Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/nn_Q9MFoifzGC6Idv7Ns286kBHg.roa
File: nn_Q9MFoifzGC6Idv7Ns286kBHg.roa (raw, json)
Hash identifier: 4rhmdP7gtw7akdJ8mzI67NqkbT/QXqUEeuBL9kyGpa8=
Subject key identifier: 9E:7F:D0:F4:C1:68:89:FC:C6:0B:A2:1D:BF:B3:6C:DB:CE:A4:04:78
Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial: 01856DEF74BC17EB7CA0B4515A63142B311F
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/nn_Q9MFoifzGC6Idv7Ns286kBHg.roa
Signing time: Sun 01 Jan 2023 15:24:47 +0000
ROA not before: Sun 01 Jan 2023 15:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199815
IP address blocks: 193.59.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:74:bc:17:eb:7c:a0:b4:51:5a:63:14:2b:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Validity
Not Before: Jan 1 15:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e7fd0f4c16889fcc60ba21dbfb36cdbcea40478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:20:46:9a:ac:f3:41:b6:8d:d8:1f:d7:7d:
ad:58:4a:ee:0f:72:4d:d1:e1:42:74:4a:92:ad:37:
f7:ab:95:86:95:98:b7:53:34:7b:b3:70:08:0a:6e:
da:b5:63:4b:b2:6f:fe:ac:3a:09:04:f5:c1:0f:d7:
bf:89:eb:4b:c0:05:a1:44:18:99:4f:7e:73:af:71:
e1:cb:b9:f1:58:c7:40:b4:b0:6d:ce:4d:36:33:73:
58:64:79:b8:f7:16:d3:46:99:8f:a9:c8:c6:41:35:
3f:55:d6:12:8f:02:10:1e:5b:b3:fd:8b:5c:e7:90:
17:27:0a:63:f3:f8:23:33:13:03:d1:1a:83:32:1a:
b7:f1:76:30:a3:d5:62:0b:eb:a3:d3:e2:24:ab:d0:
09:8e:f8:44:61:28:be:d1:cd:04:63:96:45:30:73:
bf:10:08:36:56:2a:75:eb:11:e0:49:fb:4c:cc:2a:
77:3f:cb:73:36:35:e8:03:55:2e:e5:a1:35:ee:4c:
71:1e:31:7d:24:a5:f7:9e:f1:fc:9c:65:51:98:62:
f0:d4:0a:c4:08:e4:6d:e3:d0:e9:a3:ea:04:39:24:
61:42:06:0c:80:f1:79:1d:b2:eb:bb:7e:09:a2:0a:
84:31:4b:fe:ea:ad:e4:7c:1a:16:94:d0:4e:72:79:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7F:D0:F4:C1:68:89:FC:C6:0B:A2:1D:BF:B3:6C:DB:CE:A4:04:78
X509v3 Authority Key Identifier:
keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/nn_Q9MFoifzGC6Idv7Ns286kBHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.59.176.0/24
Signature Algorithm: sha256WithRSAEncryption
16:2c:9a:bd:a3:04:0d:5e:8a:65:03:2f:08:39:4b:b2:8a:24:
64:6c:0d:69:c5:d6:38:0b:c5:bb:fb:a4:37:ff:a5:07:b4:37:
5d:cc:2e:40:90:36:2f:5e:e6:28:df:e0:af:37:a7:0a:46:b1:
7f:ff:6e:c7:a4:9c:87:05:2f:d8:c2:ee:5a:1a:a4:76:5b:00:
03:b7:05:8f:0e:1a:da:5e:7b:85:fe:ff:c7:a6:55:35:2f:3f:
67:e6:54:02:a7:4f:ce:15:bb:45:2d:79:6e:f0:6e:19:95:88:
99:53:7c:2a:03:43:52:27:d7:1a:0e:75:21:0a:89:9a:d5:0b:
d3:8c:cc:ca:7d:42:63:d8:d9:02:e7:90:5c:02:06:de:77:47:
24:1d:e8:42:2f:5b:77:d1:d7:3b:72:96:b8:59:6e:d9:16:96:
07:13:46:40:d4:4a:92:95:72:93:84:f9:4b:37:bd:e6:55:c2:
bb:87:a9:a1:61:11:53:f2:83:01:d1:7e:e2:e5:c8:53:5f:b1:
dd:9d:c7:d6:8d:ac:5a:17:30:05:dd:27:2b:8d:11:a8:b8:31:
ba:1a:ca:27:5d:39:2f:c0:00:51:04:a4:b8:b5:78:b1:bc:38:
5c:9d:26:15:0c:4c:3c:d4:8e:e2:4d:21:48:ce:33:c6:0d:c6:
26:f3:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:40 2024 by rpki-client on console-fra.rpki-client.org