Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Uu1aMpdQbQCJWCXTsWtYpFl95SQ.roa
File: Uu1aMpdQbQCJWCXTsWtYpFl95SQ.roa (raw, json)
Hash identifier: Oa4R7vGtpaPNAVLllWs5uGegJTT646aqITtsLOKtvkk=
Subject key identifier: 52:ED:5A:32:97:50:6D:00:89:58:25:D3:B1:6B:58:A4:59:7D:E5:24
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189B618B53114A5EAB4FCFB31DCC2D15F27
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Uu1aMpdQbQCJWCXTsWtYpFl95SQ.roa
Signing time: Wed 02 Aug 2023 11:53:39 +0000
ROA not before: Wed 02 Aug 2023 11:53:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 195.133.79.0/24 maxlen: 24
194.87.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b6:18:b5:31:14:a5:ea:b4:fc:fb:31:dc:c2:d1:5f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 2 11:53:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52ed5a3297506d00895825d3b16b58a4597de524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:96:9a:ba:28:f2:9f:22:08:7b:7c:41:d0:
8c:ef:9f:b1:17:bd:ec:67:36:f0:0a:b8:78:1b:c8:
79:17:f9:b3:38:5b:b6:e9:66:b3:5a:e9:7a:57:61:
f0:a7:38:30:a5:ce:a1:94:d0:71:dc:48:ce:47:df:
f1:a8:f8:66:e5:79:ac:60:7d:ae:55:b6:5b:3e:dc:
00:0b:08:41:ff:49:04:7c:b8:27:bb:8e:43:3b:ed:
48:1c:18:4c:71:ce:ce:47:df:3b:1f:b3:e1:17:06:
d7:fd:40:42:73:a2:4b:f6:f2:03:c4:ed:96:d8:1b:
c3:d7:f7:54:c9:e6:04:98:11:79:f2:42:d1:44:5c:
91:cb:8d:b0:5f:14:9b:37:30:44:0f:51:da:ba:a8:
dd:b6:4d:4d:0e:76:6c:dd:be:80:de:ae:1b:fc:51:
ab:08:6a:a2:e5:9a:ce:aa:71:1a:4d:d3:74:e8:f1:
ac:fd:79:90:27:2a:8b:2e:69:20:29:c5:46:97:f4:
8b:fb:41:1a:e7:29:82:a0:6a:95:43:4b:56:74:91:
b8:88:59:0f:f3:80:20:81:0f:f1:c6:45:38:b2:6d:
42:63:90:95:cc:80:cb:d5:4d:aa:50:e9:f6:86:63:
57:d9:ab:a7:d8:15:c3:70:7a:99:a7:9b:ab:d4:a6:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:ED:5A:32:97:50:6D:00:89:58:25:D3:B1:6B:58:A4:59:7D:E5:24
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Uu1aMpdQbQCJWCXTsWtYpFl95SQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.63.0/24
195.133.79.0/24
Signature Algorithm: sha256WithRSAEncryption
55:1e:c3:37:12:91:5d:4f:17:3a:ba:0e:38:f9:d5:1a:1b:9c:
f3:b9:42:54:75:61:72:f8:1a:f9:6e:31:50:a2:75:d1:9a:30:
b3:e4:1b:90:f2:ef:f5:77:a9:71:6c:35:37:d2:2c:87:69:f4:
a9:cf:b1:51:1f:2a:ca:b8:7f:7b:93:02:d2:e2:21:40:50:a5:
88:d2:6d:be:f4:ad:dc:ff:f2:95:61:b4:f2:89:e9:c0:6f:b7:
e4:6c:a1:3a:13:71:74:77:e9:c3:62:1d:15:e8:50:fa:93:c7:
de:12:27:0e:b7:76:bc:f9:14:27:eb:1a:a7:b3:dc:39:fe:ed:
b6:b3:d5:df:fa:b0:ce:e6:4c:77:0e:19:6f:d5:de:ed:c4:a0:
af:cf:b9:7a:45:d8:de:1e:92:b1:1c:a0:51:df:7b:96:5d:e1:
16:d4:00:f6:4f:03:c7:09:1d:e7:6e:77:71:1f:ea:ef:20:c9:
12:f6:37:a3:00:85:da:e2:0e:b0:6e:d9:cc:c1:8b:36:1b:8f:
d2:0d:dc:07:5f:76:91:d2:7d:ea:df:9c:76:da:12:b0:46:34:
15:0a:53:f6:c7:44:01:63:3e:ea:be:73:76:ce:4a:a1:eb:19:
3d:af:fe:fb:10:74:d9:fe:5e:69:a4:65:02:97:e5:d2:0b:41:
dd:8b:ea:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 15:54:53 2023 by rpki-client on console-fra.rpki-client.org