Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/N7niApoxAczORSXhNVsVfVaTdkY.roa
File: N7niApoxAczORSXhNVsVfVaTdkY.roa (raw, json)
Hash identifier: U/sooqqQa8S/DPPiUjk8sdqItneszenrT7J/4YjMqYs=
Subject key identifier: 37:B9:E2:02:9A:31:01:CC:CE:45:25:E1:35:5B:15:7D:56:93:76:46
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA2701249B2D595988E6B6FF3CFBD413
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/N7niApoxAczORSXhNVsVfVaTdkY.roa
Signing time: Fri 10 Nov 2023 16:53:20 +0000
ROA not before: Fri 10 Nov 2023 16:53:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212609
IP address blocks: 213.109.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:27:01:24:9b:2d:59:59:88:e6:b6:ff:3c:fb:d4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37b9e2029a3101ccce4525e1355b157d56937646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d5:8a:eb:ce:af:d8:c7:1d:e1:8c:7d:89:20:
7f:90:e6:88:cc:65:51:e5:fe:2b:b9:32:6e:9d:eb:
15:39:44:a2:19:c0:0d:3a:18:54:0f:89:b2:8b:32:
1d:76:29:43:ae:82:32:12:f3:aa:5f:5e:fd:11:41:
d5:f2:1c:44:d2:92:46:10:ab:eb:ef:47:6b:b2:5b:
97:97:0d:67:89:c7:53:1b:2b:3d:5b:c4:f4:2f:5f:
8d:65:cb:03:fd:82:ed:43:30:4a:74:5f:35:77:86:
44:36:57:35:96:24:00:23:67:98:f7:b5:b9:50:8c:
8e:3f:b8:b4:2f:5e:2b:72:b5:f6:40:ea:ad:f9:d8:
9f:cc:66:07:a4:73:ff:18:20:e5:9c:0a:cd:ea:d1:
d4:ad:ff:12:25:71:7b:7b:35:f1:c3:9c:2e:49:a0:
4f:e1:c7:e3:9e:e2:15:93:81:07:c4:8b:b8:dc:e4:
0d:a1:d4:33:70:fa:41:b1:77:74:38:4d:73:5e:12:
62:fb:d5:de:5b:7c:ea:c8:be:1f:0e:15:32:cd:59:
d0:61:d3:54:72:2a:ac:54:d9:0d:9b:59:a5:3b:9e:
e1:c0:3f:66:d6:84:6e:55:d7:12:37:ae:68:a0:e2:
04:4b:4c:50:c9:39:b3:6c:51:c5:e1:2e:4d:89:fa:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B9:E2:02:9A:31:01:CC:CE:45:25:E1:35:5B:15:7D:56:93:76:46
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/N7niApoxAczORSXhNVsVfVaTdkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.155.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:d9:74:a0:1c:e2:c6:3b:1b:a3:51:f2:73:1e:0c:30:c7:e7:
e7:64:14:15:d8:55:f8:5b:2d:c8:72:9b:32:4c:ad:68:0c:a1:
6d:db:6c:4a:b4:0c:dd:95:e3:0e:67:e6:ca:cc:7f:3a:0f:18:
e0:56:2b:49:67:95:a0:b1:49:04:60:8b:84:85:a0:c2:9d:ba:
6c:28:19:b4:0d:61:c6:bb:b1:e2:dc:8b:ec:66:90:7c:54:c0:
f9:0b:d0:eb:0d:ba:19:c9:23:09:15:2a:0d:50:df:f4:7d:95:
13:17:c3:7b:79:54:15:4c:8b:a2:c9:b8:5b:db:cc:3b:be:ef:
26:b4:75:36:c3:48:5d:a7:94:bb:8f:4d:34:42:b7:63:dc:82:
46:e9:1b:dd:e3:a0:13:f7:01:2c:54:d1:e8:6e:33:e5:47:5b:
cf:b6:a4:bf:e2:fe:53:6a:46:30:58:6f:cd:b3:a1:0b:5a:5d:
31:9c:0a:c9:9d:63:68:8c:cb:4d:60:ee:fe:1c:66:8a:ea:ee:
3f:82:70:91:eb:3c:f3:3b:1e:71:40:e0:85:f5:ff:07:4f:f4:
f1:59:69:90:67:84:16:35:d1:e0:49:f9:53:2c:1f:00:8e:a9:
68:62:a2:a7:31:23:03:6c:1c:58:6c:2f:f0:50:5a:d5:17:9f:
4c:e9:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org