Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/5t5ALp8ZTzXtZuru2UaL__77Bgk.roa
File: 5t5ALp8ZTzXtZuru2UaL__77Bgk.roa (raw, json)
Hash identifier: VqlFNzZZ/qZn/Zjgvtw1vhg+exDLuFVkkSWmrNTOVk8=
Subject key identifier: E6:DE:40:2E:9F:19:4F:35:ED:66:EA:EE:D9:46:8B:FF:FE:FB:06:09
Certificate issuer: /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial: 01856C65BD74547572ADD97B38CCA34535FC
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/5t5ALp8ZTzXtZuru2UaL__77Bgk.roa
Signing time: Sun 01 Jan 2023 08:14:45 +0000
ROA not before: Sun 01 Jan 2023 08:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41562
IP address blocks: 195.34.72.0/23 maxlen: 23
195.34.72.0/24 maxlen: 24
195.34.73.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:bd:74:54:75:72:ad:d9:7b:38:cc:a3:45:35:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Validity
Not Before: Jan 1 08:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6de402e9f194f35ed66eaeed9468bfffefb0609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:41:c1:61:ed:93:67:af:38:d6:68:14:90:
57:66:ec:d5:40:0f:ce:c2:8d:89:c7:ed:2b:c8:d3:
67:48:4e:1d:4c:b1:35:bd:85:50:ce:83:43:2e:71:
fc:f3:23:50:a4:73:03:d0:6b:92:bc:c2:d0:43:85:
98:af:c6:9c:60:7f:5f:df:d1:8d:ad:da:d8:b9:39:
80:40:0a:dd:4c:fe:d9:24:0c:26:fe:f8:98:6e:05:
11:5b:2a:25:94:c5:1a:b2:35:f9:4a:c9:5b:1a:90:
c7:eb:7a:d6:cb:b0:c6:5f:14:be:6a:a6:09:fe:ad:
cb:78:b8:73:b0:9e:bb:85:24:fe:b2:07:f6:85:9c:
58:6c:ba:75:d5:63:29:ab:fc:99:6f:3f:36:69:97:
20:c7:2d:88:cd:06:28:bc:6a:ce:33:97:c8:0e:f2:
ec:81:91:a4:09:91:34:f3:90:ee:9d:c1:39:c3:44:
73:9a:8a:4a:e7:7c:80:6d:10:f5:f5:c8:8f:b7:70:
61:42:8c:3b:75:6f:81:5e:c8:64:bb:fb:96:bb:04:
50:a8:70:24:f2:44:ac:17:0d:25:25:5a:f4:cc:48:
85:a7:fc:b1:a3:8d:0b:24:41:11:7c:a2:1c:f3:f3:
bf:fd:76:d1:d8:1d:b6:03:7a:f5:c8:e3:e9:3a:a2:
6b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DE:40:2E:9F:19:4F:35:ED:66:EA:EE:D9:46:8B:FF:FE:FB:06:09
X509v3 Authority Key Identifier:
keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/5t5ALp8ZTzXtZuru2UaL__77Bgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.72.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:dd:0b:23:3e:c5:73:d0:42:d2:52:a1:ec:c9:14:fc:41:f2:
88:6d:97:15:24:fa:c0:49:9f:fa:d4:ea:a8:85:2b:47:64:78:
0b:5d:e6:15:27:62:0c:71:84:e7:c2:96:76:e5:fc:cd:c8:b8:
70:fe:ff:66:30:67:92:d9:b1:f2:27:df:3d:c7:08:23:1f:52:
b1:5d:f3:40:a7:42:00:dd:f3:3e:e4:06:2e:23:1a:57:02:37:
98:5e:56:3c:69:14:aa:36:fa:3a:e0:cf:5a:19:a1:d0:cb:49:
bd:d5:83:41:5d:74:b4:9f:6f:2d:32:61:b0:40:bd:60:5b:07:
d0:7f:05:04:78:31:70:42:31:df:a7:a9:ac:d2:35:c1:9c:22:
24:f5:7c:ed:a0:63:0d:8f:17:84:b2:6e:36:fb:e8:5e:96:09:
00:35:a5:ed:85:93:40:cd:49:8c:b1:fe:dc:bc:bd:1d:29:52:
22:c2:5a:fc:91:de:b8:59:c8:bd:bb:f1:1f:53:4e:f9:73:81:
8e:f3:d7:6b:c2:85:1d:9d:15:c5:ff:ae:86:91:1b:1f:1b:9b:
bf:03:bc:7a:fb:d2:e2:b5:c8:95:97:6e:0a:3b:1e:ff:27:8e:
92:74:e8:62:e5:bf:32:c6:2a:86:66:56:4d:67:59:d5:32:59:
ad:f6:2c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:31 2024 by rpki-client on console-fra.rpki-client.org