Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pTV-Ze5yW4z4gRwj_y7Q0pn5TOk.roa
File: pTV-Ze5yW4z4gRwj_y7Q0pn5TOk.roa (raw, json)
Hash identifier: qMLHQbFpVkKivbXX62U8vh2dQUYuRBtGz4Gt1Yv0py4=
Subject key identifier: A5:35:7E:65:EE:72:5B:8C:F8:81:1C:23:FF:2E:D0:D2:99:F9:4C:E9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A79F3F3F6AD51B910D6684B585090
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pTV-Ze5yW4z4gRwj_y7Q0pn5TOk.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 195.133.36.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 09:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:79:f3:f3:f6:ad:51:b9:10:d6:68:4b:58:50:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5357e65ee725b8cf8811c23ff2ed0d299f94ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c6:b6:78:6c:e8:09:b9:f7:26:bb:55:c0:fe:
fd:be:88:7a:50:f3:f7:a4:c4:08:6e:a2:57:da:08:
fc:5b:6a:b6:d0:10:a7:8f:4e:ee:6e:9b:50:f7:1c:
81:04:a1:0b:07:07:f7:f2:22:7d:38:4e:f0:b8:56:
57:19:2f:40:fa:32:50:65:2b:c7:99:fe:99:02:18:
15:af:0d:1c:7f:a6:67:25:16:42:38:04:7a:fa:f2:
5e:eb:29:b0:3c:8c:ec:cb:23:11:3b:fd:4b:4b:d9:
50:97:81:46:eb:86:86:c2:4d:c0:8a:c0:19:8c:0f:
f2:da:b0:fa:e0:d2:52:d6:ae:63:0d:a2:11:10:fe:
e5:4a:e5:1d:43:b3:66:6d:bb:52:0e:91:cf:00:6e:
50:2a:1a:c8:22:38:a4:f0:50:34:f9:de:98:fe:27:
77:b9:65:32:9e:7f:0e:79:4a:a7:9d:93:a3:04:59:
24:84:ab:94:b3:1a:3c:83:ee:53:0b:3b:3d:ce:26:
1a:ae:31:5f:52:4b:cc:e3:20:3d:b0:47:99:1b:4a:
be:4a:64:ab:6f:ee:b0:a3:e1:81:a5:74:43:66:25:
8f:78:ac:5b:37:52:97:6c:b6:e9:b8:d8:48:af:87:
8e:10:36:8a:c9:f9:8c:ee:a1:aa:c3:2b:73:79:0d:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:7E:65:EE:72:5B:8C:F8:81:1C:23:FF:2E:D0:D2:99:F9:4C:E9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/pTV-Ze5yW4z4gRwj_y7Q0pn5TOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.36.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e7:12:3c:5e:99:c6:12:10:9c:fb:65:08:ef:89:06:4f:b0:
31:fc:0c:0e:bc:c0:c8:ad:bd:18:d3:0c:25:a2:a5:bf:d0:98:
9f:1a:41:b5:ea:09:ef:2d:89:13:01:f4:40:d5:a2:6b:6e:c5:
b3:e5:fa:62:b4:93:b5:e2:58:69:a8:af:ba:43:5d:8a:8a:88:
cf:e8:d6:c2:07:0d:fe:39:07:86:64:34:10:a8:f4:b2:6d:44:
59:44:bb:2f:75:35:3b:dd:ef:b5:b9:f3:46:8c:b9:8c:93:82:
7f:4b:8f:72:07:70:7e:a6:f4:51:eb:91:e8:4a:30:e9:eb:cb:
ac:79:40:14:ac:a4:b2:76:85:84:f6:57:5b:dd:3c:36:26:f4:
04:29:ca:fc:fd:f4:b0:22:58:52:3a:c7:a5:c1:45:1c:a5:d6:
d5:c8:f5:74:5f:24:ea:8f:30:24:2e:56:99:b9:47:13:2b:89:
4b:fe:77:d2:45:aa:8f:ca:7f:e7:36:7e:a1:62:3f:0d:3e:85:
0b:e9:e1:02:8d:64:35:f7:0e:18:c4:51:49:02:55:2c:c4:46:
d7:1c:ba:5a:c3:5f:64:0e:0e:8a:12:ec:29:d7:46:16:47:84:
fe:ea:2e:b1:fe:f8:a4:e0:25:48:7c:12:dd:2c:55:87:b8:92:
c1:e6:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:27 2024 by rpki-client on console-fra.rpki-client.org