Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wjq7dObaP-xOxKUowsmEp2QQf2k.roa
File: Wjq7dObaP-xOxKUowsmEp2QQf2k.roa (raw, json)
Hash identifier: 1WP/qOfKVyhH3ArHXRfb8J6iUY82unyR8atiw7b2LJ0=
Subject key identifier: 5A:3A:BB:74:E6:DA:3F:EC:4E:C4:A5:28:C2:C9:84:A7:64:10:7F:69
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F6707FDB6940FB4B1F5CA0760E4A24C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wjq7dObaP-xOxKUowsmEp2QQf2k.roa
Signing time: Sun 01 Jan 2023 22:15:01 +0000
ROA not before: Sun 01 Jan 2023 22:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204902
IP address blocks: 195.133.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Jan 2023 06:56:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:07:fd:b6:94:0f:b4:b1:f5:ca:07:60:e4:a2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a3abb74e6da3fec4ec4a528c2c984a764107f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:04:52:ec:c4:b6:d5:a7:2c:fe:32:c2:b2:d8:
f7:e5:63:3e:29:66:fa:f3:ba:76:e7:6e:da:a7:44:
ff:55:59:c5:10:c7:18:d5:74:e6:e1:41:48:16:94:
26:66:57:15:ef:48:a5:ac:d1:43:4a:65:13:a0:32:
0a:cb:29:1f:25:f8:03:eb:d0:5b:4e:1b:2b:e2:fb:
e1:1d:ad:15:34:79:a7:86:c9:53:7e:32:7e:f5:f7:
1b:4f:7c:24:20:14:85:d3:ba:c8:44:80:3a:77:4c:
99:52:05:3a:86:0a:c8:f8:70:ed:52:f3:37:7c:10:
8f:25:da:d6:cc:78:e9:0c:bc:4c:6c:03:41:70:e3:
00:e3:32:52:8c:5c:f9:6f:fc:e1:86:ba:85:3b:00:
2f:76:5a:0f:fc:02:84:b6:72:44:eb:a5:f9:7b:ed:
a1:9c:21:ae:99:84:fb:27:98:62:63:3b:8a:9f:fa:
d1:03:ed:a5:13:29:ca:56:ba:50:e1:f5:6b:14:6e:
ef:72:24:c8:53:6a:8f:f5:4b:6e:37:35:46:ef:57:
85:5c:07:10:db:04:61:fa:d7:d8:23:a0:79:83:28:
43:79:74:29:0d:de:aa:54:c2:a6:71:b6:9c:46:fd:
ba:91:db:34:e6:0a:cd:de:4c:96:8e:73:56:e4:32:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3A:BB:74:E6:DA:3F:EC:4E:C4:A5:28:C2:C9:84:A7:64:10:7F:69
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wjq7dObaP-xOxKUowsmEp2QQf2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.77.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e8:0c:46:97:29:58:06:b2:c2:bf:e0:28:e8:2e:9c:ea:56:
ce:89:03:10:a9:ca:98:6f:ed:fb:ea:3b:2d:65:31:2c:99:d9:
c7:79:3c:59:f7:b9:f1:29:b9:d2:5f:6f:ee:d2:14:75:b0:fc:
d1:d4:44:f4:88:e3:5f:95:3b:00:3a:46:25:ef:38:7a:65:28:
22:1b:4b:59:74:ff:ca:4a:9c:46:63:09:d5:cd:c0:58:1a:03:
da:48:93:86:17:ad:07:e2:c3:eb:72:1d:fb:50:4b:cc:1c:a4:
77:a7:91:ca:77:af:a7:86:54:64:51:8f:68:cd:a2:fb:9b:a4:
d8:f3:47:f9:a9:ea:af:d4:98:b7:82:be:1f:b8:c6:32:10:d8:
d5:fa:87:61:6e:60:a8:10:0f:5b:c3:97:de:51:bd:16:2f:9c:
c7:7e:22:fb:8e:56:88:ea:eb:0e:73:91:5a:b9:58:30:67:f0:
14:ec:28:15:64:71:6d:78:72:c8:da:94:80:c3:a2:d3:5b:58:
90:88:6d:94:d2:83:d9:2a:61:40:d4:b6:24:82:3c:5b:05:01:
6e:00:87:e2:e0:c1:42:7b:47:d3:08:0b:ac:62:4d:9b:94:57:
cf:51:5f:c5:3d:ca:19:b6:fc:5d:45:68:02:98:30:38:8d:21:
de:52:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org