Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RtnKe9Bruf_XiR005UoQr6cizOY.roa
File: RtnKe9Bruf_XiR005UoQr6cizOY.roa (raw, json)
Hash identifier: hazkjVb820O3MN2S8y92e3SOzirCHC59Jyu2VCH03po=
Subject key identifier: 46:D9:CA:7B:D0:6B:B9:FF:D7:89:1D:34:E5:4A:10:AF:A7:22:CC:E6
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B057918030AD7F1231944CB87F3C7A693
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RtnKe9Bruf_XiR005UoQr6cizOY.roa
Signing time: Fri 06 Oct 2023 14:51:43 +0000
ROA not before: Fri 06 Oct 2023 14:51:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 212.193.30.0/24 maxlen: 24
195.133.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:05:79:18:03:0a:d7:f1:23:19:44:cb:87:f3:c7:a6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 6 14:51:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46d9ca7bd06bb9ffd7891d34e54a10afa722cce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0b:c6:21:1b:55:3f:7c:16:eb:f8:b2:1f:7e:
79:d1:47:82:85:dd:75:5c:84:5e:c3:7f:e9:8c:fe:
a2:c8:3c:a4:2e:40:2f:dc:8f:94:60:ec:13:06:d0:
57:07:98:f9:40:0d:02:dc:2b:6b:ed:a9:99:33:f6:
30:7b:95:b3:47:84:a9:da:3e:7b:89:f1:dc:ae:38:
d6:b8:e6:0a:21:a0:84:58:43:a0:28:0b:2e:d8:87:
a7:3c:25:a8:72:b9:78:9a:13:ab:9b:a0:2f:4a:e9:
88:16:6e:4f:df:ec:04:e9:8c:e9:96:6d:aa:ab:3b:
ed:82:64:61:af:09:7f:33:9d:0c:1f:7e:81:22:11:
28:3e:67:1e:e8:8a:fa:77:48:25:45:98:3f:2c:45:
0e:56:ab:c5:8f:e7:45:be:83:ba:35:92:64:fc:35:
95:a9:f4:b2:68:8b:9e:68:ca:bd:8c:81:c9:24:4c:
94:fd:71:b2:e0:b7:b5:eb:ba:08:d2:e5:ce:ad:37:
0c:30:4b:bd:f2:28:e3:9f:c3:60:57:4a:23:68:f4:
39:32:88:dd:d9:44:b1:d2:29:1b:e3:7b:d2:66:ab:
70:33:3f:79:27:31:d1:99:85:e4:32:fd:dc:d8:bb:
06:6e:91:65:5a:1a:59:2e:53:19:f4:82:e2:96:ba:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D9:CA:7B:D0:6B:B9:FF:D7:89:1D:34:E5:4A:10:AF:A7:22:CC:E6
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/RtnKe9Bruf_XiR005UoQr6cizOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.38.0/24
212.193.30.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:85:4d:fc:67:35:a6:ed:8f:1f:56:7a:71:f4:86:a7:3a:f8:
33:3e:54:0a:89:a6:9c:ac:6d:87:28:92:54:50:41:a0:63:9d:
06:01:6d:6e:4c:3b:ec:44:65:7a:4d:ec:63:f1:70:96:d7:5e:
c7:64:c6:3d:7a:2e:1c:45:9f:79:13:01:de:be:2f:65:8b:eb:
8b:8a:30:17:85:76:bf:57:f7:80:de:b2:0f:e1:03:49:4d:30:
b8:bc:f3:1a:8b:d5:8c:02:96:05:6a:ce:a4:2c:27:a7:52:ff:
25:d0:77:76:95:c0:81:6c:44:29:06:02:d0:ad:70:82:05:d1:
bd:4c:49:22:d6:a8:2f:72:43:a4:51:b8:8b:00:69:df:50:f5:
0b:5f:3a:f1:04:96:1b:5e:d8:45:66:06:c7:02:4c:3e:d7:f6:
a1:38:b1:6b:03:6a:9c:86:ca:8b:0f:df:88:e1:7e:53:27:3d:
92:d0:eb:60:bd:94:68:74:77:c3:7b:04:2b:48:d4:95:b0:d6:
37:a8:11:9b:61:de:d1:44:da:1f:37:89:18:d9:02:bb:17:7f:
17:5c:79:c9:0b:fb:12:99:0a:c0:54:f5:8e:11:67:70:1b:40:
a2:64:46:0a:bb:bc:5d:d6:1d:25:9a:d8:16:05:e7:67:e1:4c:
ca:2e:2d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 05:49:44 2023 by rpki-client on console-ams.rpki-client.org