Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QwMPlSW5f4M-dHLiSW31z5tcKtM.roa
File: QwMPlSW5f4M-dHLiSW31z5tcKtM.roa (raw, json)
Hash identifier: q0lH1VIBopFjdldC+d6oby1AVMU1g53ikeC10SA7fM4=
Subject key identifier: 43:03:0F:95:25:B9:7F:83:3E:74:72:E2:49:6D:F5:CF:9B:5C:2A:D3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C7D3DB98551C10060821E476D5BBF38AF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QwMPlSW5f4M-dHLiSW31z5tcKtM.roa
Signing time: Mon 18 Dec 2023 14:04:06 +0000
ROA not before: Mon 18 Dec 2023 14:04:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63018
IP address blocks: 195.133.29.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7d:3d:b9:85:51:c1:00:60:82:1e:47:6d:5b:bf:38:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 18 14:04:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43030f9525b97f833e7472e2496df5cf9b5c2ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:9e:d5:dd:8e:8f:49:53:67:ae:3b:ba:03:
0d:c6:6d:10:f2:74:d7:ae:54:2c:e6:5c:1e:d5:e6:
d4:b3:07:24:0d:7e:fe:aa:8a:db:b2:8c:f9:f8:c8:
80:72:5d:0a:e1:81:98:82:a9:68:7d:a2:c7:87:25:
18:7a:e8:68:5d:4a:fc:cf:85:d7:75:63:58:cc:a3:
eb:dc:fb:2e:a7:98:60:60:2f:59:30:64:72:db:04:
d8:c0:34:97:70:2b:fd:d4:cf:d2:1b:1e:a3:ef:89:
44:42:27:5f:ff:4b:04:1e:34:57:e3:6b:fa:6b:63:
60:2a:e8:c6:3c:a8:61:bc:37:3f:ec:00:e4:7b:d9:
d8:fc:2c:78:df:87:b9:b6:3a:06:cd:35:ed:8b:8e:
7c:2c:96:fa:f7:96:ef:4b:ea:c6:0e:ca:91:e4:f1:
98:3e:83:35:d5:46:d3:ab:87:dc:26:b2:08:86:a6:
cc:36:eb:73:01:16:d2:3b:c4:a4:ab:49:61:1e:77:
3e:f9:49:c2:32:86:68:07:5a:7c:53:67:17:57:6a:
55:f7:15:6c:1c:20:80:e9:d3:f8:85:83:c3:61:8f:
62:ed:19:42:bc:68:97:e0:36:5f:79:6f:5c:45:85:
1e:5e:a4:3c:8f:da:7f:27:de:5d:45:9a:e9:6d:bc:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:03:0F:95:25:B9:7F:83:3E:74:72:E2:49:6D:F5:CF:9B:5C:2A:D3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/QwMPlSW5f4M-dHLiSW31z5tcKtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.29.0/24
Signature Algorithm: sha256WithRSAEncryption
22:00:a2:7f:c7:92:77:d0:f2:ff:08:4f:87:01:83:24:05:88:
59:61:62:33:17:95:eb:0e:ed:53:25:13:63:f4:20:8d:b3:7e:
18:30:01:c5:26:bc:95:94:0a:db:7f:4b:dd:ec:fa:68:1f:b0:
74:16:85:de:2e:9b:2c:43:4d:45:ec:e3:c9:bf:f7:94:a8:5b:
96:ee:5d:f8:84:51:52:4f:24:84:43:77:27:fb:c4:04:7b:d6:
40:78:cf:8a:df:f8:e3:47:be:57:af:8f:bc:61:aa:d8:df:b2:
a2:8d:1c:eb:f5:64:da:0d:1e:0c:9a:c9:03:2e:b2:25:7d:10:
3f:d5:30:11:f3:70:92:9b:a8:f5:56:68:e5:a1:69:73:99:db:
63:54:9b:cb:74:d8:68:21:be:fd:96:02:2c:c3:f4:3d:d3:f9:
f2:55:5a:b9:a6:e3:49:9c:5f:0b:97:aa:2a:e2:07:6f:ed:0a:
e5:92:87:e5:89:ad:63:91:a6:0a:a5:73:df:76:f4:89:32:44:
7d:43:92:df:71:c0:72:f1:9a:b3:cb:92:5a:d6:8c:4c:ba:33:
16:b5:b3:14:87:e1:1c:15:f8:fd:4e:09:55:15:23:f0:d7:9d:
02:f4:52:d9:0a:8b:a7:fa:f1:f0:af:a3:bc:74:29:c7:f9:58:
db:fc:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:18 2024 by rpki-client on console-ams.rpki-client.org