Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/nCb-2JW3nDGLbUEAsfbqmK-SEo4.roa
File: nCb-2JW3nDGLbUEAsfbqmK-SEo4.roa (raw, json)
Hash identifier: UqGCMCn58FAZuW/iStdnQkbaJgwuohT0T0rBjMt7c5s=
Subject key identifier: 9C:26:FE:D8:95:B7:9C:31:8B:6D:41:00:B1:F6:EA:98:AF:92:12:8E
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 01856FF035482E81AA4D1874677539D0576B
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/nCb-2JW3nDGLbUEAsfbqmK-SEo4.roa
Signing time: Mon 02 Jan 2023 00:44:51 +0000
ROA not before: Mon 02 Jan 2023 00:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47823
IP address blocks: 185.94.196.0/22 maxlen: 24
193.219.101.0/24 maxlen: 24
2.58.152.0/22 maxlen: 24
193.219.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Feb 2023 13:54:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:35:48:2e:81:aa:4d:18:74:67:75:39:d0:57:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Jan 2 00:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c26fed895b79c318b6d4100b1f6ea98af92128e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:9c:af:fb:35:74:dc:d4:5d:77:4d:10:36:
8e:ba:be:dd:45:ca:0c:a5:fb:25:c3:f8:f5:ad:c9:
4e:37:6b:cc:b8:2a:92:1b:10:99:4c:83:b8:61:9f:
94:1c:84:21:07:2d:58:b4:ac:74:eb:fb:cd:7e:08:
ee:98:d2:b3:9d:f9:a6:99:87:5e:79:d8:f6:6f:e7:
ab:31:97:63:19:3a:3e:0a:3a:54:23:36:56:ee:d1:
ef:70:db:3e:a8:ed:70:9b:b8:c7:13:ea:75:fa:5b:
26:af:00:f3:d2:7e:5c:08:6d:a3:86:08:d2:6b:35:
88:40:66:29:cf:27:33:3f:ef:e9:40:b9:a3:0d:84:
64:f0:bb:fd:4a:55:21:04:85:f4:1f:43:08:b3:ad:
77:89:75:86:d8:74:30:87:6e:bb:d8:9a:b3:2d:89:
54:e8:5c:2c:20:90:04:a7:cc:e3:46:00:d2:24:5f:
d7:4f:cb:dd:e6:16:5d:25:ff:8f:42:ce:80:3a:a1:
4d:dd:e9:57:69:61:34:84:a9:48:69:08:5d:77:08:
e1:2f:a7:6f:32:34:ba:da:8e:2d:45:a3:ce:c4:39:
ce:28:e5:b4:f2:c6:4e:20:9c:98:ca:d1:f2:f8:fd:
53:fd:9d:c0:f7:02:0b:82:be:21:82:c5:bc:c3:d7:
f9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:26:FE:D8:95:B7:9C:31:8B:6D:41:00:B1:F6:EA:98:AF:92:12:8E
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/nCb-2JW3nDGLbUEAsfbqmK-SEo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.152.0/22
185.94.196.0/22
193.219.101.0/24
193.219.121.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:da:62:1c:55:83:49:85:f0:f2:a9:69:9a:c9:da:3c:6a:50:
11:2f:00:a0:c0:3f:5d:8d:2a:92:36:78:f4:ce:de:63:d8:09:
f2:ec:60:c6:42:25:02:75:47:00:05:27:e9:5c:01:3e:af:d5:
f7:b4:39:67:ae:27:81:bc:c6:ea:55:53:57:e3:53:6e:b3:a6:
a1:5a:33:09:8c:d0:15:2c:01:79:4f:0b:02:9d:55:21:c1:4d:
71:03:4a:c5:44:ab:87:41:e2:61:c2:85:5d:cf:d5:e5:58:35:
58:a9:45:e5:87:2e:57:8b:18:af:14:f3:21:d4:3a:38:39:0d:
f8:d6:05:10:9c:ca:d5:9e:e1:cc:08:c5:1c:81:c2:d6:92:5a:
1e:f7:37:82:7a:1f:90:24:dc:28:78:e4:1c:e4:e3:01:99:2c:
51:cf:1c:c9:b9:28:98:36:66:74:9f:f0:28:44:aa:6c:50:2a:
be:3e:67:70:3a:8c:06:c5:79:3c:f7:24:41:8f:88:c8:b6:1f:
dd:c2:7b:5f:75:8a:a5:51:57:d7:e3:81:25:6a:54:e3:6b:aa:
3c:49:2a:0b:ba:c3:18:51:d4:15:10:cd:82:77:b6:ce:85:54:
45:d3:25:60:29:4d:b1:cb:c7:84:5b:07:68:1f:9d:f8:67:4d:
2b:54:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org