Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/N0KIcayPRsav8-VIyXe1ioCPfPM.roa
File: N0KIcayPRsav8-VIyXe1ioCPfPM.roa (raw, json)
Hash identifier: 0IZILBS9uH/v3uhCMBB9xLjO35TLF2pJeJdCUKjorNs=
Subject key identifier: 37:42:88:71:AC:8F:46:C6:AF:F3:E5:48:C9:77:B5:8A:80:8F:7C:F3
Certificate issuer: /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial: 0185737AAAFF4A83B2B4A3D83C024B473506
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/N0KIcayPRsav8-VIyXe1ioCPfPM.roa
Signing time: Mon 02 Jan 2023 17:14:57 +0000
ROA not before: Mon 02 Jan 2023 17:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3308
IP address blocks: 193.8.36.0/24 maxlen: 24
193.8.37.0/24 maxlen: 24
193.8.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:aa:ff:4a:83:b2:b4:a3:d8:3c:02:4b:47:35:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Validity
Not Before: Jan 2 17:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37428871ac8f46c6aff3e548c977b58a808f7cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:93:27:df:5b:42:6d:2c:c6:98:f6:d5:90:
f1:69:e5:00:fb:5d:6f:9f:84:69:27:57:47:2a:6a:
d1:c5:1c:e0:56:7b:73:24:ed:ed:55:f2:eb:cc:7a:
83:0b:60:11:14:e9:d1:bb:1a:f0:84:c8:57:15:3a:
c0:0c:ed:f2:13:f4:20:b5:bc:2c:df:e7:f8:1f:ab:
fa:1e:18:69:a7:d7:ba:06:36:66:f7:5d:ea:e9:da:
52:b5:a3:08:99:a2:c6:66:df:c1:e5:4e:36:7e:38:
e8:ba:03:03:3c:f9:62:d7:14:cd:54:a7:b5:71:0e:
a9:72:04:49:a1:e3:36:64:48:d2:0c:57:1d:d4:3c:
3b:ab:ac:a0:85:63:18:2b:09:3d:48:da:13:2d:a8:
32:ad:8b:5a:66:dd:5c:ad:c2:b5:63:89:31:71:d3:
52:09:f0:f1:82:85:45:0f:1e:9e:dc:d7:03:39:d2:
ea:9a:dc:9a:ce:a9:b8:8b:ce:e2:31:5b:bb:15:13:
a6:ae:fa:00:21:d2:b7:e7:e2:91:b6:8d:16:f4:6b:
a4:78:ba:80:88:78:67:8a:42:37:95:1c:f8:aa:60:
62:b3:75:0d:98:59:bd:13:fd:32:07:a0:98:65:29:
b8:33:38:3b:dc:7c:de:89:6d:6d:6a:86:86:94:fe:
9d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:42:88:71:AC:8F:46:C6:AF:F3:E5:48:C9:77:B5:8A:80:8F:7C:F3
X509v3 Authority Key Identifier:
keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/N0KIcayPRsav8-VIyXe1ioCPfPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.36.0/23
193.8.39.0/24
Signature Algorithm: sha256WithRSAEncryption
73:d4:c0:6f:0f:8c:fa:44:74:f0:13:2a:99:c9:b5:48:d3:16:
4a:b6:dc:26:06:25:78:f6:37:40:05:48:0f:35:60:67:6b:26:
3c:e0:cb:85:ef:eb:70:32:da:aa:4d:36:41:c8:d3:5e:27:14:
60:d8:00:2f:3d:a9:f9:e7:2d:3c:3a:b8:b4:ce:d1:df:00:94:
31:16:f6:41:b6:1f:82:c1:91:46:17:7f:0f:60:bd:fd:ec:48:
15:34:10:76:63:b3:73:b2:06:97:b7:e7:d7:7b:95:a5:c1:7a:
4c:84:fc:54:2b:4e:2b:25:7b:1c:74:83:56:6b:49:1c:90:5b:
de:3e:17:3a:bb:20:74:d9:d1:84:86:79:47:26:a0:9f:68:62:
cc:56:9e:fc:84:fd:6f:bc:7c:e1:10:17:7f:b6:c4:26:63:91:
2a:79:e8:f7:5d:e9:2c:5c:4f:fa:f2:9e:de:9a:38:03:98:e1:
95:6f:7a:d7:79:ef:b6:39:d9:18:f2:08:d3:b6:48:e0:d7:03:
2a:33:5f:5d:34:95:1c:25:9e:fe:8e:e3:6b:59:b5:42:94:c6:
f0:44:2e:7d:1e:08:bd:83:d8:e5:8b:84:98:b5:43:31:d8:f8:
c6:a9:d4:40:3e:87:90:32:a6:6a:95:80:72:91:cb:fa:b8:88:
63:e4:da:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:35 2024 by rpki-client on console-fra.rpki-client.org