Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/n9cdoEO3_PpAp0jg4XjPyCZlbcY.roa
File: n9cdoEO3_PpAp0jg4XjPyCZlbcY.roa (raw, json)
Hash identifier: AR1iEZsJqmUugrZ08t0Zg9HXH5ciBOBDwjLvYMtFSBI=
Subject key identifier: 9F:D7:1D:A0:43:B7:FC:FA:40:A7:48:E0:E1:78:CF:C8:26:65:6D:C6
Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial: 01856FA6FC156EF3D1D8C03B811AFD01DD06
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/n9cdoEO3_PpAp0jg4XjPyCZlbcY.roa
Signing time: Sun 01 Jan 2023 23:24:52 +0000
ROA not before: Sun 01 Jan 2023 23:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206375
IP address blocks: 93.157.188.0/24 maxlen: 24
93.157.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:fc:15:6e:f3:d1:d8:c0:3b:81:1a:fd:01:dd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Validity
Not Before: Jan 1 23:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fd71da043b7fcfa40a748e0e178cfc826656dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1b:7c:40:be:75:0a:81:82:7d:6c:b1:3a:cc:
93:57:f2:de:a7:91:74:94:d2:c4:bc:1e:99:94:2d:
f5:d6:47:1b:dc:f7:ff:8e:4d:14:70:76:63:1d:83:
82:ce:5b:85:4a:2a:15:49:9b:1c:89:97:52:c2:cd:
25:49:4f:c0:6a:bc:d1:5e:0c:b9:21:d2:5a:3b:75:
b7:2a:6a:25:91:11:f8:4c:22:1e:79:60:3b:00:91:
f9:bf:b6:11:34:a4:41:d0:d8:ba:3a:5d:3f:3d:27:
84:80:72:ff:8d:6c:39:b3:4a:c8:65:ad:30:53:29:
0f:0f:06:b1:53:20:5a:64:cb:41:4f:c8:06:8c:18:
67:78:00:ec:28:bb:5c:48:36:c4:d3:05:fe:15:90:
cd:e1:1a:67:a3:0c:8b:4b:fe:2c:31:02:8f:ec:0c:
1f:68:b5:f1:2c:29:09:10:46:06:ce:48:d2:dc:d2:
a1:fe:46:64:4a:4e:a4:b5:40:de:be:25:0d:6b:c2:
0b:ff:47:37:69:ea:81:09:2d:67:ed:d4:a6:1c:b3:
cb:1a:c9:84:f8:81:c8:2e:1e:ee:c6:4b:c2:8d:c8:
d8:7c:4a:7c:8c:30:4e:00:9b:b0:50:41:26:3c:35:
8f:00:44:b9:35:df:96:20:c8:39:ad:d3:85:67:c1:
6e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D7:1D:A0:43:B7:FC:FA:40:A7:48:E0:E1:78:CF:C8:26:65:6D:C6
X509v3 Authority Key Identifier:
keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/n9cdoEO3_PpAp0jg4XjPyCZlbcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.188.0/24
93.157.190.0/24
Signature Algorithm: sha256WithRSAEncryption
65:d0:1b:fe:ad:3f:e2:8d:a6:b6:d4:62:c6:26:ee:81:d9:50:
3f:4c:a1:f6:39:4c:0a:85:69:72:64:98:9a:49:b3:4e:3d:6b:
a4:90:1b:f5:ca:48:2d:dc:8f:78:23:fc:85:34:c7:72:6b:3d:
ce:31:4b:9f:7f:ac:9f:d7:de:e4:f3:14:20:e8:d8:a2:fa:e4:
4e:1f:a7:38:6f:7c:09:06:a7:3d:05:3a:ea:d4:61:d7:96:d9:
64:8b:17:37:9e:43:b7:40:e7:4a:a2:b5:d6:0e:7f:ae:bb:0e:
86:ce:19:f3:d9:2e:4f:24:e4:07:c8:ff:c1:fc:7b:b7:e4:52:
e8:fc:c7:b2:b5:a5:aa:6e:45:ed:ac:4f:de:d5:39:bb:22:f8:
01:c4:6b:79:43:26:a0:6b:07:99:91:2c:f6:33:ae:a3:2b:0e:
4f:f6:95:eb:4e:73:10:ce:32:25:05:64:b7:2e:09:82:8e:35:
ba:52:81:59:9d:83:cd:26:50:ce:3b:9d:d2:d5:cc:63:83:59:
59:d4:75:92:f8:47:66:ba:a4:28:76:0d:04:93:51:0a:60:c9:
e5:fd:c6:29:35:87:fd:f1:8f:94:a9:6e:b7:64:ed:20:71:59:
71:4d:0b:33:30:b1:e6:1e:2d:12:51:2a:9c:a1:58:1e:22:70:
1e:c2:c8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:43 2024 by rpki-client on console-ams.rpki-client.org