Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cU3UkgizPXF_wt-_2wMdfcxlg4M.roa
File: cU3UkgizPXF_wt-_2wMdfcxlg4M.roa (raw, json)
Hash identifier: OwHpNzoS7YuK+roNigxUrgPiY0tgst1TpXD4ViaDJuc=
Subject key identifier: 71:4D:D4:92:08:B3:3D:71:7F:C2:DF:BF:DB:03:1D:7D:CC:65:83:83
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B236F90FDAAE2DDBA7DFB053E3F0288D2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cU3UkgizPXF_wt-_2wMdfcxlg4M.roa
Signing time: Thu 12 Oct 2023 10:29:55 +0000
ROA not before: Thu 12 Oct 2023 10:29:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 195.133.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Dec 2023 03:54:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:23:6f:90:fd:aa:e2:dd:ba:7d:fb:05:3e:3f:02:88:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 12 10:29:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=714dd49208b33d717fc2dfbfdb031d7dcc658383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0b:a7:6e:bd:7c:59:e8:1d:51:31:d6:eb:86:
5b:d2:02:e1:5e:62:a1:6d:0b:bb:f0:7b:cb:9b:30:
42:02:0f:98:fd:2e:1c:9b:88:1e:29:c5:7d:ed:a8:
e6:06:f7:00:0f:f2:88:36:bd:90:24:73:6f:9a:6a:
06:49:05:da:1f:39:64:1e:3c:ac:4a:30:1e:c6:f1:
89:1e:dd:8b:e5:47:e6:a7:f0:ad:97:4d:76:1e:c9:
63:9b:86:48:23:45:14:56:54:3c:67:62:e3:aa:12:
18:74:d7:d3:81:0a:cc:cc:99:c3:e3:c8:37:36:a8:
f3:ad:40:08:c5:b7:f3:1a:40:05:e6:7a:cf:fb:b1:
08:f3:97:a5:87:68:96:8d:9a:59:e3:41:35:06:d9:
21:41:be:e3:77:b3:f3:78:b2:ea:59:06:fe:b5:f4:
f2:92:53:47:02:e5:cc:f9:a6:21:fd:5d:61:07:f0:
3f:7a:3a:80:9c:74:e9:9f:e1:26:2d:3e:21:3e:4d:
00:53:d9:fa:35:8d:57:80:1f:bd:23:c8:b8:d4:96:
59:0d:56:3e:a5:4c:48:30:9c:e2:6d:ae:af:b1:42:
d9:f3:df:e2:6e:15:55:f9:da:48:90:47:27:81:89:
91:72:41:01:ff:47:64:30:3d:f3:06:92:91:a5:f0:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4D:D4:92:08:B3:3D:71:7F:C2:DF:BF:DB:03:1D:7D:CC:65:83:83
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cU3UkgizPXF_wt-_2wMdfcxlg4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:55:e6:ba:57:fe:9d:e0:8f:f2:81:a5:1a:7f:d0:2f:d2:b5:
a6:3f:53:c0:e6:43:7e:1c:85:4e:72:bf:99:45:82:b3:d0:07:
9a:6e:ce:31:7b:11:1d:5b:aa:4b:c6:16:a0:b7:b5:32:a3:f4:
80:0c:a3:d3:ec:a9:5c:dc:87:0f:9b:74:5d:dd:53:e8:db:9a:
c3:f9:18:0d:98:7f:de:db:5e:51:08:2f:77:a3:b7:f7:fb:6b:
fd:11:bd:5f:78:2f:a8:b0:c5:c8:71:f8:3c:3d:ad:2d:2b:e4:
dd:b5:12:69:86:16:0c:a9:e7:6a:ee:d5:29:b7:e9:0e:15:96:
36:99:9e:b2:8b:fb:f5:e3:73:a6:e2:94:47:dd:4b:6e:0e:b9:
a7:95:02:fc:31:e8:4c:f1:1d:c3:5f:38:4f:39:71:29:66:e0:
34:21:44:80:3f:8a:74:5f:c1:57:22:4b:ee:20:a5:23:22:68:
f4:85:02:36:6f:c2:d6:ce:38:f6:38:88:08:70:d2:c7:6b:3b:
76:a5:e7:c0:77:0f:02:8e:ca:c8:63:f9:d1:93:bc:be:71:96:
79:2f:f3:3d:12:ef:bf:f4:c6:f4:96:76:c6:e1:55:bd:7b:eb:
68:9b:65:46:9b:a8:aa:1e:67:49:75:66:4b:71:b1:74:6c:e0:
c8:33:e5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:21 2024 by rpki-client on console-fra.rpki-client.org