Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/n1xkP-l2xqfdEIYnH2SVpw8YzQ0.roa
File: n1xkP-l2xqfdEIYnH2SVpw8YzQ0.roa (raw, json)
Hash identifier: LvOPl++PGkbLPb73+9IKgyM4+ldVrfCwkXxDUZ+yZwk=
Subject key identifier: 9F:5C:64:3F:E9:76:C6:A7:DD:10:86:27:1F:64:95:A7:0F:18:CD:0D
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185738FE3FDCEA4B1C336746678913D2BD6
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/n1xkP-l2xqfdEIYnH2SVpw8YzQ0.roa
Signing time: Mon 02 Jan 2023 17:38:07 +0000
ROA not before: Mon 02 Jan 2023 17:38:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36352
IP address blocks: 194.31.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:e3:fd:ce:a4:b1:c3:36:74:66:78:91:3d:2b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f5c643fe976c6a7dd1086271f6495a70f18cd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:fe:b4:c2:d1:0b:cc:34:80:e8:a8:ba:f7:
84:a4:78:7f:d0:5f:7f:85:66:07:51:d1:a0:47:96:
20:75:8b:81:7b:46:8b:05:bd:40:38:7c:93:02:1e:
1a:37:7c:88:a3:50:e9:57:77:3e:ed:4a:4a:1e:12:
6f:9b:97:71:67:78:2f:f8:87:39:6c:54:32:89:f0:
aa:7f:68:bd:7f:fb:8a:40:98:19:eb:2c:d4:a6:f3:
81:05:6b:27:39:2d:4a:91:49:09:1f:a7:6e:a2:40:
87:b7:0d:be:9a:0e:53:53:6c:69:bb:94:0a:0f:ff:
fb:8e:19:ba:8c:18:b5:8d:d3:60:c5:fa:68:6e:fb:
e1:88:57:5a:b4:44:37:04:fd:cd:0d:59:9d:84:04:
e5:51:87:22:a5:4b:8b:42:a1:91:85:50:a1:65:06:
d8:91:27:e7:d3:c7:72:7e:41:e9:df:3a:90:92:b7:
bd:d1:a9:f1:7c:de:98:97:ba:51:55:27:5c:b2:d2:
a3:6f:7a:96:ed:8f:91:2f:0b:2d:c6:80:75:1c:7a:
46:b7:a3:ad:a5:cc:7e:d7:7b:db:cf:b4:e3:7e:ea:
7f:31:f7:12:8a:bd:bb:b0:c6:b9:7f:d5:29:7d:95:
e9:4c:a3:40:c9:86:0b:de:9b:21:9a:5f:d9:a9:53:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5C:64:3F:E9:76:C6:A7:DD:10:86:27:1F:64:95:A7:0F:18:CD:0D
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/n1xkP-l2xqfdEIYnH2SVpw8YzQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.143.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:89:35:60:66:ab:a9:21:14:aa:2e:2a:7b:30:ba:f8:98:d3:
82:88:38:e9:0b:08:2e:03:5e:d2:bd:c1:47:4e:6b:4b:f1:bb:
4b:65:e4:34:d6:b6:bc:c5:d4:d1:62:87:8a:d4:57:28:34:44:
19:9f:b5:4c:37:e9:b3:72:39:92:17:b9:4b:44:68:46:2f:bc:
e2:74:2f:74:c9:50:c8:9b:4b:ac:03:3e:db:22:49:f1:34:36:
4b:64:82:a7:b4:45:68:72:fa:5f:52:e7:0b:be:57:09:fc:cb:
aa:be:64:37:bd:ad:05:48:71:d2:8f:35:f2:e4:28:80:ae:1a:
39:2c:3f:2c:08:25:62:a7:d3:6d:91:7f:a4:a4:4a:47:01:d1:
9b:4a:37:50:96:c8:5f:f6:0b:ca:e7:33:cb:b8:49:40:9b:dd:
bd:a5:14:67:71:64:42:5c:c2:dd:6b:84:c6:1d:74:5a:f4:29:
9c:85:df:cd:d3:66:c7:3c:ee:31:50:a8:49:2c:e2:0d:ce:d0:
8a:a9:93:6b:65:4b:e6:3b:e1:74:31:1e:49:e8:75:0b:1d:ca:
e9:f8:83:53:9b:47:43:23:a0:36:f3:0b:81:60:2e:c3:4e:cc:
27:c9:2e:13:25:77:7f:a8:c4:2a:1d:f4:a7:e1:b3:16:2d:f6:
ea:65:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org