Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/1WER9qXQDHRDcKYkQL-EBUa5zDw.roa
File: 1WER9qXQDHRDcKYkQL-EBUa5zDw.roa (raw, json)
Hash identifier: 3yGvxPMWS8O1ZO36UbyptBjzGacqaTPMX06GGcabUrk=
Subject key identifier: D5:61:11:F6:A5:D0:0C:74:43:70:A6:24:40:BF:84:05:46:B9:CC:3C
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 018E19E94296A303E5578BC515F1EE18E244
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/1WER9qXQDHRDcKYkQL-EBUa5zDw.roa
Signing time: Thu 07 Mar 2024 17:15:01 +0000
ROA not before: Thu 07 Mar 2024 17:15:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21267
IP address blocks: 195.26.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Thu 07 Mar 2024 17:24:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:19:e9:42:96:a3:03:e5:57:8b:c5:15:f1:ee:18:e2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 7 17:15:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d56111f6a5d00c744370a62440bf840546b9cc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:b0:42:80:6f:ad:99:70:45:fe:b7:7d:75:
c7:0d:e6:d6:bf:d6:6d:95:21:37:6f:51:bc:58:dc:
aa:fb:28:42:0d:7c:5c:51:4e:fb:7c:8f:40:ff:74:
a1:5a:61:2f:77:f8:d6:87:cb:9f:a5:b7:8a:8e:cc:
8b:1e:2a:2d:e6:f3:c0:57:0a:72:84:53:83:b5:2d:
b8:7c:eb:c8:61:9d:5c:f9:71:c7:b4:db:b3:59:66:
57:ae:78:6f:0d:91:9c:e1:80:d8:2d:30:60:39:96:
7a:47:b9:bb:d8:8b:b4:5c:76:29:01:4c:8d:18:89:
ad:3c:ee:62:4d:0a:d0:12:ad:57:f0:ad:6d:23:55:
14:4a:ec:8d:70:80:6e:36:89:e1:9c:1c:df:9a:08:
fe:95:af:58:4d:f4:d5:4f:69:8b:66:29:57:95:08:
14:f1:86:24:30:30:60:d2:ae:65:43:a1:ac:e4:45:
ab:3e:3e:c3:ae:ac:dc:6d:1a:90:da:0f:f4:9b:9c:
e5:b1:fc:a5:9e:8f:0e:9e:21:ed:fc:95:7b:ec:7f:
84:ca:e5:80:aa:b2:ef:2f:8b:fb:95:1c:6c:65:04:
30:3c:89:8d:ff:d5:82:dd:22:ea:74:0b:c5:ca:e1:
e5:5d:97:12:72:5a:fa:9b:4c:d7:6b:3a:13:61:2a:
f1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:61:11:F6:A5:D0:0C:74:43:70:A6:24:40:BF:84:05:46:B9:CC:3C
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/1WER9qXQDHRDcKYkQL-EBUa5zDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.32.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:37:62:6a:8d:e6:c9:31:61:9d:a5:b6:ca:e6:b1:c9:b1:b5:
88:53:7b:f2:be:1a:87:3c:74:d4:32:52:b8:81:42:70:b9:70:
01:95:6a:2c:01:2b:42:88:1e:e2:c6:c6:10:fe:d7:f4:48:9d:
97:0a:e1:21:25:a5:7e:0b:b2:89:8f:f8:18:44:b2:34:d9:0a:
b2:d4:b8:18:f5:0b:f2:6f:82:74:0f:a4:a5:b0:e1:9f:5a:7d:
f9:a6:3e:2a:3d:c1:49:5f:33:c6:91:d3:e8:50:8e:b9:ff:59:
85:81:b9:56:1b:df:ec:9f:5a:ef:d1:6f:fd:a5:51:ce:01:08:
9b:27:de:02:37:57:8c:b5:fe:91:a7:90:62:b3:27:67:64:b0:
1a:7d:c2:3c:8f:89:20:1e:33:ff:5b:f7:64:f5:83:37:51:45:
54:dc:f2:80:fd:39:a1:e5:89:b6:05:48:a3:f5:cf:fc:c8:9c:
a9:a7:d6:40:b9:01:53:ea:b2:79:a2:77:ea:7f:e5:99:f0:ab:
a7:21:54:a8:cb:26:9b:90:39:eb:1f:c3:bc:ac:d5:ee:90:07:
da:bd:78:4b:3f:56:f3:83:75:9d:03:21:8c:da:11:e3:99:f0:
36:43:8c:c7:74:82:d1:8d:d1:da:88:2f:b6:06:ec:ef:e9:7a:
a3:36:ff:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:55 2024 by rpki-client on console-ams.rpki-client.org