Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w54SMcvHtvOmsybkdfrAgfmPa4Y.roa
File: w54SMcvHtvOmsybkdfrAgfmPa4Y.roa (raw, json)
Hash identifier: 8URkbwb9k/nHI1mBbDSMGQGBssQP9KtxUOvChl7d1uQ=
Subject key identifier: C3:9E:12:31:CB:C7:B6:F3:A6:B3:26:E4:75:FA:C0:81:F9:8F:6B:86
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A6C6C5BE4F4E2B159D7EFB70E24AF
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w54SMcvHtvOmsybkdfrAgfmPa4Y.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 195.133.92.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 May 2024 06:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6c:6c:5b:e4:f4:e2:b1:59:d7:ef:b7:0e:24:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c39e1231cbc7b6f3a6b326e475fac081f98f6b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:12:9e:01:fb:20:aa:d1:f1:87:86:30:56:38:
1b:5a:a6:63:10:91:03:86:49:ed:98:54:66:b2:55:
31:47:c5:a9:11:46:ac:ca:d9:80:a9:13:e6:ec:15:
2f:ed:8e:e2:3d:5a:ed:90:26:29:ee:8f:4a:26:56:
b9:7d:e6:bf:69:e1:a5:ec:5a:20:d2:1c:56:e5:4c:
9f:ee:86:1e:1c:25:06:16:1f:a3:26:c1:0f:51:d7:
6a:9c:cd:7d:95:ac:e1:e5:73:b2:b6:fc:11:4b:ca:
ad:c7:59:0c:ec:af:b6:8a:be:3e:31:cc:5a:16:69:
c1:b6:65:64:a2:e2:93:91:30:3b:6f:92:e5:72:8d:
2c:15:1f:b4:9b:f5:4b:16:4c:99:4c:4f:36:1f:ea:
39:24:5c:16:aa:59:4e:e0:21:16:31:2a:44:d9:ae:
59:5c:24:04:93:a8:4d:05:76:75:d1:b2:d4:31:8f:
18:5d:14:b5:d7:2a:85:3c:ee:ea:dc:7e:1c:e9:cc:
e6:f1:95:a9:6b:33:c5:ea:71:b9:14:4b:2b:6e:b5:
24:60:2d:cf:d7:6e:f4:7b:e0:4d:1e:2b:4c:66:0d:
88:8b:72:d9:fa:94:aa:7e:20:21:47:a0:16:61:28:
4c:6e:7d:c4:b6:40:cb:5d:11:97:e8:1b:19:a7:6c:
0b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9E:12:31:CB:C7:B6:F3:A6:B3:26:E4:75:FA:C0:81:F9:8F:6B:86
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/w54SMcvHtvOmsybkdfrAgfmPa4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:ac:2e:60:95:e9:67:99:18:34:68:26:1e:af:e7:a1:ee:ea:
52:c8:ca:58:ac:52:30:63:aa:07:d9:b6:ba:25:5b:8c:e4:5c:
65:a4:0e:b7:3b:be:2b:4f:45:0a:37:34:c0:54:1f:86:3e:f6:
c9:4e:35:39:89:5d:a2:f5:8c:61:ed:32:1d:78:a6:52:83:92:
36:e5:52:de:32:ef:8b:2d:d7:2c:fa:ff:2f:7d:a4:ad:19:12:
7c:c3:eb:09:35:7f:64:dc:92:7b:b1:35:3c:90:31:44:3d:d4:
57:5c:ce:2a:60:62:03:31:77:30:a9:e0:36:84:e5:30:2c:61:
1a:07:59:c5:bf:c7:5c:e1:4a:c7:47:54:ab:a1:2d:fa:9f:c5:
b1:2a:7e:62:27:73:9c:0a:e9:0d:6c:31:ce:1d:b9:26:cb:b0:
a4:0f:6c:39:9e:12:1c:54:e1:8d:3e:4a:57:fa:4b:3f:46:f3:
d0:c7:d8:6c:10:54:f2:99:3d:ae:73:af:33:df:75:1c:d7:f7:
d5:f9:2b:9e:aa:92:7c:97:4b:04:c5:ff:aa:ae:03:11:77:5b:
0d:5d:78:a0:2c:98:ae:b2:06:09:93:0f:54:a5:1d:ac:58:4d:
75:c9:2b:fc:8b:ee:4d:2e:19:dd:5a:96:c2:74:d6:01:69:a7:
9d:ea:70:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 09:25:11 2024 by rpki-client on console-ams.rpki-client.org