Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/N6wraOZyWPDqQv46-OUDkhTNSLY.roa
File: N6wraOZyWPDqQv46-OUDkhTNSLY.roa (raw, json)
Hash identifier: whg5fiePt5goItOOO3TSl34VHd18LgGoyILYRIcJ1zw=
Subject key identifier: 37:AC:2B:68:E6:72:58:F0:EA:42:FE:3A:F8:E5:03:92:14:CD:48:B6
Certificate issuer: /CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Certificate serial: 01856D53EBB337B6AE988B7AF858D7EBBB9D
Authority key identifier: B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/N6wraOZyWPDqQv46-OUDkhTNSLY.roa
Signing time: Sun 01 Jan 2023 12:34:54 +0000
ROA not before: Sun 01 Jan 2023 12:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 193.36.32.0/24 maxlen: 24
193.5.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:eb:b3:37:b6:ae:98:8b:7a:f8:58:d7:eb:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a8fea8fca800c1fc49ef2d85c92e323752b0ed
Validity
Not Before: Jan 1 12:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37ac2b68e67258f0ea42fe3af8e5039214cd48b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6d:23:ac:5c:91:e6:0a:cf:38:6e:90:88:ce:
41:7d:cd:2c:63:0f:dc:ee:ff:54:c4:41:d1:b7:62:
e6:42:a8:e8:58:86:59:44:8a:e3:d2:e2:63:f5:bb:
0b:b9:38:97:3e:9b:22:4f:04:e1:59:55:b6:6c:08:
0f:f8:0a:1a:67:03:4a:41:6e:80:33:3f:77:14:1c:
6a:6e:61:f2:49:cc:b8:6e:c4:3f:d2:2a:2f:76:d0:
93:41:90:d1:3b:cf:89:dc:70:6b:2a:95:3f:b4:85:
72:e2:be:3d:4f:97:b3:71:ca:71:6f:a6:62:1a:94:
c4:31:9d:d3:38:4b:37:ce:cb:23:fe:41:7b:3d:d8:
5a:91:4e:46:41:28:9f:ee:d3:23:6c:f0:44:d2:bf:
fa:8f:19:aa:50:cb:60:af:e6:f5:5b:2c:dc:ac:e5:
ea:94:80:dd:b1:cf:73:b3:3b:c1:6b:0f:05:03:60:
22:b1:99:3f:35:4b:55:af:33:ab:1b:f3:72:c0:61:
0a:ab:b8:84:34:8a:aa:e8:aa:96:ea:e5:e5:5b:da:
f4:79:3e:fa:df:b9:60:33:14:be:c5:9c:9a:ec:51:
24:b3:24:b1:d6:58:ef:dd:5b:bc:5e:8f:b1:cb:95:
31:f7:d0:03:77:da:71:60:6c:2c:92:31:d8:8d:89:
79:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AC:2B:68:E6:72:58:F0:EA:42:FE:3A:F8:E5:03:92:14:CD:48:B6
X509v3 Authority Key Identifier:
keyid:B7:A8:FE:A8:FC:A8:00:C1:FC:49:EF:2D:85:C9:2E:32:37:52:B0:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6j-qPyoAMH8Se8thckuMjdSsO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/N6wraOZyWPDqQv46-OUDkhTNSLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ce1643-c08d-40f6-9444-af714ad52f29/1/t6j-qPyoAMH8Se8thckuMjdSsO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.22.0/24
193.36.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:9d:8c:55:97:ad:c4:51:f7:3c:67:dc:78:90:61:60:26:bd:
10:e1:0c:24:87:a5:7d:73:4e:fe:97:bf:36:1a:68:0a:32:40:
c8:5f:5e:1e:6e:9f:12:c6:cc:b4:34:0c:17:7d:98:1a:9a:54:
75:32:ad:b1:77:f7:a1:46:1f:d5:1d:e0:f8:52:37:0b:dc:10:
1f:1a:df:73:7a:0a:8d:d9:67:4f:73:25:ca:ab:3e:9d:ab:58:
cb:db:81:0f:e5:b9:b5:bb:b5:da:ba:78:5b:30:5f:02:08:14:
81:6b:8c:8d:d4:20:6f:eb:4f:b6:f1:a9:f5:59:51:1b:46:14:
3c:bf:77:ce:fd:f2:bc:af:7f:c4:4b:55:7f:ac:2b:97:fb:01:
a1:93:9f:84:b2:fc:f9:c3:23:26:f1:b8:cd:08:1d:dc:db:d4:
51:d1:e5:d3:a1:91:f5:30:2d:cf:b3:83:65:a7:10:ac:68:91:
4d:fe:12:d9:3a:93:b2:8e:46:99:6e:e2:a3:0c:41:2b:2e:62:
5c:0c:8a:2b:86:f5:00:99:9a:0e:82:65:4e:c7:22:81:ab:d0:
b3:91:9c:5a:3b:30:d9:c6:de:9b:a8:54:08:08:fa:9d:f4:37:
24:78:58:87:69:a9:bf:ea:10:d8:59:be:16:25:33:48:a5:08:
1e:a4:ea:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:42 2024 by rpki-client on console-fra.rpki-client.org