Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/atFnB-WI9WCvZNqrL_8V36D2IzQ.roa
File: atFnB-WI9WCvZNqrL_8V36D2IzQ.roa (raw, json)
Hash identifier: qtZNu3FhHIj5VQ8F3f8yxqg+u0wGs2QaD4GkUnkTKUM=
Subject key identifier: 6A:D1:67:07:E5:88:F5:60:AF:64:DA:AB:2F:FF:15:DF:A0:F6:23:34
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B3C8452442C64D1F65A48C5F9B0209503
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/atFnB-WI9WCvZNqrL_8V36D2IzQ.roa
Signing time: Tue 17 Oct 2023 07:23:06 +0000
ROA not before: Tue 17 Oct 2023 07:23:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 147287
IP address blocks: 195.133.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 11:38:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:84:52:44:2c:64:d1:f6:5a:48:c5:f9:b0:20:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 17 07:23:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ad16707e588f560af64daab2fff15dfa0f62334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:40:3d:4a:f4:17:8f:c8:fc:13:12:78:34:bd:
03:25:b4:76:71:ed:80:82:33:78:6c:9e:e4:e8:27:
59:a4:df:3b:e9:84:f3:cf:2e:6b:3c:23:cb:aa:34:
47:f7:9e:4b:c9:52:0e:bc:36:46:cc:95:f1:70:46:
df:fd:15:70:49:57:6e:8b:dc:35:d6:94:eb:07:d4:
69:a8:56:4f:eb:cc:82:01:70:2e:7c:89:62:df:19:
31:f6:1c:e2:52:fa:85:c6:07:81:f0:eb:d5:5f:24:
22:4a:f4:05:86:43:d9:44:fc:1f:21:77:55:db:e6:
59:f1:ca:1b:a9:19:0d:d4:cc:50:b7:65:b6:d9:8b:
9e:fb:6a:e8:e4:71:b8:7e:3f:97:72:d3:a6:de:d8:
1c:90:62:c9:6e:d4:be:d6:69:35:39:b4:78:6b:db:
1f:3d:d9:b6:3f:f2:86:e1:43:c7:2b:6a:f9:72:23:
52:30:b7:02:ed:29:00:1a:7d:9b:bd:80:4b:00:bd:
70:3c:7e:e4:c6:2f:67:7b:df:95:c9:63:ef:80:37:
38:c3:43:54:13:64:6b:9b:66:b5:74:2d:7b:cd:0a:
be:a4:01:ee:59:9e:b9:a9:4d:01:b8:54:b8:d2:9e:
d6:c4:c6:4b:d3:6b:41:65:ff:a5:ee:3e:ad:e2:a3:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D1:67:07:E5:88:F5:60:AF:64:DA:AB:2F:FF:15:DF:A0:F6:23:34
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/atFnB-WI9WCvZNqrL_8V36D2IzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.78.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a9:e6:2c:71:c8:0d:77:8b:0d:99:7b:3d:ec:9a:87:a0:cc:
cf:32:f9:bc:ff:74:9e:44:45:1a:c2:bd:f4:43:ff:65:9a:0f:
7e:25:94:29:76:ab:53:8b:44:ee:27:13:d1:c4:23:13:ad:0f:
a6:07:41:ad:1a:50:a6:3f:0a:b8:45:26:a8:de:ae:72:23:77:
c0:db:a3:de:5f:6f:f7:37:a5:2b:bd:ca:24:3c:b0:27:a6:d1:
67:2d:e4:b4:59:c9:cc:ce:1c:ea:24:8b:6f:21:32:fd:08:3a:
1d:5e:ac:46:97:eb:e9:a1:48:10:43:f8:2f:4c:a1:4a:43:aa:
1e:2b:db:28:6f:f3:31:1e:39:62:9d:73:60:17:32:3f:99:d2:
5b:82:6a:f0:2f:00:8a:62:05:c8:14:eb:68:81:bc:26:10:9e:
5c:ac:16:08:98:9c:9b:b3:15:f2:32:45:58:e6:d3:6f:1b:de:
ce:47:ef:a5:26:f3:6d:ea:d3:f6:a6:50:97:a4:36:88:d0:4d:
71:7e:b5:e7:8e:44:6b:a5:b5:57:e5:71:af:99:21:d7:7c:1d:
14:0c:4a:79:bd:e3:67:00:1d:fe:bd:16:69:e3:31:4a:b5:e0:
1a:14:4d:ba:2d:2a:e4:24:87:b5:11:36:df:cf:c2:56:e5:cf:
82:0d:77:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:21 2024 by rpki-client on console-fra.rpki-client.org