Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xOIvC-BPCmyj_R24Xoqo07kGIoY.roa
File: xOIvC-BPCmyj_R24Xoqo07kGIoY.roa (raw, json)
Hash identifier: OA/0SiA06XgeMuPg01svejFuX78CdPFlyoErU6BvDhc=
Subject key identifier: C4:E2:2F:0B:E0:4F:0A:6C:A3:FD:1D:B8:5E:8A:A8:D3:B9:06:22:86
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0189442CC453DC49957B3BD50A54CE3C77BD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xOIvC-BPCmyj_R24Xoqo07kGIoY.roa
Signing time: Tue 11 Jul 2023 08:58:51 +0000
ROA not before: Tue 11 Jul 2023 08:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204902
IP address blocks: 195.133.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 12:28:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:2c:c4:53:dc:49:95:7b:3b:d5:0a:54:ce:3c:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 11 08:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4e22f0be04f0a6ca3fd1db85e8aa8d3b9062286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:fd:ff:5e:93:28:05:05:4b:97:a1:82:65:ab:
a5:26:39:22:c7:8f:43:08:a9:80:c5:a8:76:4f:0c:
84:4f:ea:53:c9:19:45:5f:75:16:8f:68:25:52:73:
72:d8:3b:ca:81:df:10:e3:c7:05:91:37:3f:df:75:
4f:55:bb:d3:bf:2d:2e:ca:6a:bd:0c:4e:05:5e:bd:
b3:18:da:8a:75:ec:7f:f9:e9:63:b9:94:4a:fa:b1:
cf:ff:29:29:5d:1c:a3:39:ae:b8:c6:b9:33:98:3f:
d0:3a:7f:71:0a:90:3d:bf:49:08:2d:95:a8:74:c7:
57:09:0b:23:1f:05:dd:b8:a6:8a:20:f3:f7:99:91:
b0:4e:ad:c5:32:22:02:38:97:a8:71:2e:42:29:64:
6b:ce:3e:7e:36:58:79:aa:a4:57:bf:b2:f4:55:14:
02:5d:39:b6:73:4a:b5:f2:38:0e:2c:2d:6d:cb:75:
b6:e6:c8:0b:dc:c2:d3:a9:31:f1:20:7b:76:53:cf:
37:d1:4a:3d:17:38:b2:c9:9e:62:78:b1:8f:c6:5f:
2d:dd:93:9d:2c:75:3c:2e:97:33:fc:37:ed:76:d3:
68:3b:61:2d:c1:01:ac:b2:85:4d:12:f2:91:7d:ca:
5d:e4:a4:c3:d3:fb:61:04:0d:64:1a:f4:70:c4:34:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:E2:2F:0B:E0:4F:0A:6C:A3:FD:1D:B8:5E:8A:A8:D3:B9:06:22:86
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/xOIvC-BPCmyj_R24Xoqo07kGIoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.86.0/24
Signature Algorithm: sha256WithRSAEncryption
36:e1:c4:32:41:83:6c:97:2d:16:35:fe:07:df:00:b6:56:55:
93:a8:bd:90:ab:cf:c3:df:12:f6:cc:eb:81:7d:50:6e:51:67:
2f:b6:75:b2:6d:47:e3:ba:f0:b6:2f:19:59:c4:ad:9f:af:5c:
39:bf:80:33:e6:e9:1c:cf:34:52:34:0e:2f:44:e4:92:59:4a:
29:90:84:77:f8:b6:fc:32:e4:fb:b3:67:8a:f0:b3:69:da:38:
b2:4c:99:1e:db:cf:d7:76:7c:8a:d4:ee:a2:f5:49:60:36:71:
e8:78:ec:e1:8c:84:30:a2:62:d2:2d:65:2b:39:e9:f1:db:2b:
78:d7:bb:a9:4f:03:35:aa:88:98:00:7a:da:c7:09:26:fa:20:
48:1d:f6:2e:56:2f:ef:d2:0c:37:5f:b0:da:f3:38:db:35:ff:
56:c5:70:a1:e2:12:4a:70:a9:ea:d6:25:1b:e1:8c:84:5c:47:
b4:35:91:a3:ea:cd:37:3d:42:2d:46:3f:76:e5:20:68:b8:db:
41:98:a8:03:49:37:4a:c2:4a:49:71:76:ed:a2:98:f8:66:2f:
ad:84:b8:c8:3d:30:ea:71:c9:ff:e8:a9:d2:96:d4:93:6b:0e:
5c:60:c8:95:10:ba:d5:0a:44:8f:1a:dc:8e:7f:c4:db:b0:12:
a8:45:92:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org