Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nUlcTZ6YK8TH5l5DlpEvUaCHJJM.roa
File: nUlcTZ6YK8TH5l5DlpEvUaCHJJM.roa (raw, json)
Hash identifier: 4qblRy5b3TDDGqVi1RCIGbA/Fs44aYzdUKjAGSkhoIM=
Subject key identifier: 9D:49:5C:4D:9E:98:2B:C4:C7:E6:5E:43:96:91:2F:51:A0:87:24:93
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018939856463C55A53F2E728F465849912BD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nUlcTZ6YK8TH5l5DlpEvUaCHJJM.roa
Signing time: Sun 09 Jul 2023 07:19:50 +0000
ROA not before: Sun 09 Jul 2023 07:19:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 84.54.51.0/24 maxlen: 24
31.13.211.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:85:64:63:c5:5a:53:f2:e7:28:f4:65:84:99:12:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 9 07:19:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d495c4d9e982bc4c7e65e4396912f51a0872493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c3:9a:1d:d1:0d:a0:33:60:58:7b:d1:d4:e1:
ea:62:f1:12:5a:b4:f4:4a:6b:77:ef:0f:1a:7c:f1:
3f:6d:42:f1:35:7e:bc:62:b5:5c:c8:58:0a:cf:5d:
3d:0b:fd:bf:c4:a8:52:d9:11:75:7d:91:ec:d1:f9:
3e:f7:33:8c:cc:95:87:84:66:53:a4:8d:9b:2f:33:
52:05:a6:c8:ab:64:b1:71:53:68:72:b8:40:a0:f2:
1c:6a:f5:73:c9:95:49:e7:19:7d:23:6b:f7:5f:34:
3f:96:18:3b:ae:a0:fe:f4:52:56:d0:a9:5d:0b:71:
c2:b0:82:75:d1:99:67:ad:f4:e7:6b:05:dc:2d:e5:
d5:f3:8b:f2:10:82:cd:1f:76:4c:5e:48:f6:ec:77:
74:ad:60:8f:23:29:66:6f:a1:82:f5:56:14:40:8e:
aa:2c:05:95:69:8b:f8:4c:ae:8e:f4:c9:29:5a:f9:
a6:fa:42:24:f8:9e:c4:f6:fd:df:6c:ac:e0:3f:6d:
3b:22:7c:be:96:11:b8:9a:0c:27:b5:4b:83:94:e6:
0c:8f:6a:30:25:72:20:9f:fd:fb:95:5d:f5:d3:a6:
e5:44:59:72:af:a7:b1:41:cc:87:93:5e:f7:8f:88:
39:fb:3e:74:ea:3f:e3:64:9f:b9:78:74:6d:51:e5:
a2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:49:5C:4D:9E:98:2B:C4:C7:E6:5E:43:96:91:2F:51:A0:87:24:93
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nUlcTZ6YK8TH5l5DlpEvUaCHJJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.128.232.0/24
84.54.51.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
10:54:61:d0:6a:2c:18:be:53:b7:27:c6:86:2d:d8:10:7d:95:
e6:e2:c3:b0:e1:ba:48:a2:36:af:ff:c1:e9:ca:2f:5f:0c:d8:
f2:52:73:07:53:71:86:b0:6c:72:6c:22:5e:b1:32:21:0e:3e:
55:fe:ab:88:6d:12:ea:43:6f:30:93:b1:ec:22:e6:8e:1a:86:
5d:79:4d:87:03:ce:3a:9c:7b:2f:4e:aa:f7:40:96:fd:2f:81:
8f:83:cd:33:2d:6a:0c:96:f1:d5:20:bf:24:7f:f2:c7:76:67:
bc:7a:82:78:d9:fa:8c:1a:73:3d:91:f6:4c:32:d2:27:ca:0e:
71:fb:f3:07:dd:b7:bf:93:ce:0b:fb:46:53:38:73:64:a9:4f:
4e:7e:9f:6a:5a:57:82:a1:d8:43:0c:46:f7:24:bc:5f:3e:2a:
23:b5:a4:73:27:07:e4:81:51:7f:47:2d:b4:67:75:7d:3a:e8:
3b:8d:92:59:37:27:31:59:15:4b:bb:fe:8b:58:d8:1f:cb:aa:
9d:31:e6:c2:75:94:f1:84:a0:63:85:72:f7:e4:20:a7:bd:6a:
2b:3b:ac:9a:a9:e8:d8:78:02:6b:89:47:3d:7e:20:b9:02:73:
33:0d:50:fd:0b:b1:d4:e2:ca:fb:17:81:66:a8:ca:46:4b:aa:
60:36:51:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org