Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nP6RmRx-imGwpqgCgxu7mG2BLx0.roa
File: nP6RmRx-imGwpqgCgxu7mG2BLx0.roa (raw, json)
Hash identifier: uH7rg4+/5yeIQuked+YgrbRKDTxgNuBd+FCJWwONhOM=
Subject key identifier: 9C:FE:91:99:1C:7E:8A:61:B0:A6:A8:02:83:1B:BB:98:6D:81:2F:1D
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E8DB8313B7FACC4B63C429DBE5D5A
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nP6RmRx-imGwpqgCgxu7mG2BLx0.roa
Signing time: Mon 02 Jan 2023 08:34:54 +0000
ROA not before: Mon 02 Jan 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61378
IP address blocks: 195.19.193.0/24 maxlen: 24
194.226.182.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:8d:b8:31:3b:7f:ac:c4:b6:3c:42:9d:be:5d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cfe91991c7e8a61b0a6a802831bbb986d812f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:41:f2:fe:8e:07:3f:9e:57:97:27:6f:f8:
c3:f2:86:a3:c2:07:2a:1b:fc:cf:c3:07:d6:9e:54:
63:c4:3e:90:b6:88:8d:a1:b6:f4:28:bb:72:ab:83:
62:7f:81:ea:bf:ba:09:e4:24:74:82:4f:e7:cd:d1:
73:3f:88:cf:01:52:9a:51:9a:f1:1c:74:ec:ab:0c:
20:a8:8b:35:9d:8b:52:0f:fe:ac:4c:35:af:02:7f:
50:0e:6e:77:4c:8f:b6:24:11:99:4d:e6:77:6d:58:
a7:eb:3d:73:09:cd:51:ba:11:c6:4c:32:45:fe:86:
39:76:9e:06:cf:1c:ca:e4:dd:04:aa:fe:89:c6:bd:
a1:45:b3:52:ee:01:a5:47:a9:57:b7:30:68:76:f5:
d7:ed:c7:a0:d8:0e:38:29:2f:75:dc:9b:b3:e4:0d:
d5:06:a1:8e:f0:cc:88:4c:32:88:d4:7b:84:2a:42:
95:8d:a6:82:3e:32:53:16:e8:b5:c1:d0:a8:31:1a:
57:9d:4c:62:0b:dd:18:c0:b7:58:ae:39:bd:b1:d8:
f8:9a:bc:95:db:3a:44:1b:10:40:72:bb:40:53:bd:
22:f6:18:5a:a5:c1:b3:f7:69:b1:b8:2e:70:2f:33:
ee:fd:35:d3:d9:77:ab:3f:2d:52:fb:0a:76:bd:bc:
9b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FE:91:99:1C:7E:8A:61:B0:A6:A8:02:83:1B:BB:98:6D:81:2F:1D
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/nP6RmRx-imGwpqgCgxu7mG2BLx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.182.0/24
195.19.193.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:22:25:6c:36:b9:4d:2c:f5:87:cf:78:e8:2c:5d:cc:84:0b:
bb:90:8f:81:b6:57:a0:17:39:d9:f3:e5:3b:35:67:5f:f6:5e:
87:b4:c1:8a:91:45:7b:3f:11:c6:85:6a:55:34:82:14:49:f2:
97:42:1c:13:69:1d:cb:b8:a9:1b:0f:6b:b8:99:01:4e:ba:ef:
cb:30:64:36:7a:28:08:58:4a:b8:76:c3:45:e2:48:d9:d0:db:
95:1d:80:1b:5b:a2:dc:d5:23:23:7c:34:55:2a:af:14:9a:d9:
e7:26:9a:57:5e:c3:2c:bc:80:ad:90:29:15:12:76:88:8c:8f:
27:b9:15:bb:63:36:18:7a:dd:62:1a:9e:4f:37:d9:a2:7e:a3:
65:b0:71:d8:80:0c:f8:65:06:0c:47:97:54:85:9d:b1:48:ad:
d3:e9:96:c6:34:d6:b1:85:1e:d4:32:d1:84:e4:ca:02:23:3b:
7d:9e:80:e2:0a:6d:d9:d0:b1:42:11:96:9c:60:ea:0c:b5:8b:
ae:ba:70:ca:fb:a9:58:bf:c9:3b:a3:05:59:4f:6d:b9:9f:53:
1a:62:ee:cd:43:12:0b:ad:7c:de:09:ca:49:48:0e:5b:d8:bd:
84:0e:71:77:13:c4:f0:4d:5b:b4:76:71:bb:5a:1e:a8:b2:55:
60:0a:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org