Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TQd6gxAY2Hj6dS0U8GVvf37VXDk.roa
File: TQd6gxAY2Hj6dS0U8GVvf37VXDk.roa (raw, json)
Hash identifier: rVaRBeA2UnC2tIFvQX/vopsrw/loqgan3HxA7ugaFUE=
Subject key identifier: 4D:07:7A:83:10:18:D8:78:FA:75:2D:14:F0:65:6F:7F:7E:D5:5C:39
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670288BEDD31452824AF27C7A856AB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TQd6gxAY2Hj6dS0U8GVvf37VXDk.roa
Signing time: Sun 01 Jan 2023 22:14:59 +0000
ROA not before: Sun 01 Jan 2023 22:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202372
IP address blocks: 195.133.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:02:88:be:dd:31:45:28:24:af:27:c7:a8:56:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d077a831018d878fa752d14f0656f7f7ed55c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3a:5d:5f:43:a1:11:6f:48:32:c7:8a:89:c5:
16:95:ce:9b:43:b1:3f:b3:91:c3:29:cf:6a:82:82:
e2:d1:97:94:fd:59:28:c6:48:77:d8:7c:7d:e4:30:
31:d0:e9:7c:b4:f8:1a:dc:9e:eb:50:17:cb:cb:ce:
b9:bf:10:30:99:26:a3:15:43:96:b9:a4:3c:54:94:
6b:c7:de:14:b5:21:52:60:27:5a:fb:6e:f2:39:e2:
9f:e6:d1:b9:d4:df:f4:df:14:94:76:1a:5a:2d:e0:
34:03:1a:e4:c9:ef:85:b8:33:bd:ac:bf:ff:ea:b8:
e0:e2:28:76:d7:c0:38:f9:a1:f9:76:ad:dc:0a:9d:
9c:09:63:37:6d:0f:66:b2:7f:8a:c3:3e:1e:93:a5:
60:02:c5:4f:cd:92:85:e5:34:a7:68:06:26:f4:d1:
4c:0b:ff:90:5d:8a:6d:61:f4:73:a6:8f:15:aa:dc:
09:7b:ef:c5:2c:62:96:84:c2:ef:6a:57:1f:cd:96:
30:10:eb:59:18:63:01:59:b1:6d:3a:80:32:c7:f3:
3e:17:08:96:69:51:67:3c:a2:37:5b:44:49:c3:3d:
70:68:61:98:44:80:bd:87:81:92:54:ba:b6:bf:d8:
99:b6:72:96:7c:23:11:56:8f:fd:d3:2b:b0:d6:ab:
cb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:7A:83:10:18:D8:78:FA:75:2D:14:F0:65:6F:7F:7E:D5:5C:39
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TQd6gxAY2Hj6dS0U8GVvf37VXDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:25:02:6c:09:86:4e:bb:56:da:ad:9f:50:47:cf:27:b6:3a:
fb:e4:09:87:80:56:c4:6a:c8:02:09:cc:8a:f0:58:81:2d:3a:
8b:1c:35:26:4e:0b:59:4f:91:d2:41:d1:dc:44:44:83:77:17:
32:3e:ce:53:bd:88:a7:9f:83:7f:e2:7a:39:92:7a:6c:ea:c9:
6d:cb:96:1c:39:ab:15:20:be:32:6e:d7:b5:6a:94:c0:c5:93:
37:7a:15:b8:da:f4:4e:bb:3d:e0:20:a1:1a:b0:28:4a:93:57:
07:1f:93:a9:33:d3:e1:47:f2:9c:3f:84:e1:d9:4a:4c:16:0d:
05:f3:96:07:99:24:1e:1f:d1:c0:09:4c:8c:bf:30:2a:db:89:
91:a8:0c:95:4c:a5:66:07:11:b8:d0:92:a7:c9:f0:79:38:61:
f0:e3:47:57:19:3e:7f:3c:fa:3d:a4:1a:20:7b:38:8f:95:63:
4a:06:5c:c9:78:b8:00:98:2b:71:1b:d6:12:5f:05:48:bf:11:
b8:51:d3:fa:fc:97:b3:8c:a3:0d:78:a6:6a:54:02:3e:b7:54:
b7:12:db:3b:99:2d:e7:69:21:f2:c4:78:f9:d3:90:2e:06:81:
0e:e8:84:a1:8d:74:4f:2c:86:fa:2b:40:d0:92:0e:fa:e0:12:
ca:94:b4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org