Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dOVSzRa-agyJRwDDmZc_M2Qr7V4.roa
File: dOVSzRa-agyJRwDDmZc_M2Qr7V4.roa (raw, json)
Hash identifier: YsiKHuSWb8K9u719v43AP/Zc9fnrCIoohwtFwi00Pao=
Subject key identifier: 74:E5:52:CD:16:BE:6A:0C:89:47:00:C3:99:97:3F:33:64:2B:ED:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0192992C071EB7A15BA93F5F3A1061CB790D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dOVSzRa-agyJRwDDmZc_M2Qr7V4.roa
Signing time: Thu 17 Oct 2024 06:30:52 +0000
ROA not before: Thu 17 Oct 2024 06:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41789
IP address blocks: 195.133.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 07:50:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:99:2c:07:1e:b7:a1:5b:a9:3f:5f:3a:10:61:cb:79:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 17 06:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=74e552cd16be6a0c894700c399973f33642bed5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:fc:7f:73:a0:78:48:59:24:a7:91:d8:6b:
70:8d:4b:86:87:dc:0e:25:c7:e2:f1:11:55:f4:08:
85:ca:c8:35:b9:9b:2d:dd:77:8d:98:d7:b2:2e:71:
26:c1:4c:e2:a8:32:ec:85:76:86:08:c2:5e:e3:e4:
2e:4d:8a:f1:ef:12:c1:fd:59:24:e7:0d:fd:9a:ce:
24:f8:30:e2:33:ee:a6:e3:ba:ba:ce:33:f9:02:8e:
a4:ca:a0:c0:bd:7f:09:9f:be:4a:98:82:ff:03:b3:
55:33:f5:c1:f7:90:b4:f8:58:80:75:bb:14:c8:d5:
f4:88:5e:c8:c6:9f:d3:43:ba:56:39:23:58:14:a7:
cf:0d:c9:4e:17:7e:35:ef:b3:c6:38:31:bd:01:86:
b5:a4:b0:5d:8c:7c:ed:03:49:c1:38:ce:58:41:f3:
de:89:05:2a:96:4e:37:2a:ec:92:47:43:af:5f:01:
1c:c6:94:6e:07:99:e7:8c:7b:0e:42:0e:f4:04:dc:
a9:c6:02:32:e7:59:14:ed:0a:b4:e9:c5:55:1f:b6:
15:20:f7:a4:79:1a:ee:d6:21:e5:e0:97:76:fc:31:
40:84:8e:42:04:15:97:ed:ad:bd:c2:d8:f2:69:7d:
f1:18:25:8f:78:e2:d3:7c:3d:4c:5b:82:f2:13:6d:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E5:52:CD:16:BE:6A:0C:89:47:00:C3:99:97:3F:33:64:2B:ED:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/dOVSzRa-agyJRwDDmZc_M2Qr7V4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.62.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d4:67:35:18:90:f5:ea:f2:aa:6d:2b:70:6a:36:92:5f:04:
75:91:77:01:bc:20:8b:36:dc:7b:0c:2a:d5:c3:0f:b2:bb:28:
da:0e:d7:59:79:db:e3:f1:e4:4e:b9:0a:d7:6d:3f:86:83:52:
c2:25:50:57:b9:00:80:44:d8:c9:35:cd:32:f0:87:8a:4a:8e:
45:33:f0:e6:e4:f1:be:07:55:6a:08:33:e9:cd:42:6b:ae:28:
4d:49:be:54:b1:63:bc:83:13:e5:8d:5c:5e:b3:5f:8f:23:e7:
b5:47:76:59:ce:bd:51:5e:ff:c5:99:8f:57:40:81:b1:2c:92:
e8:d3:33:4d:43:d6:08:8f:0d:f5:cf:a1:77:4a:cd:e5:ba:a1:
52:2f:4d:b3:0f:75:0f:95:1a:b1:05:5a:1e:83:e0:19:ee:cd:
66:13:6d:8b:b3:7a:c1:43:4d:68:22:dc:7a:1b:1c:60:8c:34:
57:1b:11:32:f2:8f:bd:2d:33:ab:40:5f:5e:45:74:33:1b:9f:
4a:fd:bf:60:df:34:5c:8a:71:82:e4:a9:a1:25:46:9e:69:07:
c1:9f:70:4d:9e:12:49:3b:89:5f:93:17:a3:1d:20:65:ee:8b:
57:98:17:4b:39:5e:ff:64:fb:37:b7:1e:04:6a:cc:d0:0c:c5:
8e:13:f3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 10:58:36 2024 by rpki-client on console-ams.rpki-client.org