Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fwnorvJnUe2zAnXu9qsUlHMiPHM.roa
File: fwnorvJnUe2zAnXu9qsUlHMiPHM.roa (raw, json)
Hash identifier: wfguPWdTfJAlWDUSLV91K8TKqxBuw9JxmPqIP9VggPU=
Subject key identifier: 7F:09:E8:AE:F2:67:51:ED:B3:02:75:EE:F6:AB:14:94:73:22:3C:73
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188C42513F17265DEE310EC73EE2129EA5B
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fwnorvJnUe2zAnXu9qsUlHMiPHM.roa
Signing time: Fri 16 Jun 2023 12:19:04 +0000
ROA not before: Fri 16 Jun 2023 12:19:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41944
IP address blocks: 195.133.94.0/24 maxlen: 24
195.133.12.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
193.124.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:25:13:f1:72:65:de:e3:10:ec:73:ee:21:29:ea:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 16 12:19:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f09e8aef26751edb30275eef6ab149473223c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:20:fd:d0:2f:9a:f1:59:72:69:f0:10:60:32:
c5:af:50:38:4a:a0:8c:1f:fc:12:2a:a6:0f:03:00:
03:a0:f2:d5:b6:1c:a5:4d:39:3f:96:83:c1:fa:96:
40:95:d0:41:e6:bb:9f:9b:82:13:a9:5e:b9:f6:8b:
c8:18:02:c9:da:97:b2:6f:ac:75:bb:2b:be:97:d7:
22:4b:f5:da:7a:64:d0:d0:b9:43:42:e7:38:88:26:
d5:87:d7:10:67:65:59:2a:bd:1a:78:4e:4b:65:89:
cb:7e:bf:e9:a6:05:be:c1:dd:2c:e8:d9:18:ea:2b:
da:b7:7e:f0:0e:83:bf:90:10:d3:cc:d5:0c:fe:16:
d1:29:4a:b5:50:4e:c2:11:37:28:7a:69:ce:c4:37:
7d:70:72:9b:b8:e3:02:de:c8:e8:4d:1d:07:c0:18:
ef:17:67:99:d3:32:ce:04:0c:c2:19:68:7a:79:2d:
d6:3f:fd:b1:fd:8a:68:10:18:aa:65:5e:5b:b4:64:
78:72:cd:de:3a:74:a7:6e:e8:05:07:95:21:e8:b7:
43:df:e2:d0:69:a3:a5:ab:d7:3a:4f:7c:01:5b:b2:
88:c4:8f:bd:8d:15:21:f1:d4:33:70:94:06:65:9d:
03:06:de:46:86:33:72:86:34:cb:72:96:6e:d6:5f:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:E8:AE:F2:67:51:ED:B3:02:75:EE:F6:AB:14:94:73:22:3C:73
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/fwnorvJnUe2zAnXu9qsUlHMiPHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.205.0/24
194.58.43.0/24
195.133.12.0/24
195.133.94.0/24
Signature Algorithm: sha256WithRSAEncryption
50:33:22:e1:f0:ce:a9:05:b5:2a:e3:47:33:41:29:87:b3:96:
77:a6:5f:7e:f0:eb:f0:ea:70:bd:a5:ef:5a:47:2f:68:32:50:
44:02:78:f2:f1:01:a8:ae:8c:2f:ed:96:49:cc:ce:9d:02:16:
5e:b2:41:ee:64:c4:4f:4d:d5:41:49:7e:c6:7c:4c:52:67:98:
32:e3:32:81:0e:61:6f:70:a7:77:a6:cb:4a:65:d7:38:5c:ac:
02:0b:05:00:a7:f9:8e:23:7a:14:da:5c:c0:db:ce:40:ae:0b:
d4:44:e2:e5:7d:b6:75:33:da:bc:ab:25:a9:58:ba:9b:1b:7f:
a3:d8:1f:18:ff:23:7c:ed:55:fd:62:7d:88:77:8e:da:8a:73:
c9:1b:4f:8a:d6:71:c6:96:ab:7d:83:5e:81:6b:a2:52:ac:85:
b4:30:a1:8c:73:fd:71:6c:6b:a8:94:0e:7c:37:6b:40:e3:84:
43:e5:aa:7a:11:41:2c:f1:3c:4c:d4:ab:28:df:fc:65:e4:46:
31:27:6d:82:b2:a1:4f:11:ba:79:59:33:36:5c:3b:e2:e3:42:
3f:ff:a4:14:52:04:a8:a4:92:4e:e3:d3:ee:4f:bc:5f:e3:74:
e3:59:d6:32:7e:a8:18:ea:4b:52:07:f6:41:70:7f:8b:c8:42:
8c:83:1a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:03 2023 by rpki-client on console-ams.rpki-client.org