Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jW1sFC3Ll6KFiIq-NE7UAL6j9IQ.roa
File: jW1sFC3Ll6KFiIq-NE7UAL6j9IQ.roa (raw, json)
Hash identifier: C2RIQAUcJRvAPySNsfLZ269N5lFslbYU77mQcmMgZp4=
Subject key identifier: 8D:6D:6C:14:2D:CB:97:A2:85:88:8A:BE:34:4E:D4:00:BE:A3:F4:84
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189D542E6C8EC231FEA810CDD032A22DDBC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jW1sFC3Ll6KFiIq-NE7UAL6j9IQ.roa
Signing time: Tue 08 Aug 2023 13:07:58 +0000
ROA not before: Tue 08 Aug 2023 13:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201106
IP address blocks: 195.133.35.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d5:42:e6:c8:ec:23:1f:ea:81:0c:dd:03:2a:22:dd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 8 13:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d6d6c142dcb97a285888abe344ed400bea3f484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:78:ac:dc:03:2d:e6:fd:b9:ee:86:43:2a:
c4:6e:f5:d6:03:95:d5:14:b6:46:e6:ec:c4:76:b3:
d0:48:00:95:54:96:e1:43:b8:4a:3c:e7:ca:87:5b:
07:73:13:87:7e:46:2c:59:89:1a:cb:ba:00:12:84:
86:54:8b:37:4f:9d:6e:01:28:9a:f3:9c:d1:2b:22:
04:a5:e8:ce:5b:b9:7d:64:78:be:51:1e:c0:5b:cc:
b6:de:20:2d:7a:cf:fe:52:77:25:1f:5c:43:fc:81:
94:67:4a:73:17:a0:37:ca:f7:2b:f8:4e:3d:67:9a:
3c:9c:45:80:39:55:40:46:96:61:e2:b8:b8:2d:7c:
98:9d:60:74:fd:48:9c:a5:88:24:90:56:6d:31:fd:
bc:2e:e9:7b:b7:b6:ae:fe:eb:39:da:d7:f7:06:01:
b8:8e:79:f3:f4:ae:42:e2:76:22:a5:56:c6:8a:10:
4c:bb:5b:68:24:ff:f3:e3:b0:62:fd:cf:69:51:9d:
01:03:f9:6e:79:0d:47:79:9a:cf:63:55:99:09:9b:
2b:3d:a7:89:e1:cd:30:c9:5d:4e:fc:d7:d5:dd:d7:
0f:01:20:9c:a4:8d:f5:59:25:6a:cd:df:73:b8:f9:
c1:f9:cc:c0:de:8f:b9:7d:db:08:2d:81:8c:1d:a9:
17:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:6C:14:2D:CB:97:A2:85:88:8A:BE:34:4E:D4:00:BE:A3:F4:84
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/jW1sFC3Ll6KFiIq-NE7UAL6j9IQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.58.0/24
195.133.35.0/24
Signature Algorithm: sha256WithRSAEncryption
59:39:18:18:c0:8d:9c:1a:8a:6e:2e:a5:06:04:31:09:26:bd:
d9:a3:aa:d4:a5:5b:7d:c0:b9:d7:70:8a:cf:cc:f1:c0:f6:26:
6b:2c:bf:40:e0:4a:4e:1e:5b:a2:38:c0:c4:28:e1:89:1c:f4:
e1:40:0a:ab:5a:e2:91:f4:a0:48:cf:bc:2e:b0:55:20:11:9b:
e6:a5:a0:83:f5:ce:6a:c4:28:9c:af:f6:4a:c1:52:85:6b:6b:
89:31:a6:da:a4:ab:62:aa:3c:a7:f3:24:3a:7c:5c:a5:fc:31:
85:41:d5:9c:58:4f:72:8d:01:10:3a:8a:4e:80:f2:28:cb:e5:
eb:54:cb:2c:42:e5:ef:4b:a6:2b:3d:8d:1e:e9:3c:b8:be:26:
66:41:00:d6:4e:ad:36:02:15:57:fb:f9:8e:84:56:4b:08:9e:
fd:6b:bd:00:eb:63:62:ea:4e:89:23:35:41:f3:b1:41:ec:28:
34:78:a9:cc:a3:a5:93:1c:30:75:91:62:2f:b7:0d:3a:7f:c9:
08:4e:d6:ed:2b:0e:8a:cd:a5:1c:c7:ba:e5:1b:f7:5e:94:75:
c1:fd:a2:b8:7e:01:0b:6a:98:71:d6:3b:02:eb:12:22:2e:21:
51:e6:6f:28:3e:6e:d4:dd:b9:1e:88:e0:ae:b5:84:0f:1c:e1:
73:b8:5b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 9 06:42:54 2023 by rpki-client on console-ams.rpki-client.org