Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UId_05g66vRnb8uUcPba8dZ5vfo.roa
File: UId_05g66vRnb8uUcPba8dZ5vfo.roa (raw, json)
Hash identifier: 39OJMSPTCuedstQbcQgReafDLeUOWEdnj5oEvOdqCaE=
Subject key identifier: 50:87:7F:D3:98:3A:EA:F4:67:6F:CB:94:70:F6:DA:F1:D6:79:BD:FA
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B0367EAE8D4BF5D28BAFBAC3483965A69
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UId_05g66vRnb8uUcPba8dZ5vfo.roa
Signing time: Fri 06 Oct 2023 05:13:43 +0000
ROA not before: Fri 06 Oct 2023 05:13:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 195.58.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:67:ea:e8:d4:bf:5d:28:ba:fb:ac:34:83:96:5a:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 6 05:13:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50877fd3983aeaf4676fcb9470f6daf1d679bdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:a4:5d:50:7a:b6:59:5a:cf:69:6b:b6:10:
a4:bf:0c:6f:09:b2:d9:46:c6:2f:3f:16:b6:3e:00:
33:88:8e:d4:7a:26:91:93:d8:bb:57:48:81:10:6c:
5c:93:ca:40:b3:15:91:05:3d:56:51:0a:0c:97:b2:
34:e9:af:0d:66:8c:92:e0:68:45:db:6c:10:be:62:
c0:8d:16:69:4b:c2:97:c0:13:41:88:aa:c9:32:44:
0b:0d:39:ae:3a:50:06:5a:d5:46:89:d0:46:8b:c3:
c7:75:f1:56:9a:27:c5:68:6e:1b:c1:8f:91:c4:ce:
30:a0:38:38:ec:a9:fd:d7:96:ca:90:fa:93:83:9e:
df:b7:01:59:90:a2:55:64:dd:83:5b:2c:34:ed:bf:
0f:2f:99:c0:3a:9c:e3:2e:19:05:f2:f4:64:77:87:
ef:95:82:91:b7:2a:b3:4a:72:95:3c:fa:4f:bb:37:
51:74:b8:8a:93:b6:1d:20:2e:fa:03:c2:73:9b:62:
7e:32:dc:5c:8f:78:bc:9f:63:67:ed:58:a1:4f:c2:
3e:3f:a5:c6:16:eb:71:09:61:7e:9d:0f:67:b7:08:
60:f1:c3:35:de:26:88:a2:e1:d3:63:7c:dc:0e:2b:
c1:00:32:e6:03:14:d2:83:59:10:fe:cc:a5:25:92:
36:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:87:7F:D3:98:3A:EA:F4:67:6F:CB:94:70:F6:DA:F1:D6:79:BD:FA
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/UId_05g66vRnb8uUcPba8dZ5vfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.63.0/24
Signature Algorithm: sha256WithRSAEncryption
23:13:42:e9:a7:68:f5:cf:a0:87:f5:f5:77:8e:bb:42:53:6d:
e4:81:de:b2:63:46:95:95:d0:15:81:3b:1b:9c:11:5e:79:4d:
78:2b:31:be:98:98:44:3b:49:84:be:5d:cb:9a:e0:cc:d6:1d:
ca:43:11:65:96:ab:64:2e:ee:93:b2:99:19:c0:7a:46:98:4e:
c7:39:cd:6b:16:8e:9a:93:38:10:83:9c:75:bb:79:68:fd:41:
09:b0:eb:26:87:ed:ef:e7:4c:bf:54:ec:c6:4f:46:a0:fe:a9:
1a:3f:59:c0:d1:f9:81:50:b7:f0:81:be:96:47:5d:d2:d6:20:
5c:f1:d4:7f:63:cd:5b:cc:e5:29:8f:a5:66:a1:bb:bb:b0:25:
ba:89:46:36:04:cf:6f:86:76:cd:4e:1c:d0:b1:cc:af:56:b3:
a2:7b:98:47:36:e9:10:a1:a0:a8:18:c3:d7:c5:c8:2f:68:a7:
f4:6d:99:4d:25:d9:24:6e:00:70:d4:4a:a6:f1:76:4f:7b:27:
08:ad:91:30:09:a9:69:af:ef:6b:ce:4f:ce:ac:c3:e2:4b:98:
71:dc:9a:95:c7:32:06:d4:25:de:c1:0d:d6:fd:b8:8b:2a:31:
af:09:b9:05:1e:9c:8a:f7:a6:cc:ac:4e:fd:b4:1c:f1:e5:60:
06:f4:0f:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsDZ+ro1L9dKLr7rDSDllppMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMxMDA2MDUxMzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDg3N2ZkMzk4M2FlYWY0Njc2ZmNiOTQ3MGY2ZGFmMWQ2NzliZGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPykXVB6tllaz2lrthCkvwxvCbLZ
RsYvPxa2PgAziI7UeiaRk9i7V0iBEGxck8pAsxWRBT1WUQoMl7I06a8NZoyS4GhF
22wQvmLAjRZpS8KXwBNBiKrJMkQLDTmuOlAGWtVGidBGi8PHdfFWmifFaG4bwY+R
xM4woDg47Kn915bKkPqTg57ftwFZkKJVZN2DWyw07b8PL5nAOpzjLhkF8vRkd4fv
lYKRtyqzSnKVPPpPuzdRdLiKk7YdIC76A8Jzm2J+Mtxcj3i8n2Nn7VihT8I+P6XG
FutxCWF+nQ9ntwhg8cM13iaIouHTY3zcDivBADLmAxTSg1kQ/sylJZI26wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFCHf9OYOur0Z2/LlHD22vHWeb36MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvVUlkXzA1ZzY2dlJuYjh1VWNQYmE4ZFo1dmZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzo/MA0G
CSqGSIb3DQEBCwUAA4IBAQAjE0Lpp2j1z6CH9fV3jrtCU23kgd6yY0aVldAVgTsb
nBFeeU14KzG+mJhEO0mEvl3LmuDM1h3KQxFllqtkLu6TspkZwHpGmE7HOc1rFo6a
kzgQg5x1u3lo/UEJsOsmh+3v50y/VOzGT0ag/qkaP1nA0fmBULfwgb6WR13S1iBc
8dR/Y81bzOUpj6Vmobu7sCW6iUY2BM9vhnbNThzQscyvVrOie5hHNukQoaCoGMPX
xcgvaKf0bZlNJdkkbgBw1Eqm8XZPeycIrZEwCalpr+9rzk/OrMPiS5hx3JqVxzIG
1CXewQ3W/biLKjGvCbkFHpyK96bMrE79tBzx5WAG9A+1
-----END CERTIFICATE-----
Generated at Mon Oct 16 09:34:30 2023 by rpki-client on console-ams.rpki-client.org