Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/t5Qy3qusAezKbDVbQ2bA8UTfbCY.roa
File: t5Qy3qusAezKbDVbQ2bA8UTfbCY.roa (raw, json)
Hash identifier: 8Arq+xjLbkjfsS3Kv9tmeXwrV0BGxlVAJiPqNAq7QtY=
Subject key identifier: B7:94:32:DE:AB:AC:01:EC:CA:6C:35:5B:43:66:C0:F1:44:DF:6C:26
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AE6A753F9B67303909BF325840A5E2788
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/t5Qy3qusAezKbDVbQ2bA8UTfbCY.roa
Signing time: Sat 30 Sep 2023 15:14:00 +0000
ROA not before: Sat 30 Sep 2023 15:14:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211318
IP address blocks: 194.87.33.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.37.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Sep 2023 16:43:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e6:a7:53:f9:b6:73:03:90:9b:f3:25:84:0a:5e:27:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 30 15:14:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b79432deabac01ecca6c355b4366c0f144df6c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:71:cc:f0:c8:6c:85:7b:77:ad:58:8e:c1:f7:
a8:19:bf:5a:d5:b0:c5:06:5c:0e:2c:85:39:f2:5b:
0b:53:d4:ab:98:45:b6:b2:85:f8:cf:ae:25:7d:ae:
cf:82:47:48:18:ff:79:8e:31:5c:2d:e6:d8:3e:b3:
fe:5b:ac:6f:42:90:e2:f7:e2:66:82:7b:39:c3:f9:
6c:0f:6f:1b:c1:87:a4:a0:0a:77:84:70:77:af:bc:
26:42:90:15:84:f7:59:8c:52:a5:32:6b:b7:6a:4d:
40:70:fb:d4:98:bf:30:53:c1:5c:f1:00:9e:53:3d:
33:09:fc:32:76:56:56:27:81:d5:e4:c2:66:b9:8b:
51:4e:7b:6b:5e:8d:1b:e0:06:6f:33:82:53:ed:19:
ff:26:15:a5:10:41:47:a4:13:41:db:b6:4a:3a:eb:
1b:45:d8:26:76:f1:53:3e:81:7f:b7:5f:11:79:17:
ee:c6:60:5f:68:fe:00:04:a5:8a:bb:9b:ac:40:15:
48:e5:49:97:f9:77:3c:24:79:19:f4:17:3e:62:c0:
78:78:c9:6a:d7:42:06:3c:09:51:b8:4f:8d:f2:c1:
c9:35:0e:de:83:95:67:b1:c2:ae:df:34:e6:2d:6c:
5a:e9:83:50:6e:46:c1:8a:aa:c0:1f:fe:cf:36:7f:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:32:DE:AB:AC:01:EC:CA:6C:35:5B:43:66:C0:F1:44:DF:6C:26
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/t5Qy3qusAezKbDVbQ2bA8UTfbCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.33.0/24
195.133.18.0/24
195.133.37.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:68:b9:1c:5e:ed:fd:2e:1e:e3:45:bf:8b:bd:ae:d3:a3:87:
e2:41:4f:6c:99:7e:59:c9:82:52:7b:7a:43:6e:a3:80:61:e4:
1f:86:74:10:e4:fc:cd:1d:55:90:3e:cd:24:4b:ce:15:d4:a7:
26:61:b4:d7:f9:38:e1:17:f5:ca:7b:61:67:7d:32:d8:54:75:
27:88:9d:65:2d:c5:88:81:6c:82:7b:ff:13:a4:8e:0f:05:4f:
67:b3:32:f6:0b:de:df:28:56:94:9d:a5:d0:f4:9b:ee:aa:9b:
27:44:6c:f9:26:6e:c1:6d:6e:b4:3b:1e:e7:55:b7:55:76:34:
c3:38:eb:07:5a:c5:7c:e3:7c:75:ca:e7:14:51:6d:f0:2d:d3:
90:c2:10:a4:58:9c:02:ed:59:6f:f1:6c:e9:d9:71:6d:7b:bb:
4b:6b:f2:46:f1:d6:52:15:45:f4:23:7a:05:52:af:ce:28:6c:
70:10:83:8d:be:21:2c:46:1e:1e:24:bd:f1:10:e4:c8:b7:d5:
b2:0b:79:c0:09:94:46:9a:d5:dc:87:3a:8b:00:98:78:86:b7:
07:77:03:5a:1a:a8:18:cc:c3:fe:a3:b0:18:2a:71:a4:55:95:
43:50:d0:bb:de:8f:3f:63:bf:e7:32:10:87:02:8e:d8:d9:3f:
53:dd:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:48 2024 by rpki-client on console-ams.rpki-client.org