Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_jImEfH7O9WyL5RYZN0-IKhp-dI.roa
File: _jImEfH7O9WyL5RYZN0-IKhp-dI.roa (raw, json)
Hash identifier: aND0hSxwlcn3KbS+6ZEGbeAo+RCcceAmqtNjjelKsTg=
Subject key identifier: FE:32:26:11:F1:FB:3B:D5:B2:2F:94:58:64:DD:3E:20:A8:69:F9:D2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B71E860E3F273FCD825A9013FAE4EFA71
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_jImEfH7O9WyL5RYZN0-IKhp-dI.roa
Signing time: Fri 27 Oct 2023 16:12:16 +0000
ROA not before: Fri 27 Oct 2023 16:12:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 195.133.9.0/24 maxlen: 24
195.133.41.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:71:e8:60:e3:f2:73:fc:d8:25:a9:01:3f:ae:4e:fa:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 27 16:12:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe322611f1fb3bd5b22f945864dd3e20a869f9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:be:e2:e8:9b:40:82:63:69:0c:8f:1a:93:
51:f8:55:78:77:20:2a:14:ec:9b:2d:cd:36:b6:2d:
17:2b:95:16:37:5b:6a:69:9c:59:43:77:d2:1d:cd:
fa:b3:cb:a4:bd:68:ea:48:88:6e:94:3f:44:30:4a:
a5:d0:52:b2:f5:94:81:67:f2:28:2f:41:f9:94:13:
a1:87:12:49:d5:c1:4d:e9:48:0c:5a:20:43:65:b8:
dc:91:9c:ae:73:60:11:a3:21:3c:ae:2f:f1:50:e9:
c3:3a:1a:e1:38:c1:ad:04:93:10:17:6c:e9:6b:b5:
bd:2f:45:7e:8a:b2:89:ea:6a:22:d5:29:bb:6a:ec:
66:35:84:74:a1:b7:3e:29:e4:c3:d4:5c:ff:85:27:
68:f3:85:c3:ed:54:f3:8d:f1:ba:ba:ca:84:82:c8:
48:46:58:1f:40:a8:fa:14:76:c9:59:35:16:a2:4f:
43:89:68:ed:3d:b3:ed:ef:31:d1:a1:b3:c9:b9:6b:
48:73:7e:87:7f:b0:7f:4f:26:44:ba:19:17:33:bf:
88:53:d8:e9:fe:e2:82:32:b3:66:3e:8b:9b:3e:f5:
3a:0b:64:56:b7:84:d8:34:ee:c0:7d:ce:09:52:a8:
fb:ae:d6:4d:65:99:46:e5:9b:3f:79:00:25:21:a4:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:32:26:11:F1:FB:3B:D5:B2:2F:94:58:64:DD:3E:20:A8:69:F9:D2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/_jImEfH7O9WyL5RYZN0-IKhp-dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.9.0/24
195.133.41.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cd:6f:88:55:29:2d:47:85:d7:d3:89:09:ef:3c:ac:fb:1e:
a2:4c:e9:92:e9:f2:4f:70:d3:e9:dc:d0:a0:71:e9:94:ed:0d:
9e:26:cc:a8:10:85:2d:a9:ae:96:0f:6b:e5:c2:09:d8:35:49:
da:e5:b2:ca:ce:54:4c:7a:2c:c9:cf:40:1c:f9:1e:ca:d7:5c:
9f:b5:e5:fa:bd:1d:a8:5d:15:65:9c:59:6f:63:84:4d:cf:2c:
7e:4e:5b:e5:8c:f3:ce:78:28:18:23:84:18:07:cc:3a:1b:f9:
39:ac:db:74:59:53:36:97:52:42:ed:1c:56:0a:6f:ae:4b:7e:
bf:e7:d9:90:a2:2a:3c:d4:64:7e:66:ec:ef:85:14:6e:c8:9e:
cc:d5:63:41:fe:e6:c6:7d:57:a9:9d:c7:a2:85:66:3e:d5:4f:
90:1b:37:57:bf:35:87:a4:3b:a9:30:18:a7:01:2f:87:05:0d:
05:37:bc:ac:45:ed:b3:eb:e4:7f:35:2a:31:95:64:b2:55:58:
28:bc:08:10:d6:fd:46:dd:45:c8:50:0d:50:6f:6f:d1:d4:b0:
63:06:80:5f:3f:82:d6:af:32:01:63:7e:d7:70:5a:f9:d9:03:
45:61:d3:51:d4:a7:62:09:47:74:e0:bb:09:e7:59:db:85:9a:
2d:ca:c7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 11:21:55 2023 by rpki-client on console-ams.rpki-client.org