Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SWEksiCHuxtKgfFKxTHdtkziyRc.roa
File: SWEksiCHuxtKgfFKxTHdtkziyRc.roa (raw, json)
Hash identifier: W2RIysMZyKbDANUajHzdkTgLtJfXR4qSzh1+zs9iwE8=
Subject key identifier: 49:61:24:B2:20:87:BB:1B:4A:81:F1:4A:C5:31:DD:B6:4C:E2:C9:17
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01903007C7A5A57F4731B24599B96AAA1E5D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SWEksiCHuxtKgfFKxTHdtkziyRc.roa
Signing time: Wed 19 Jun 2024 10:25:34 +0000
ROA not before: Wed 19 Jun 2024 10:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48314
IP address blocks: 195.133.54.0/24 maxlen: 24
195.133.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jul 2024 08:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:30:07:c7:a5:a5:7f:47:31:b2:45:99:b9:6a:aa:1e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 19 10:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=496124b22087bb1b4a81f14ac531ddb64ce2c917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:e1:4f:74:fb:ff:7d:92:bc:41:20:b9:3b:
5c:e3:42:62:ad:6e:81:69:85:4b:af:49:0e:07:07:
75:bb:a7:a8:68:32:ff:cf:9d:a5:79:2c:e2:9c:90:
d3:30:e3:32:9a:a2:8d:a1:64:62:13:c6:2a:f2:20:
de:ef:b9:7b:f9:2d:9d:2d:b6:fb:d5:2e:0f:79:c3:
85:da:39:65:8e:e6:05:08:33:0a:05:b0:21:23:c8:
5b:66:f5:55:1a:79:8e:96:1a:2e:6a:a2:10:50:27:
d1:17:7b:54:27:38:0c:52:5b:da:bb:c2:52:55:df:
63:13:1b:fb:80:a4:3b:02:ee:70:1f:eb:a8:07:9e:
e4:5d:75:11:e3:b4:d4:0f:4d:57:05:ed:64:20:5d:
d7:84:3b:2e:f5:3a:bb:3d:c6:8a:82:f9:12:7e:4b:
d5:11:cd:c1:3b:dc:c2:b5:e7:43:b9:ab:7a:54:47:
55:7f:ba:57:53:a8:62:51:7f:ce:80:69:42:53:12:
75:01:bb:57:5c:d2:39:29:87:cf:f4:0a:eb:01:b7:
53:40:ec:f1:be:7f:f4:86:88:93:60:8a:72:a9:b1:
fc:b5:69:7c:76:51:fe:ff:99:6c:23:8f:b2:62:8e:
c0:f5:ed:26:88:d9:4f:62:01:55:72:09:04:8c:14:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:61:24:B2:20:87:BB:1B:4A:81:F1:4A:C5:31:DD:B6:4C:E2:C9:17
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/SWEksiCHuxtKgfFKxTHdtkziyRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.54.0/24
195.133.74.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a3:da:35:53:7b:8c:16:5a:78:35:05:bd:9d:9f:e2:b3:a7:
98:24:05:10:84:76:23:5a:7f:8a:63:71:04:f3:da:a1:ab:e0:
10:97:f9:da:f7:64:c0:c8:4c:b6:cd:e5:db:99:83:87:33:bc:
d9:92:36:f0:6c:5b:63:d4:fe:30:81:02:d5:5d:8c:e3:b4:ec:
4a:f2:35:8b:65:87:48:32:5d:89:33:ad:5f:08:92:4c:bd:c2:
0e:cb:c2:46:fb:d6:49:1c:4e:0c:b8:99:4f:83:ba:a4:8a:ae:
ff:47:d4:6f:03:8d:17:84:b1:c7:f4:9e:09:a0:b1:ed:4a:aa:
31:83:a1:18:6b:6b:8f:47:d3:d1:33:25:63:7a:2e:9c:d2:d7:
0b:4d:c4:98:04:b2:9b:6c:b5:93:20:5f:6f:32:e6:38:71:e3:
75:eb:ed:c8:db:36:56:67:2d:c0:41:63:7b:bc:96:d2:e3:73:
d2:98:62:47:81:43:17:90:9f:c2:76:07:9e:9b:5a:e8:50:cc:
72:1b:79:24:d5:c3:52:da:1e:7a:68:9e:54:66:25:c9:59:c7:
76:a4:5d:17:6f:38:0e:01:be:c5:39:a9:2e:75:00:e9:b6:43:
9d:8d:1d:c8:36:84:84:1a:8d:06:61:81:d8:ac:24:f7:0e:82:
92:55:ba:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 10:40:49 2024 by rpki-client on console-ams.rpki-client.org