Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VWyA2VIpPn7MJPgIcqRUl9XVU48.roa
File: VWyA2VIpPn7MJPgIcqRUl9XVU48.roa (raw, json)
Hash identifier: tp11ikzYjzx0Om4DWisiMUlZT3gbXZDain31tuyoca0=
Subject key identifier: 55:6C:80:D9:52:29:3E:7E:CC:24:F8:08:72:A4:54:97:D5:D5:53:8F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018682E8B959CA2F1783C9F53A1A40B091C5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VWyA2VIpPn7MJPgIcqRUl9XVU48.roa
Signing time: Fri 24 Feb 2023 10:12:15 +0000
ROA not before: Fri 24 Feb 2023 10:12:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204902
IP address blocks: 195.133.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:e8:b9:59:ca:2f:17:83:c9:f5:3a:1a:40:b0:91:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 24 10:12:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=556c80d952293e7ecc24f80872a45497d5d5538f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:f6:0d:31:b3:d4:56:ab:2c:5b:ad:62:61:
93:fc:5e:98:45:ba:ac:d9:61:87:08:19:47:08:28:
52:4b:d4:fb:c1:ab:a3:26:ea:ac:d4:f4:16:38:20:
9e:b6:2f:c2:de:d0:e3:c2:b8:0a:27:82:1b:a7:4d:
33:ea:20:49:ff:49:3c:d7:37:cb:f2:14:12:b7:e0:
43:ab:52:39:73:ab:e2:fa:5c:23:dc:dc:08:ae:7d:
6f:d1:36:fb:f2:c8:0b:63:15:72:1d:02:46:02:d7:
1e:0a:f1:50:13:77:31:ac:83:8d:79:95:5e:b1:b6:
27:b9:f6:bd:49:a7:dc:29:2b:16:c2:67:9b:0c:97:
8b:2a:3c:c9:38:f8:72:5b:45:96:8e:b5:f6:76:34:
ba:22:36:0f:f0:e2:db:7c:05:82:da:69:e9:f2:94:
b7:21:05:13:6a:6f:58:63:93:e4:59:bb:6f:c2:3e:
e0:86:07:41:77:77:c4:cb:b0:6b:55:3c:c2:54:a3:
54:e1:9e:93:0d:2a:45:db:c0:13:fb:c9:56:90:fc:
13:b1:a5:6d:84:62:f1:2f:f8:d4:6d:2f:4a:95:2e:
bd:5c:03:51:8a:75:26:af:14:15:28:c6:b9:df:4e:
ae:dc:07:12:5b:d9:49:06:a7:de:f1:6b:5a:6b:27:
8e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6C:80:D9:52:29:3E:7E:CC:24:F8:08:72:A4:54:97:D5:D5:53:8F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VWyA2VIpPn7MJPgIcqRUl9XVU48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:17:60:55:65:d6:eb:f8:62:47:8e:4b:a1:8d:3e:42:ee:78:
6e:98:cc:69:39:07:33:fd:ea:5b:a5:85:30:3d:0d:a5:89:1f:
28:1a:36:45:ab:30:80:0b:5f:e2:52:35:d2:24:ec:68:7e:e1:
f5:e9:d7:f3:85:7d:ae:b3:34:9c:b8:60:b5:6c:7d:48:fd:ba:
2a:c5:e6:48:64:43:56:a5:4c:d3:bb:26:3c:44:9c:af:b8:42:
fe:e7:c5:21:1c:fb:e6:24:16:32:a9:f9:3d:25:c0:f9:24:7f:
34:09:7d:cd:46:10:7e:51:0e:3b:5a:dc:cd:e2:14:54:a8:7a:
2e:d7:30:61:ae:f6:f5:ef:11:d9:61:b1:fb:47:35:90:83:1c:
6c:14:81:1b:da:19:7b:7f:3a:a0:11:8e:ee:2b:e2:18:64:ab:
3c:2f:e8:aa:3f:a6:ed:82:53:b6:1d:a2:b8:b7:e2:ae:58:8e:
0c:cd:bb:bc:a6:06:63:c0:51:5a:d1:88:9d:46:16:ee:e5:08:
bf:b8:de:95:89:3e:63:7c:d3:66:8c:16:e9:d4:09:b2:7d:69:
37:9d:ba:64:27:27:23:ec:c2:66:84:33:30:75:e6:25:2c:2a:
ff:d3:1f:9c:c5:c1:47:8d:1e:2a:57:8d:40:a0:34:f3:71:e8:
14:44:d1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org