Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j071cb0WIoWnBMnoGD2UGdWqUv4.roa
File: j071cb0WIoWnBMnoGD2UGdWqUv4.roa (raw, json)
Hash identifier: d1lXAroBrf3kQeRYEaBTB/jZ+6TblxVWENiWJ1mqyvY=
Subject key identifier: 8F:4E:F5:71:BD:16:22:85:A7:04:C9:E8:18:3D:94:19:D5:AA:52:FE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B9390661872B6458AA437AA3CC048FBD2
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j071cb0WIoWnBMnoGD2UGdWqUv4.roa
Signing time: Fri 03 Nov 2023 05:03:15 +0000
ROA not before: Fri 03 Nov 2023 05:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211252
IP address blocks: 195.133.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:90:66:18:72:b6:45:8a:a4:37:aa:3c:c0:48:fb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 3 05:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8f4ef571bd162285a704c9e8183d9419d5aa52fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:ce:14:cc:2e:cc:86:59:6a:ce:60:ac:2a:
95:70:b7:55:86:be:13:87:f5:78:49:e3:f8:c4:96:
4d:b0:91:64:78:68:9d:9c:13:6f:5e:99:33:aa:d8:
09:6b:4f:f2:e1:26:d7:d4:a9:71:d1:08:92:37:ce:
69:fe:8d:c5:8b:30:cb:a0:cf:c9:d5:1d:4d:91:53:
79:a8:03:3b:9a:f6:2d:9b:7f:c6:e7:65:8a:bc:bd:
18:bc:53:31:2d:96:40:7c:c7:1f:d0:55:dd:18:a1:
20:44:80:9a:f6:e2:98:7a:6f:f5:07:0e:08:57:57:
2d:2d:ca:c3:18:53:b9:71:84:3d:b0:3b:83:71:02:
39:04:12:2f:dc:56:32:41:78:05:6e:1e:1d:c0:31:
02:f6:2a:7f:31:94:22:5a:a8:d0:79:bf:d6:5d:4c:
e1:93:48:35:00:ab:6e:7c:57:a5:3e:97:b8:4c:e1:
ff:a7:46:14:a6:21:15:b6:10:41:50:e4:69:e3:df:
d9:f9:2c:d4:3f:b5:bd:59:db:28:e1:17:53:97:09:
c0:3a:bf:8c:95:f3:e6:92:36:a3:13:ae:c6:6c:17:
0f:82:63:f9:ea:c1:7d:5d:6e:91:b0:0c:b5:26:83:
14:35:2d:70:73:8a:42:48:78:6a:cc:ff:75:78:ed:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4E:F5:71:BD:16:22:85:A7:04:C9:E8:18:3D:94:19:D5:AA:52:FE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/j071cb0WIoWnBMnoGD2UGdWqUv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.38.0/24
Signature Algorithm: sha256WithRSAEncryption
88:2b:9f:0f:5a:e0:5e:bf:3a:02:51:9b:a9:4b:18:c7:d1:5d:
a0:8d:56:16:37:36:ca:04:6b:d6:8a:cb:22:87:74:b2:5d:15:
ac:ef:54:08:79:e9:2c:a6:15:18:3a:e7:23:af:f0:e1:a3:e0:
32:14:8d:65:4d:90:e2:03:ed:d0:29:32:13:e9:f4:b2:f9:9f:
5c:2a:f4:11:c4:ea:6b:8c:8f:7e:34:3e:da:c6:e3:e6:f8:9f:
01:1f:e7:4e:9c:5f:dc:92:4f:fe:9a:73:d8:85:06:13:a1:84:
67:08:11:0a:77:51:fb:36:4a:13:97:47:4b:7e:b3:9f:74:04:
53:e3:c6:76:69:7e:50:e5:a7:13:4d:a9:0c:5f:2c:30:b6:69:
ab:85:8e:ee:f5:71:39:3a:80:3e:13:ac:d7:3b:dc:74:bf:5e:
cd:3c:0f:88:50:af:ee:e1:35:3a:ab:c4:7c:09:79:d1:c0:6d:
4c:f9:e9:f2:47:61:d1:8d:4e:88:94:72:5c:d6:b0:73:6e:c1:
70:e8:6d:4d:b3:85:ea:6f:e2:eb:a4:98:9e:86:5f:b7:65:67:
4e:d8:78:98:99:e5:5f:2d:66:c4:92:97:bf:99:e3:3a:24:4d:
c4:b9:a3:dc:d6:16:76:21:41:2d:a0:15:63:b1:84:cf:63:46:
2c:65:f7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 3 09:00:49 2023 by rpki-client on console-ams.rpki-client.org