Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fu86-Q3js6gEuUv2oANRevAAwhE.roa
File: fu86-Q3js6gEuUv2oANRevAAwhE.roa (raw, json)
Hash identifier: Q3LD3djImvX5foraEoDZ411WJjJXg2RinYMVNktacUQ=
Subject key identifier: 7E:EF:3A:F9:0D:E3:B3:A8:04:B9:4B:F6:A0:03:51:7A:F0:00:C2:11
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019126165AC5DDB4A773FF4B94715B11CA4E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fu86-Q3js6gEuUv2oANRevAAwhE.roa
Signing time: Tue 06 Aug 2024 05:08:04 +0000
ROA not before: Tue 06 Aug 2024 05:08:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 195.133.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 04:06:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:16:5a:c5:dd:b4:a7:73:ff:4b:94:71:5b:11:ca:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 6 05:08:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eef3af90de3b3a804b94bf6a003517af000c211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:10:11:a7:72:03:a3:7c:e6:98:f5:7c:39:
3c:b7:5b:0c:6d:31:62:e8:7e:d2:49:d8:cc:e4:05:
f7:cf:1b:c7:d7:b2:41:b2:55:7f:1d:f7:d7:19:19:
90:1c:0f:01:a6:3a:7e:ab:a3:fd:44:93:2d:1c:13:
9a:6b:08:d9:95:50:d2:b5:e4:af:9a:b2:24:82:1c:
e2:0a:2c:c2:75:89:89:c5:32:e6:79:07:01:be:e7:
c5:54:aa:54:09:ad:44:39:e0:6a:61:7f:3a:0f:df:
ee:57:d8:ae:82:43:f1:d0:7a:ef:92:ef:c6:47:af:
e4:1d:ff:eb:fa:f4:69:b8:fc:d6:08:b2:37:fe:de:
3e:52:76:8c:8b:61:cd:54:03:40:b5:45:b5:e5:ef:
bb:80:92:0b:5d:ff:a7:6d:5a:b8:01:80:b9:8f:7e:
73:e4:75:ae:07:9e:eb:20:39:9f:0a:24:d4:5f:05:
7f:19:24:41:39:37:71:e1:3e:73:e2:55:76:30:46:
2d:8c:14:c8:74:cd:c2:b6:06:0f:8f:32:bf:00:48:
f5:a8:93:37:17:7a:12:85:cd:20:47:34:9b:b8:8e:
70:5d:c9:c0:46:42:c7:7e:b4:fe:9f:5f:e4:f8:b2:
61:54:61:3e:58:28:a4:fa:85:96:1f:fe:bf:b3:f4:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:EF:3A:F9:0D:E3:B3:A8:04:B9:4B:F6:A0:03:51:7A:F0:00:C2:11
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fu86-Q3js6gEuUv2oANRevAAwhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4f:93:29:40:0f:20:4c:8c:9e:49:48:97:36:c9:26:3f:ab:
19:d0:09:c7:1a:1e:be:90:95:3e:18:b7:84:d6:97:94:b1:70:
60:e7:4e:ae:0d:d0:14:82:20:42:68:f3:9c:47:90:e7:43:a5:
14:c7:91:94:5c:a7:c6:2d:c2:32:0e:5b:b6:21:6b:21:20:e0:
ed:22:14:5f:f7:05:d9:c2:01:9f:32:81:7c:dc:52:06:54:63:
60:4f:ec:16:dc:93:4f:52:17:a3:86:9c:c2:f7:87:7e:50:5f:
dd:5f:f2:d0:8d:ad:43:09:5a:05:bf:8b:c2:28:68:04:84:a3:
92:e7:54:4d:47:2b:67:a0:84:41:3d:83:26:3f:af:b2:24:35:
5e:09:4b:f2:c0:43:91:4b:ec:37:cc:4e:80:fb:58:13:ec:a6:
5d:e9:cf:d5:55:99:e5:d1:42:17:30:a3:63:f6:ed:c9:15:57:
aa:fb:15:22:26:8d:25:f1:f9:23:43:e3:4e:f8:19:82:8a:41:
f1:9d:a6:bd:13:80:7d:92:df:fc:2e:48:d5:c0:9b:01:d3:38:
92:6e:e5:34:5b:91:43:58:f0:3a:81:af:70:67:2d:4b:1a:4b:
d2:af:a6:0b:ef:b8:3e:2b:5d:3c:bd:22:a5:59:6a:c5:c1:0b:
65:d8:a2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 05:43:53 2024 by rpki-client on console-fra.rpki-client.org