Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/nRJlyVmmJqn9CBk1Bsth5OOKYQI.roa
File: nRJlyVmmJqn9CBk1Bsth5OOKYQI.roa (raw, json)
Hash identifier: GeTawSL+Ev1VFuiO8812LwYg/3FK+rGhox4t0ZgvH7Q=
Subject key identifier: 9D:12:65:C9:59:A6:26:A9:FD:08:19:35:06:CB:61:E4:E3:8A:61:02
Certificate issuer: /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial: 01856CF869A77378DDD32442C66D19272BE1
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/nRJlyVmmJqn9CBk1Bsth5OOKYQI.roa
Signing time: Sun 01 Jan 2023 10:54:57 +0000
ROA not before: Sun 01 Jan 2023 10:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6848
IP address blocks: 194.62.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:69:a7:73:78:dd:d3:24:42:c6:6d:19:27:2b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Validity
Not Before: Jan 1 10:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d1265c959a626a9fd08193506cb61e4e38a6102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:7a:34:39:4d:f8:91:ea:df:0a:25:40:e5:
61:34:0e:a2:49:0a:88:e6:23:68:72:e3:ec:6c:51:
cb:87:d8:26:cd:1c:85:32:a2:92:58:a9:39:c8:2d:
a4:a3:fa:32:64:3b:dc:ee:13:87:75:b5:0a:e3:6f:
6c:70:1f:dc:79:fd:1a:8e:21:70:68:9c:2e:b8:fe:
2e:04:3e:ef:9a:c8:c1:fe:f7:f9:ad:46:46:ef:51:
4a:a4:22:68:6b:2d:aa:b1:23:e8:5c:e5:0a:f9:2e:
26:54:39:4f:34:60:2b:1f:d2:6a:85:03:8a:e6:ef:
2e:fa:93:87:8a:4f:80:7e:2f:76:43:f5:5c:fb:e3:
ed:9e:b0:9c:ed:cb:c2:cb:9a:ed:8f:c2:c5:65:a0:
fb:3c:ff:0e:4c:28:75:21:0f:7c:4d:99:2d:3f:7b:
9a:52:b8:8b:b7:6a:1a:cd:ef:cd:cf:98:30:23:e9:
9e:6b:2a:f8:3b:49:e9:5a:e8:b3:a5:57:1c:e5:c0:
03:e9:b3:5b:8b:79:ae:95:95:b4:e4:30:69:0b:40:
76:45:ab:06:75:ce:c5:b5:79:c8:be:24:59:c0:bb:
d5:bc:21:35:85:1f:2b:9f:8f:32:82:57:a1:0a:1e:
74:cd:0b:54:ae:fc:a7:9d:88:64:6e:4f:8c:c2:b5:
41:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:65:C9:59:A6:26:A9:FD:08:19:35:06:CB:61:E4:E3:8A:61:02
X509v3 Authority Key Identifier:
keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/nRJlyVmmJqn9CBk1Bsth5OOKYQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.62.73.0/24
Signature Algorithm: sha256WithRSAEncryption
40:a3:93:48:07:b3:87:44:1d:44:25:d5:70:cc:6f:bf:6f:e2:
d4:bd:81:83:f5:3e:35:e7:5e:08:51:30:8a:a9:2b:a2:d7:11:
9e:ca:36:ee:d8:f1:8e:3e:c6:94:c7:06:07:5c:9d:e7:2a:2d:
65:ad:08:94:71:cd:ab:4a:ed:c4:b8:c8:19:57:bc:4c:23:99:
81:6e:97:f9:5b:14:c9:ad:e3:38:14:6b:45:5f:6e:82:0c:ba:
d1:a7:0b:b5:01:40:99:ff:61:06:ff:32:2f:43:d6:3e:14:ca:
92:92:15:4b:06:68:96:a3:d8:3b:47:2a:a7:30:f0:ea:b9:0a:
cc:96:6f:9e:3c:80:23:d6:2f:62:b7:35:aa:e2:51:4b:f6:2e:
75:f5:7d:bd:e5:82:52:06:6b:fa:a8:ee:9d:31:c3:d6:af:08:
86:e6:94:18:68:fd:07:48:1c:c0:c8:58:4a:1e:14:f0:ef:1c:
31:b3:0d:5c:eb:49:a0:b5:a3:46:a8:06:3a:95:60:aa:e0:84:
4a:2c:da:47:13:02:7a:1a:fd:b2:1a:ff:7c:ea:c8:75:16:9d:
a4:8a:e8:26:29:f8:79:ac:93:69:14:b3:80:22:2b:71:46:64:
d4:f5:51:44:76:05:b2:23:78:12:5d:74:bd:39:4a:03:5c:18:
7b:30:16:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:34 2024 by rpki-client on console-fra.rpki-client.org