Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/nFn7V-fiVaZqQuJK2dHTFr7rfrU.roa
File: nFn7V-fiVaZqQuJK2dHTFr7rfrU.roa (raw, json)
Hash identifier: AlNeYFJMhNOBrs+WuOjy7CbfpHRwhn9K1Z62oFXgNzA=
Subject key identifier: 9C:59:FB:57:E7:E2:55:A6:6A:42:E2:4A:D9:D1:D3:16:BE:EB:7E:B5
Certificate issuer: /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial: 01856C65B984847D480A9FEE4611BD8ECD2B
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/nFn7V-fiVaZqQuJK2dHTFr7rfrU.roa
Signing time: Sun 01 Jan 2023 08:14:43 +0000
ROA not before: Sun 01 Jan 2023 08:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15404
IP address blocks: 193.36.241.0/24 maxlen: 24
193.36.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:b9:84:84:7d:48:0a:9f:ee:46:11:bd:8e:cd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Validity
Not Before: Jan 1 08:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c59fb57e7e255a66a42e24ad9d1d316beeb7eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d1:76:e3:6c:6d:e8:fd:81:b5:4c:23:8b:d0:
e7:bc:40:fc:b1:e9:51:92:7c:6b:ec:d9:eb:23:3b:
b0:74:01:b1:63:fb:54:68:d2:c1:5b:e7:27:e7:2b:
d6:01:46:20:91:3f:ab:5a:5f:95:6e:c4:ec:2c:d3:
98:5c:97:64:99:b4:8d:4c:da:a3:c2:ef:82:fd:e8:
7f:45:52:9c:18:b1:23:be:2c:bd:5b:fa:e6:d2:59:
d9:2f:f6:a0:05:00:14:69:f6:95:01:a5:20:0b:5e:
0d:f7:87:58:01:85:72:cf:60:5a:f4:ef:fa:0a:b9:
e8:3a:cd:9f:02:0e:77:e0:62:74:a9:b0:2e:ce:0e:
9b:27:37:7b:a9:99:00:32:6b:57:41:db:59:f3:26:
26:3e:93:50:c5:96:6a:eb:fd:54:a7:dd:08:11:77:
fd:55:b1:30:64:a9:34:98:6e:32:27:e7:01:79:5a:
c9:7a:4b:f6:31:37:e6:93:6b:cd:48:45:6b:e8:8d:
70:c2:56:ba:98:21:66:59:40:91:bd:22:79:16:52:
af:dd:6f:38:c3:67:65:cd:94:d5:ec:99:5b:f9:f9:
8c:17:ef:69:58:7e:e8:6e:b7:8f:ff:a3:e8:18:c4:
19:96:7f:b4:69:92:a8:ad:2b:39:b6:52:02:99:65:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:59:FB:57:E7:E2:55:A6:6A:42:E2:4A:D9:D1:D3:16:BE:EB:7E:B5
X509v3 Authority Key Identifier:
keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/nFn7V-fiVaZqQuJK2dHTFr7rfrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.241.0/24
193.36.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ec:6f:d1:96:02:c1:f0:01:03:e1:39:8d:c0:e6:f4:2d:bd:
0f:f4:ee:c3:40:7c:02:6a:65:83:f4:ae:f3:bc:06:c8:2c:8b:
48:1e:35:8c:6e:5b:95:a1:4b:68:37:99:e7:fa:40:f8:25:e4:
c3:7c:9f:a0:44:da:71:d0:15:f5:eb:9a:a3:2e:2e:c9:e7:e1:
bc:68:c2:fc:ca:d8:5a:a6:a2:79:3e:d0:64:d1:1a:bd:80:c7:
a1:75:a2:76:f9:a4:cf:08:c6:09:a7:fe:e9:4b:fb:67:6f:9a:
ef:cf:df:e1:e4:0e:68:68:4a:ae:2d:f1:fb:9c:10:94:f8:58:
6b:56:00:48:f4:e3:11:7e:d5:ed:9d:c9:08:df:89:12:cc:f5:
3a:78:df:85:a7:de:d3:ac:69:1d:c8:b4:f7:35:8f:52:a1:71:
ef:3c:97:cf:d9:f5:29:01:5a:e3:42:ab:65:11:d2:0c:42:22:
4d:db:29:45:74:3e:be:86:31:2a:8f:90:70:8f:66:4a:90:e4:
8e:91:96:c5:49:51:79:81:29:a5:2e:b6:10:92:13:45:6b:87:
ef:d9:d6:8b:98:ca:1a:e1:d2:d1:ae:36:e5:9b:25:75:d6:5c:
94:34:3b:47:8f:37:e0:6e:a6:bc:9d:1a:49:d3:2f:ed:33:93:
45:c8:ec:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:33 2024 by rpki-client on console-fra.rpki-client.org