Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TRe8L8t7MjDn68ogTn1xAHMHvfA.roa
File: TRe8L8t7MjDn68ogTn1xAHMHvfA.roa (raw, json)
Hash identifier: SnVg2YKHUs0cEPPKop/lPJp/iKb8V5r5WT8LHiI/EPw=
Subject key identifier: 4D:17:BC:2F:CB:7B:32:30:E7:EB:CA:20:4E:7D:71:00:73:07:BD:F0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F66F796026C352ECE4DC01BE37C53E4
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TRe8L8t7MjDn68ogTn1xAHMHvfA.roa
Signing time: Sun 01 Jan 2023 22:14:57 +0000
ROA not before: Sun 01 Jan 2023 22:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49434
IP address blocks: 195.133.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f7:96:02:6c:35:2e:ce:4d:c0:1b:e3:7c:53:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d17bc2fcb7b3230e7ebca204e7d71007307bdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:20:70:8a:4f:34:90:88:43:9d:11:f5:7d:
a8:5e:b4:e6:dc:db:94:00:4d:56:df:2f:ea:59:84:
af:af:87:79:10:38:f8:f5:99:8b:58:a8:9d:4f:17:
5d:09:f6:40:8a:50:c4:11:56:28:76:7d:52:dc:81:
fa:8a:19:a5:33:fc:ce:0c:fc:ca:b2:92:2b:87:a8:
0a:28:f9:89:2a:87:79:43:3d:16:46:aa:17:c3:2d:
8f:d5:27:d2:c1:be:30:7a:24:d7:12:d7:27:99:d4:
02:6d:9e:70:35:2a:3a:46:0f:4e:bc:d3:b5:64:78:
66:60:23:ab:ef:fe:1e:b9:a4:dc:28:12:6a:55:fd:
37:9a:f9:86:03:00:3a:bc:82:b9:09:86:20:c1:94:
96:c3:27:2a:93:4a:bf:ef:a6:61:d2:e0:0d:54:c3:
49:79:a5:48:00:bb:18:60:3e:3f:b4:d3:ef:23:e1:
7c:9f:c3:a9:d0:51:a6:5e:a5:1c:0f:93:3b:7d:a7:
47:c6:d6:53:a4:bd:50:0d:73:26:23:1d:80:6e:df:
1f:dd:d2:6c:9d:09:df:5f:e7:93:cf:5e:c2:f6:46:
72:38:c5:49:e0:67:f4:45:1d:5b:9e:d4:c4:be:83:
09:95:c2:9f:16:9e:0f:41:08:6e:53:68:4c:27:be:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:17:BC:2F:CB:7B:32:30:E7:EB:CA:20:4E:7D:71:00:73:07:BD:F0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/TRe8L8t7MjDn68ogTn1xAHMHvfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
30:9d:de:26:ca:03:68:9b:7a:17:59:a7:8e:84:36:a5:59:ec:
a0:37:d9:0e:01:bc:0e:79:66:11:3e:af:01:de:fa:84:08:43:
1f:4f:9b:76:3a:66:9c:fc:6c:06:b6:dd:48:31:2f:3e:10:ae:
c0:84:fa:1b:5e:fd:cc:91:e1:64:e6:c4:14:f7:9a:be:f3:bb:
43:21:71:42:6a:83:32:7f:01:89:73:35:a0:18:9b:4b:5e:3e:
6d:17:20:61:c2:05:e7:0a:9a:d2:c3:f6:b5:6b:97:11:00:ee:
f4:f7:2f:6e:93:3c:95:56:73:24:a3:c7:72:a9:28:8f:08:c6:
f1:4e:3d:4c:f0:ae:b7:2b:d8:1d:3a:cb:96:21:cd:4c:03:0f:
69:09:f1:b5:1e:0b:81:41:8b:c1:12:99:e1:d0:9f:ad:65:78:
9f:e1:28:5e:2c:f8:83:2a:af:98:f6:fc:8e:a8:8d:7e:c8:90:
95:37:a9:b1:78:b2:39:12:27:6d:71:b6:0f:69:5a:e3:c8:67:
a4:f4:f6:29:61:5d:63:e4:83:c8:0f:ef:5f:4c:ea:bc:56:3c:
72:31:ed:06:54:75:3e:80:49:c8:a1:20:37:d5:4e:e0:55:89:
1a:63:e7:a7:2d:2a:aa:6e:26:02:73:af:04:e0:1b:6c:25:d5:
a3:60:96:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:04 2023 by rpki-client on console-fra.rpki-client.org