Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9xdnwUCbhGbmt6d3sHtbfh6tDY4.roa
File: 9xdnwUCbhGbmt6d3sHtbfh6tDY4.roa (raw, json)
Hash identifier: 8Ph0vfze4y4kES+lzEWVQ2KrHvzVoUw8OIuzAdexXSc=
Subject key identifier: F7:17:67:C1:40:9B:84:66:E6:B7:A7:77:B0:7B:5B:7E:1E:AD:0D:8E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0186931B9D0A50D0CDF03880398A23F6E635
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9xdnwUCbhGbmt6d3sHtbfh6tDY4.roa
Signing time: Mon 27 Feb 2023 13:41:45 +0000
ROA not before: Mon 27 Feb 2023 13:41:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.172.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:1b:9d:0a:50:d0:cd:f0:38:80:39:8a:23:f6:e6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 27 13:41:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f71767c1409b8466e6b7a777b07b5b7e1ead0d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8b:8b:e8:d6:d4:57:b2:c1:ad:c4:6c:2e:a9:
c6:f6:fb:4e:49:91:c4:43:a1:d2:c4:ee:a7:8f:70:
f5:dd:e5:e1:b8:41:9d:67:8f:a2:be:3b:19:48:86:
48:66:4e:cd:65:0c:4a:50:cb:4f:d7:db:0d:ce:b3:
3c:15:cb:bc:45:85:1b:7f:7b:64:f4:c9:a9:8a:2a:
d0:68:f9:f1:33:b0:f2:96:95:42:18:1b:d5:e9:9c:
f4:27:ae:6a:3b:b3:19:59:fd:bd:91:94:7f:63:68:
83:6e:31:5e:5c:46:d9:6e:04:a8:1f:f6:7e:0d:3b:
e4:a1:47:40:14:fb:37:e6:f7:07:a7:e5:b9:ae:04:
e1:bb:a9:05:60:c4:05:4f:a5:89:be:f0:b2:53:82:
80:e5:ef:1f:f4:89:85:a4:2d:23:a2:13:c1:a3:9b:
1c:65:ca:bb:a4:85:3d:53:37:c8:cc:47:17:1d:4b:
03:76:db:d7:0e:3a:97:66:f7:9f:f5:12:76:7e:8e:
df:36:d9:11:11:de:57:03:fc:d8:04:53:3c:b3:ba:
22:03:d3:41:5f:2b:d7:1a:43:07:ec:bc:24:6c:81:
0e:30:7e:b7:7e:e0:c8:ea:09:7b:d6:39:16:19:b7:
f5:1e:06:2a:14:bb:72:ba:6d:5c:5f:0d:bb:75:89:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:17:67:C1:40:9B:84:66:E6:B7:A7:77:B0:7B:5B:7E:1E:AD:0D:8E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/9xdnwUCbhGbmt6d3sHtbfh6tDY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.183.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1a:ce:e6:83:83:cf:75:cd:d7:7e:ae:d8:07:20:0c:33:56:
cc:a0:80:ac:ff:f3:24:9c:ff:24:c3:1c:97:72:a0:f7:41:45:
a7:da:5a:60:7e:e6:1d:a0:0c:9a:8b:6e:41:d0:e5:74:e9:fd:
96:11:08:fd:bd:f4:d8:85:26:be:81:5a:92:30:d7:85:e3:d4:
e3:66:cf:19:c9:5b:fe:9d:73:8c:ad:52:8b:36:30:0a:9a:1b:
ce:36:12:17:d5:a7:71:83:e3:5d:ce:fd:1f:7f:4f:f5:d1:eb:
fe:0f:a9:b1:71:61:ab:c9:7e:04:eb:1c:de:7a:51:71:bc:25:
8f:cb:63:a9:22:e3:77:e5:20:2f:f1:ed:0e:d0:3b:90:41:47:
00:9a:ea:8a:96:04:80:b1:4c:1c:4f:a5:4b:b8:65:7c:84:3e:
c7:1b:9a:7d:09:a2:9e:c8:62:cf:ee:ad:58:36:91:72:97:24:
85:f7:ae:fe:d7:d9:19:f7:97:64:98:ef:ad:8f:34:e8:cb:f5:
62:c7:c4:a3:27:e6:fd:8b:29:44:ac:4a:e2:4f:80:e1:eb:29:
23:77:b4:6d:d7:95:45:0a:4b:1d:49:01:00:ef:04:91:89:9d:
30:b9:24:0d:d6:13:9c:6e:5e:54:8f:47:59:df:ee:f9:e6:c8:
25:55:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:57 2023 by rpki-client on console-fra.rpki-client.org