6e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:57:6F:74:D3:5A:DA:C7:52:A7:FC:82:74:89:7F:F9:6B:C4:F6:F2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/PVdvdNNa2sdSp_yCdIl_-WvE9vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.39.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:f3:d7:d5:fe:64:b0:81:e2:9d:13:4e:20:e0:d5:b9:9f:e9:
de:ea:64:00:f4:e2:70:7e:fa:7f:4c:fe:9e:91:ce:39:2d:3e:
07:10:19:c6:f2:e1:84:db:32:03:92:37:99:fe:e4:66:db:0d:
3f:6c:6f:44:85:4a:0b:56:df:58:7f:aa:fc:ad:86:ac:7d:48:
33:e7:62:37:37:cb:ce:54:ae:16:3a:42:1d:f9:eb:0c:72:4f:
bb:da:5b:92:47:c3:4f:9e:a4:b3:16:bb:4d:72:43:b1:fc:e7:
d2:d2:7f:11:b7:e7:6c:c6:b6:34:d7:38:4a:47:c4:99:86:89:
32:af:bc:63:c5:ab:96:e1:84:8c:96:0e:f4:57:99:6d:9a:d7:
8e:ba:05:80:d9:85:dc:11:99:78:09:05:70:a4:e4:d3:d4:7e:
d5:4b:e4:26:b4:28:b0:14:cc:72:a4:83:5a:91:18:e6:fb:2d:
13:d9:9d:08:8a:e5:0d:e3:a3:d3:68:b4:ac:a5:65:33:e6:b7:
a1:5c:fd:5c:17:41:a3:56:71:39:a7:d7:a6:67:15:18:7a:c0:
01:8f:f0:20:08:ee:86:d4:bd:25:40:01:32:fc:48:77:3a:f6:
25:be:84:39:52:57:9f:19:69:da:ee:b1:6d:dd:a1:64:fa:b4:
c6:fc:45:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:15 2024 by rpki-client on console-fra.rpki-client.org