Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eeZJhO4JYOC9qSQgBbMRTwFQxmg.roa
File: eeZJhO4JYOC9qSQgBbMRTwFQxmg.roa (raw, json)
Hash identifier: UJm20tkP6zCaoiWAFPwJ6+BBriddA5rQ4fvagZpnOaE=
Subject key identifier: 79:E6:49:84:EE:09:60:E0:BD:A9:24:20:05:B3:11:4F:01:50:C6:68
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C005E7D46AAFC7AEAD6501E5C0201CE7D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eeZJhO4JYOC9qSQgBbMRTwFQxmg.roa
Signing time: Fri 24 Nov 2023 08:07:21 +0000
ROA not before: Fri 24 Nov 2023 08:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 195.133.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:5e:7d:46:aa:fc:7a:ea:d6:50:1e:5c:02:01:ce:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 24 08:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79e64984ee0960e0bda9242005b3114f0150c668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:6f:24:13:00:a8:ab:5c:de:c8:1a:66:14:
7c:08:f7:ef:d7:94:b9:13:96:30:96:13:39:5d:ec:
d8:04:13:4e:38:96:88:34:ea:51:bd:c6:27:69:d0:
6c:39:f9:47:6e:ea:0a:c5:cd:15:50:16:9c:ea:41:
30:af:ce:cc:8b:d6:96:33:21:f8:1d:b8:7d:05:a5:
ff:30:df:48:e8:3d:b4:26:33:1b:45:e5:06:82:3d:
35:cd:92:b1:1b:44:51:ca:a9:13:0a:ba:af:7d:a7:
ca:ee:bb:bd:ce:06:bc:cc:57:90:f4:2a:b9:3c:cc:
5b:d1:64:d2:ad:bc:fa:12:be:d0:8e:a7:90:0d:76:
42:15:3e:be:0f:7f:5a:ab:1d:7b:a5:26:b6:73:39:
b4:38:31:c8:6a:95:ce:71:17:24:9e:56:26:44:fd:
06:d5:f2:e8:fc:7c:b6:0c:7f:4e:8c:63:3e:fa:60:
c0:6c:f6:fb:5a:11:0a:54:56:0e:ac:06:43:80:9a:
2c:fa:bd:87:23:f5:d7:35:38:de:6d:4b:3a:fa:96:
94:f4:17:a2:a4:28:c7:97:85:4b:bf:5a:a5:1d:7e:
62:26:ac:fa:11:f5:47:35:1c:c1:af:55:0c:26:5d:
97:25:03:c1:57:92:17:87:9e:71:d2:25:73:aa:de:
cf:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E6:49:84:EE:09:60:E0:BD:A9:24:20:05:B3:11:4F:01:50:C6:68
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/eeZJhO4JYOC9qSQgBbMRTwFQxmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.63.0/24
Signature Algorithm: sha256WithRSAEncryption
03:02:b8:10:74:29:79:a1:05:3f:e4:58:e7:56:26:71:1b:f2:
b4:5b:6c:9c:b2:f9:4a:ed:4c:04:86:c2:74:9c:9e:52:6b:e1:
7e:e7:23:bf:bb:6e:f1:79:3a:cd:10:36:5f:8c:a0:7f:81:54:
a8:ce:88:09:41:4a:9b:61:a8:2e:c9:13:f9:a9:21:34:6f:3b:
d7:67:ac:66:53:40:21:e3:42:67:68:6b:51:72:f4:4b:4b:59:
5c:57:ed:b8:72:ff:d9:e7:e1:5e:f0:d3:09:b2:40:66:76:e2:
19:c3:df:99:6b:a3:0f:50:7d:1c:22:52:40:25:c8:f5:b1:3a:
f6:5e:05:57:04:59:8e:5b:8d:db:cb:7d:17:d7:70:2b:89:63:
3f:b8:5d:8e:e6:35:43:1a:8c:d5:bc:bd:45:96:42:50:e1:a9:
ae:9d:e0:cc:2d:ba:08:1b:13:65:7b:9b:92:1d:5f:9c:bf:03:
48:23:a1:7a:47:62:0d:d7:9f:2b:cc:c2:51:9c:1f:c1:cf:91:
43:27:2e:ab:40:84:eb:9c:51:5d:ae:a5:9a:c5:6c:24:fc:82:
29:23:4c:c7:92:80:56:7d:f9:ac:47:07:a8:98:e7:21:b4:1f:
85:00:cb:0a:3d:2f:da:e7:da:9d:f2:80:37:ed:b3:2d:33:2f:
2e:b5:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 12:31:00 2023 by rpki-client on console-ams.rpki-client.org