Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q1NMx23TkbCLfkU66UeViLS8eIs.roa
File: Q1NMx23TkbCLfkU66UeViLS8eIs.roa (raw, json)
Hash identifier: D6i9skxHFwVdoG/LH7++fTKuwcbJnjc597HOzxuHKI8=
Subject key identifier: 43:53:4C:C7:6D:D3:91:B0:8B:7E:45:3A:E9:47:95:88:B4:BC:78:8B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B429426B5EB2B14FB641EF31840EFC8CD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q1NMx23TkbCLfkU66UeViLS8eIs.roa
Signing time: Wed 18 Oct 2023 11:38:07 +0000
ROA not before: Wed 18 Oct 2023 11:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 195.133.78.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:94:26:b5:eb:2b:14:fb:64:1e:f3:18:40:ef:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 18 11:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43534cc76dd391b08b7e453ae9479588b4bc788b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5d:a0:69:03:39:a5:c6:18:4d:30:e9:ad:ed:
18:9a:1e:f6:99:f7:b7:7d:1f:f7:16:45:ff:05:2e:
01:a8:a8:bd:c9:f2:96:12:7b:8b:48:33:88:f2:23:
1c:a1:44:c3:3e:d8:c2:15:fe:f6:56:be:49:ec:f9:
24:95:94:f3:38:ff:26:71:93:ae:b0:bb:13:e4:16:
2c:a3:14:39:17:eb:fe:36:9a:3e:62:0d:0d:eb:34:
43:fc:7b:2a:ed:7d:fc:ac:26:9c:82:f1:e3:f6:76:
6c:3e:8e:e6:94:a6:36:37:ca:e5:09:19:b1:19:4d:
41:38:08:e4:e8:8e:57:12:12:dc:cd:6f:41:a1:d9:
bd:3c:9d:34:d9:f7:41:f1:c8:76:fd:bf:8d:e5:eb:
0a:66:6c:e1:ac:2b:8d:00:b9:6e:04:9d:4c:d8:5d:
1c:26:35:94:df:01:04:0d:25:a9:8a:cd:c0:2b:69:
c0:43:37:91:cf:cb:b1:0d:e6:3b:12:c9:76:87:5b:
7a:b9:13:31:04:e3:69:9a:6a:9e:f8:c5:6a:16:5e:
89:3c:9a:e2:50:6f:b8:c6:1c:ab:37:ca:e3:d2:ad:
7d:e1:8f:46:9e:e5:52:5e:5b:8c:cb:bd:39:3b:e8:
91:a0:7f:71:f5:68:91:41:07:b7:b1:ec:63:92:62:
a3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:4C:C7:6D:D3:91:B0:8B:7E:45:3A:E9:47:95:88:B4:BC:78:8B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Q1NMx23TkbCLfkU66UeViLS8eIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.37.0/24
195.133.78.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:48:da:0e:d2:4e:7a:21:6f:c4:09:c1:6e:ba:26:e9:17:05:
e0:b6:9a:ad:e3:74:48:47:a1:3f:05:b6:c2:6b:5c:8a:0b:02:
69:5e:63:d3:82:75:2e:ac:73:8b:26:e8:e2:30:26:e2:52:f7:
b4:bd:e9:52:88:04:d6:8a:7a:e8:33:d8:cb:11:de:9a:fb:55:
a2:19:59:7a:87:a7:7d:e4:11:6b:82:88:e2:23:bb:f2:de:e8:
7b:a7:74:bb:f1:3d:bb:5b:bc:ac:2a:fd:6f:56:49:10:ff:bb:
d2:90:b2:48:8c:b9:a2:91:49:dd:cb:40:d7:76:ab:7c:27:2d:
56:1c:2d:c9:c7:a3:fc:26:d7:bf:69:0c:f6:40:d8:b2:66:3d:
49:82:1d:fc:f4:70:b6:37:83:93:fe:a2:5d:a9:f1:4e:42:ed:
b8:47:9c:9a:5a:d1:58:15:91:3f:7e:e5:3c:dc:79:7c:ba:63:
c3:46:1c:ec:56:f8:f1:72:25:d0:64:68:74:b5:7f:ff:91:5c:
23:49:09:a8:c3:df:90:0e:f6:0a:26:0d:6b:7a:6c:41:6e:2b:
6b:c0:7e:3e:4b:6f:55:ff:c3:50:eb:de:46:2d:44:bb:ae:ed:
72:a6:a5:dd:ea:27:0b:9c:02:28:17:bb:ae:94:af:5e:ad:8c:
69:6c:bf:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 15 09:21:43 2023 by rpki-client on console-ams.rpki-client.org