Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/WEiOs8XLLehrHsj6kUfyeT5Dmvs.roa
File: WEiOs8XLLehrHsj6kUfyeT5Dmvs.roa (raw, json)
Hash identifier: 7mkqg+waLVhcf9z2/AGcAQ3Zkv+W9KSXDrDQqXm1+HQ=
Subject key identifier: 58:48:8E:B3:C5:CB:2D:E8:6B:1E:C8:FA:91:47:F2:79:3E:43:9A:FB
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 01856B53324CD1A5EC3EC2A2081D548AD4F8
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/WEiOs8XLLehrHsj6kUfyeT5Dmvs.roa
Signing time: Sun 01 Jan 2023 03:14:52 +0000
ROA not before: Sun 01 Jan 2023 03:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8070
IP address blocks: 195.134.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:53:32:4c:d1:a5:ec:3e:c2:a2:08:1d:54:8a:d4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jan 1 03:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58488eb3c5cb2de86b1ec8fa9147f2793e439afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b9:9f:aa:70:17:df:ec:5f:ab:fc:ac:de:e4:
d8:d2:be:bd:7c:3b:c4:36:dc:d4:77:cf:05:58:20:
47:53:52:b0:c5:3e:ea:32:f4:9a:cb:bd:43:4e:a6:
0f:1f:83:d4:8a:00:d7:c4:de:4a:84:93:8b:ab:51:
9d:a7:cc:7f:9c:d8:9f:06:4f:7b:26:b9:f6:96:80:
08:37:b3:ec:1e:cc:0a:a3:18:f4:de:be:31:97:9f:
6b:6f:ad:3b:97:88:f8:34:dd:8a:66:07:a4:ff:83:
d9:e3:83:01:e4:04:2f:05:41:01:85:10:52:bb:2d:
76:51:59:6d:da:10:e2:fa:b2:4b:51:0e:57:5a:47:
91:46:66:50:ec:fd:fd:18:05:68:92:0d:c2:c3:84:
72:03:01:41:f2:19:19:d2:11:c2:d7:e1:7e:9e:ae:
ce:dd:67:06:ea:a6:a1:95:9b:1e:83:f6:1a:77:60:
6a:c4:10:63:9f:f4:f1:7f:ef:f8:5f:79:bc:07:76:
32:4d:ce:68:92:b6:ca:38:ba:77:22:2b:53:c2:eb:
4d:84:75:99:1a:de:fa:1e:4e:95:47:1b:d7:80:5a:
69:d4:ff:df:d4:79:ad:64:a7:75:e6:37:82:34:97:
f4:21:cc:37:4d:65:a6:7b:30:d7:4c:90:c3:c3:3f:
07:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:48:8E:B3:C5:CB:2D:E8:6B:1E:C8:FA:91:47:F2:79:3E:43:9A:FB
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/WEiOs8XLLehrHsj6kUfyeT5Dmvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.134.224.0/19
Signature Algorithm: sha256WithRSAEncryption
95:72:67:f0:10:e9:a2:4d:a9:e0:47:11:5f:5a:06:55:7d:a4:
8a:d4:5f:3b:e1:44:68:99:62:5f:e8:e3:2b:6f:63:d5:39:8a:
a8:28:f5:0e:56:84:20:27:95:ba:eb:87:b6:21:52:9d:c1:e9:
a6:05:08:dd:ad:52:b8:37:4d:cc:8b:dc:56:c6:39:ec:58:98:
0d:fd:42:3b:c5:d3:4d:ca:10:b9:63:fd:ca:df:5f:75:ca:06:
8d:9c:47:04:6b:31:d3:ba:f6:a4:e4:72:f1:e0:b9:1c:e4:b8:
89:63:44:5e:b5:16:79:e7:2b:96:df:0d:2b:c9:bb:47:84:ac:
8a:5d:fc:e3:52:82:2f:13:f7:b3:a9:b9:05:c1:c6:bf:58:ad:
17:b0:44:66:be:a0:8f:d3:93:92:71:4b:ac:c9:19:7d:d1:ae:
40:fa:ad:a6:15:f4:f6:c8:54:1b:ae:ba:8f:72:d6:2a:9b:40:
23:86:c0:79:c4:09:3e:7d:78:90:fc:c8:ae:af:8e:1f:d6:e4:
e1:bc:93:27:16:b6:43:52:2c:93:0e:84:b8:f3:bc:ac:fd:c7:
a6:60:5c:95:84:b8:9f:a6:88:39:fa:bd:4e:ac:e7:2a:31:76:
9b:13:c1:60:39:89:4f:40:51:27:8c:69:65:73:52:2d:00:32:
8b:63:b1:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:45 2024 by rpki-client on console-ams.rpki-client.org