Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ql-e0EzTzpGhndO8tqTWA52DMPI.roa
File: Ql-e0EzTzpGhndO8tqTWA52DMPI.roa (raw, json)
Hash identifier: ghXutXVLt7T6Lz2ABYHkSppINTBbQBdzGa86P/NqERk=
Subject key identifier: 42:5F:9E:D0:4C:D3:CE:91:A1:9D:D3:BC:B6:A4:D6:03:9D:83:30:F2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B1ABFC41746B21D47DD9C11D7BED0A44E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ql-e0EzTzpGhndO8tqTWA52DMPI.roa
Signing time: Tue 10 Oct 2023 18:00:57 +0000
ROA not before: Tue 10 Oct 2023 18:00:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47540
IP address blocks: 195.58.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:bf:c4:17:46:b2:1d:47:dd:9c:11:d7:be:d0:a4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 10 18:00:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=425f9ed04cd3ce91a19dd3bcb6a4d6039d8330f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bc:6e:47:25:78:0c:66:65:02:36:0e:58:de:
a3:a0:a6:e0:da:4b:ce:0f:1b:69:93:f7:2e:f5:7b:
85:9f:9d:37:cb:cb:c3:b4:8f:96:2e:4d:5f:4d:7c:
58:7f:c4:4d:d0:75:f6:39:92:90:d5:f6:7a:d6:a3:
22:41:e2:21:b6:de:51:c1:b8:00:ff:13:05:e4:04:
e6:b2:1f:21:ac:5e:48:9d:67:12:dc:fd:f2:f3:46:
fc:b5:7a:71:61:23:e9:4e:e9:b0:0e:b5:d8:9e:0b:
cc:a8:e3:dc:bd:74:73:df:e4:41:1a:96:2d:b6:96:
04:be:27:7b:53:5a:23:da:5a:02:58:7e:76:ca:eb:
36:e1:88:c0:e4:35:11:1a:22:60:db:c8:81:57:e1:
19:ad:47:cf:0b:dd:3d:47:8f:53:3d:37:3a:75:4f:
7d:44:15:cb:6e:7d:be:32:48:04:ff:01:0b:75:bd:
df:c7:8d:8f:e7:98:32:b4:47:47:e6:ec:0f:a2:b3:
2d:be:13:2b:c1:ce:9a:62:18:61:9a:43:ab:6a:09:
fa:bd:50:93:ea:5e:d0:36:a1:03:f1:12:95:ab:3b:
7c:72:c2:21:4c:d7:d3:24:b2:8c:bd:80:90:fa:2d:
f8:88:a2:0a:21:f7:d2:28:75:f0:87:01:16:37:9b:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:9E:D0:4C:D3:CE:91:A1:9D:D3:BC:B6:A4:D6:03:9D:83:30:F2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Ql-e0EzTzpGhndO8tqTWA52DMPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.53.0/24
Signature Algorithm: sha256WithRSAEncryption
42:67:c3:e8:89:f2:61:81:52:d3:6b:64:4e:ff:35:7f:65:40:
8a:41:78:56:85:9f:5a:12:e7:ab:84:b3:54:7d:ae:2b:e9:11:
00:3c:f9:48:36:87:35:35:6f:de:a0:9b:26:79:f3:8e:b3:17:
a7:3b:81:33:2e:e3:0c:31:66:94:6e:b6:69:cf:12:fc:26:76:
d1:a1:1d:33:8c:dd:c7:41:0e:9d:ed:34:36:ff:07:cd:c1:30:
27:71:30:12:1f:e1:ac:91:bc:3d:dd:94:6f:d8:90:94:61:0c:
42:c8:2a:a7:6d:23:f8:9c:32:41:26:ee:96:80:bb:f2:a8:22:
f9:16:cd:4d:6a:e7:8d:1a:fa:db:59:73:16:33:b6:85:ec:4b:
fc:b1:18:e9:6f:8f:08:66:5a:38:61:af:a7:2b:ee:3c:13:a5:
fc:dd:de:18:46:fd:86:1a:c9:c4:ea:cf:5f:b5:5a:fa:82:9e:
60:c2:d9:c0:ad:88:1d:93:75:f5:0d:d6:e8:5b:12:22:75:b8:
fc:f1:86:e5:43:40:aa:85:bc:db:84:ee:6d:a6:49:b9:88:19:
e4:5d:07:0d:0a:94:10:08:dd:95:b5:d6:66:90:16:e3:43:45:
f5:a3:93:b4:70:d4:e3:7c:73:42:4b:33:1d:81:0e:88:5a:34:
7a:87:74:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org