Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NEoDSwQZ0P6boAombydOlKS2y64.roa
File: NEoDSwQZ0P6boAombydOlKS2y64.roa (raw, json)
Hash identifier: ZvBMZGXnY5AYsyCX53ZqDXFPP1hHE0ybkOHdYRuydPE=
Subject key identifier: 34:4A:03:4B:04:19:D0:FE:9B:A0:0A:26:6F:27:4E:94:A4:B6:CB:AE
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01878E55843EFF6434E90B2D3CA835803897
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NEoDSwQZ0P6boAombydOlKS2y64.roa
Signing time: Mon 17 Apr 2023 08:29:41 +0000
ROA not before: Mon 17 Apr 2023 08:29:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 192.124.172.0/24 maxlen: 24
192.124.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:55:84:3e:ff:64:34:e9:0b:2d:3c:a8:35:80:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 17 08:29:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=344a034b0419d0fe9ba00a266f274e94a4b6cbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6a:28:fb:ac:a9:35:ce:6d:13:70:84:2b:ff:
86:f8:84:15:87:80:ce:9f:ea:9c:87:20:2f:74:66:
a0:38:f9:58:0e:cc:6e:f4:68:e5:58:67:bc:f9:33:
fa:03:16:a6:4a:ed:16:e3:21:fd:0c:21:00:d6:90:
fa:a4:f7:75:9f:23:03:60:14:23:d8:5b:de:c1:8d:
7d:75:7f:42:49:5b:5f:c5:aa:c6:e4:5b:ab:60:5f:
6c:2f:d6:36:f1:51:6e:47:65:7e:f5:8c:91:2b:94:
33:89:0b:e0:90:55:41:ee:79:76:33:94:8d:5f:41:
b3:64:1d:62:e3:01:b7:c9:d8:18:b8:7e:87:06:10:
be:8f:21:f5:b7:0c:92:29:20:4b:58:f9:02:4a:eb:
49:34:8e:bf:52:84:5d:52:dc:8e:a9:8f:75:00:22:
2e:0b:ed:9c:1c:bd:d7:9e:6f:c0:c6:d5:c8:d9:87:
32:33:6b:67:8a:ea:de:18:c1:47:ab:6d:b2:24:92:
68:b3:f1:5a:04:f9:84:46:91:7d:d7:f2:16:be:8b:
ea:44:0f:ea:c6:1e:8f:ea:94:b8:ef:1b:bb:ec:59:
22:9f:0a:d5:7f:9a:19:51:b9:df:b6:6c:2c:09:10:
8a:8f:ff:ee:28:6b:8e:92:17:d3:e3:c2:fd:cf:c3:
4a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4A:03:4B:04:19:D0:FE:9B:A0:0A:26:6F:27:4E:94:A4:B6:CB:AE
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NEoDSwQZ0P6boAombydOlKS2y64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
192.124.183.0/24
Signature Algorithm: sha256WithRSAEncryption
56:b0:71:95:6d:15:24:ee:be:7e:18:96:d1:bf:30:d0:66:e3:
15:01:ed:38:3d:c4:a8:10:b5:46:c8:e5:13:bc:00:fc:4a:e1:
7b:86:3f:ad:8b:b5:d9:71:28:53:65:c6:15:35:88:94:3d:6f:
0a:91:1e:d7:6b:a4:2b:c6:c7:06:20:92:0f:f0:d3:b8:c5:dc:
09:bc:20:8a:a8:e2:03:ec:1b:78:4f:4e:b3:42:1f:c8:26:bb:
d6:2b:0f:3c:a4:1a:29:82:eb:0a:32:04:00:0b:79:9a:98:2e:
84:20:73:da:10:13:2e:23:56:23:42:fb:d7:ad:3c:00:01:82:
32:54:34:7d:ea:48:5b:6e:d6:ee:62:4e:9a:31:6d:8e:43:ad:
81:23:02:04:40:6a:ec:2b:7b:c0:23:0f:77:29:4c:d9:38:16:
c4:5f:c2:b1:7a:68:3f:8f:64:fa:99:90:fc:e9:44:d0:27:70:
62:3a:4d:14:d5:cc:26:a6:c5:10:a8:36:74:16:04:df:cd:55:
84:a6:15:23:13:23:88:1e:4c:e3:eb:45:00:25:60:7a:5a:48:
2e:e5:b1:bc:30:6c:a0:c9:5f:55:89:5e:98:01:d8:70:e3:37:
00:f5:43:a9:7d:09:6d:59:a6:b9:d5:5e:28:4e:19:cd:b8:11:
bf:b9:4d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-ams.rpki-client.org