Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/s6wuqGF5Xn0BgLqC2HFipDznJBI.roa
File: s6wuqGF5Xn0BgLqC2HFipDznJBI.roa (raw, json)
Hash identifier: btrggYsdMnxRdSP0nx1DHr+s9aDVRVZ7l+9RVTk1sD8=
Subject key identifier: B3:AC:2E:A8:61:79:5E:7D:01:80:BA:82:D8:71:62:A4:3C:E7:24:12
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A5087637CC964091AC5648EDC90239C0F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/s6wuqGF5Xn0BgLqC2HFipDznJBI.roa
Signing time: Fri 01 Sep 2023 11:36:04 +0000
ROA not before: Fri 01 Sep 2023 11:36:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 195.133.80.0/24 maxlen: 24
194.87.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 11:40:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:87:63:7c:c9:64:09:1a:c5:64:8e:dc:90:23:9c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 1 11:36:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3ac2ea861795e7d0180ba82d87162a43ce72412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:25:a5:3c:76:2a:03:47:e1:76:51:2e:9b:40:
08:b3:b8:38:91:3e:a1:43:cd:ea:a6:62:3b:e7:16:
50:3e:01:76:67:98:da:1b:07:d9:ab:4a:8c:a1:18:
fb:e7:fb:f2:6d:34:c2:11:64:8a:f3:85:c5:ea:5f:
58:7b:87:31:ad:6e:3e:01:88:c2:f2:b0:15:10:c1:
f1:b3:54:de:e4:e6:81:a0:2b:20:21:10:d5:a1:43:
6f:17:28:42:fd:fc:20:66:72:69:3c:6a:87:a4:43:
95:e4:09:9d:16:39:4e:ea:57:24:9a:2d:20:bd:59:
66:42:1d:9a:17:d1:d9:61:94:df:73:cc:0e:69:1f:
0a:86:bc:cc:84:e6:57:05:3b:fb:07:57:24:fd:60:
52:5e:fb:59:e6:ea:68:ac:b9:ac:f9:9c:6e:cb:c2:
5f:44:de:d0:c0:8d:8c:9e:25:1b:37:09:e4:f9:a3:
12:55:2a:29:ff:a2:9d:e0:ad:e9:82:cb:bd:e1:cc:
9f:63:21:6a:07:8e:af:f1:f9:aa:a9:a4:b3:53:2f:
59:b3:53:c4:65:36:a1:0d:36:90:ef:d4:b4:41:4c:
86:b9:4b:d4:de:a5:37:a5:56:6e:89:51:06:f9:63:
e0:92:8c:2a:fe:77:f6:b3:d8:f5:d0:07:a0:6c:7d:
2b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AC:2E:A8:61:79:5E:7D:01:80:BA:82:D8:71:62:A4:3C:E7:24:12
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/s6wuqGF5Xn0BgLqC2HFipDznJBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.42.0/24
195.133.80.0/24
Signature Algorithm: sha256WithRSAEncryption
41:08:2f:f7:b0:a4:63:2c:9f:ec:85:00:07:75:12:15:7b:92:
db:6c:01:55:5b:80:c7:8c:b3:00:d0:5c:00:39:98:53:55:19:
de:94:98:3d:c4:37:42:c3:40:b6:5f:b5:d8:46:11:da:3c:89:
2f:6f:56:54:f9:e7:a8:2b:f7:2d:84:dd:75:02:35:32:36:c8:
4a:a6:de:4c:67:61:53:75:40:63:83:66:50:e0:70:ee:be:63:
50:75:ff:18:b9:93:13:14:a8:85:73:d6:1b:9e:75:fc:c0:ff:
66:01:ac:75:7b:a3:66:72:e9:a8:67:77:07:30:df:19:34:11:
3c:a8:0d:29:e4:f0:d9:12:df:8d:09:9e:b1:01:bc:a9:52:cf:
6f:55:fb:bb:45:07:da:4c:a7:0a:0d:01:30:51:ec:98:16:30:
16:9e:33:33:c6:a1:d3:cb:be:2c:87:87:09:a7:5e:b7:e4:fb:
3d:31:dc:b0:9f:85:0c:27:45:ab:4f:21:63:fc:be:6f:f1:6e:
30:76:71:c3:9a:56:07:73:4d:76:d9:8f:aa:e7:ed:5c:a6:e6:
56:b6:06:e2:55:c6:8a:4d:2e:f7:13:ef:a2:ea:33:04:cc:1b:
93:67:47:54:86:16:e7:28:bf:b6:4f:f8:02:80:b7:dd:84:66:
27:cb:6c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:48 2024 by rpki-client on console-ams.rpki-client.org