Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/dqJlnUxmRkyoil-PH-NSczqawjw.roa
File: dqJlnUxmRkyoil-PH-NSczqawjw.roa (raw, json)
Hash identifier: kM0tUo7kU7U7wSn7pcD914bgE0IzEG0jqCFOw7JBuvw=
Subject key identifier: 76:A2:65:9D:4C:66:46:4C:A8:8A:5F:8F:1F:E3:52:73:3A:9A:C2:3C
Certificate issuer: /CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Certificate serial: 0185701ED3BDA19625691B5A772763681987
Authority key identifier: 25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/dqJlnUxmRkyoil-PH-NSczqawjw.roa
Signing time: Mon 02 Jan 2023 01:35:46 +0000
ROA not before: Mon 02 Jan 2023 01:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.37.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 22:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:d3:bd:a1:96:25:69:1b:5a:77:27:63:68:19:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c5fbdc722057a65fa9dbb117fc4bdf72edc0a7
Validity
Not Before: Jan 2 01:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76a2659d4c66464ca88a5f8f1fe352733a9ac23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:20:37:b6:90:50:a1:fc:f0:ea:31:2f:c5:
21:9f:ea:7e:4a:31:93:3f:3d:3a:5b:79:98:e5:7f:
d3:59:b5:2d:82:21:38:68:c8:2a:ae:a4:c9:18:d4:
1e:ef:f1:7b:09:17:b4:38:05:e0:96:9e:f4:0c:21:
3d:4f:b6:10:78:c3:d8:43:ea:bd:00:14:00:7f:11:
b5:0c:ed:33:dd:3a:48:9a:6d:16:22:ca:e7:e1:8c:
27:6f:41:62:b3:37:dc:8e:27:20:4e:ba:cd:02:7a:
92:81:87:56:3b:c8:c8:ba:50:3b:20:ec:2d:ec:70:
a7:e2:e8:b4:75:a2:db:3c:4c:5b:45:4d:fc:36:90:
52:ea:49:a4:af:ca:74:c6:25:4c:59:01:4a:c4:e9:
bc:9a:59:7d:24:96:01:90:a5:83:9b:9f:b2:25:06:
c4:10:99:67:64:f6:66:d1:f3:01:7c:5d:46:1e:b2:
63:ac:9e:f6:3a:d9:02:6a:d5:98:c6:8e:b3:73:2d:
e8:fc:80:39:d4:b4:8e:40:16:ad:47:3f:56:96:97:
56:49:7e:71:1c:c3:36:7c:5d:5a:27:aa:28:1a:e1:
89:20:81:80:df:de:e4:f6:b9:a6:89:90:6f:c5:e7:
21:86:ac:33:86:12:fb:5e:cf:d0:86:14:1a:84:b0:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A2:65:9D:4C:66:46:4C:A8:8A:5F:8F:1F:E3:52:73:3A:9A:C2:3C
X509v3 Authority Key Identifier:
keyid:25:C5:FB:DC:72:20:57:A6:5F:A9:DB:B1:17:FC:4B:DF:72:ED:C0:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcX73HIgV6ZfqduxF_xL33LtwKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/dqJlnUxmRkyoil-PH-NSczqawjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/01cfc4-a39f-4b3b-90be-ce69556761bd/1/JcX73HIgV6ZfqduxF_xL33LtwKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.132.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d9:70:5d:38:89:ef:e3:a2:41:30:31:13:2f:e0:24:f6:8f:
4c:10:a6:81:62:be:ce:91:7e:8b:83:87:63:43:0c:29:b7:5e:
86:43:b5:d7:bd:37:1f:7f:81:24:0f:18:0d:27:9a:d2:18:38:
73:c5:76:2f:cc:05:ef:41:bb:af:1e:5a:ef:1e:ac:8f:dd:b7:
a2:f1:69:cb:3a:10:65:3a:6b:e5:07:08:71:d9:6a:6b:dd:eb:
99:3d:5f:bb:2e:08:b6:de:bf:7e:c9:f3:08:0c:0e:fa:a4:87:
77:9d:58:06:ee:e2:ee:a7:07:0c:1b:1c:e6:6f:22:f0:af:0f:
01:de:26:25:19:56:79:fa:c7:e7:74:96:75:13:00:f4:0e:a3:
91:e5:c5:a8:35:eb:94:d1:cb:42:e2:e7:50:2c:6f:4d:6a:a4:
78:a5:cf:ec:0a:b4:98:f5:db:5e:ea:2e:46:a1:4d:52:f4:5e:
b2:0c:d7:3f:70:a1:3c:c5:71:a2:76:28:d2:8f:d2:12:44:39:
8a:1f:6f:d4:cd:f6:27:9a:f4:78:6e:45:ae:22:a7:b6:73:ce:
27:c8:03:45:87:24:da:08:3e:b8:03:3a:4c:75:35:bd:90:b7:
82:f1:1c:ed:85:f1:38:1e:c6:46:5c:f2:28:5f:42:07:66:57:
c4:89:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org