Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/nANt0EjXJCFLNez2v9VkHkOCG58.roa
File: nANt0EjXJCFLNez2v9VkHkOCG58.roa (raw, json)
Hash identifier: GXCvom5XlskC+U6uasAj3xAS79rzBvzoIx9z0nnTcKA=
Subject key identifier: 9C:03:6D:D0:48:D7:24:21:4B:35:EC:F6:BF:D5:64:1E:43:82:1B:9F
Certificate issuer: /CN=9759529dd3170645d76cf6ac0659506cc649ca90
Certificate serial: 0189869793D2ACA2ACA297CA8C5B0890EA0D
Authority key identifier: 97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/nANt0EjXJCFLNez2v9VkHkOCG58.roa
Signing time: Mon 24 Jul 2023 06:30:27 +0000
ROA not before: Mon 24 Jul 2023 06:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51191
IP address blocks: 185.169.24.0/24 maxlen: 24
185.169.25.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:97:93:d2:ac:a2:ac:a2:97:ca:8c:5b:08:90:ea:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9759529dd3170645d76cf6ac0659506cc649ca90
Validity
Not Before: Jul 24 06:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c036dd048d724214b35ecf6bfd5641e43821b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:36:48:c0:70:15:25:32:fe:11:c3:a7:5c:
98:f4:6f:34:37:ce:6a:f5:5d:ec:6b:e3:75:55:62:
60:8e:71:fa:e9:5d:7b:2d:52:53:69:56:85:4a:c6:
06:de:09:ae:87:60:4e:d2:1e:f0:6d:5f:d4:02:6a:
f8:8b:ed:b6:a5:36:03:08:c9:3d:48:9a:e4:33:d7:
d3:10:5d:71:2f:9f:22:05:41:5b:15:3e:95:7f:ed:
3c:69:31:ea:77:9a:1a:7b:40:a3:6f:82:c0:0d:d1:
c6:42:42:4e:48:dc:b9:ab:8e:47:c3:77:1f:f3:b0:
1f:f5:bc:fa:03:e3:9f:7e:3e:8f:da:ae:78:14:a0:
04:4c:7c:b7:75:80:3a:ff:4a:de:60:be:7f:aa:16:
3e:b9:24:bd:dd:ab:aa:05:14:2b:7e:bf:17:ab:a5:
be:79:21:91:fa:60:61:94:65:53:86:08:08:1d:7c:
49:7f:00:7a:d2:fa:38:04:30:96:b6:4d:54:39:44:
c5:e6:76:48:27:6a:08:e7:25:05:ab:0c:e1:43:60:
a3:d1:e3:41:16:01:d9:70:15:0c:89:d5:28:e3:77:
35:50:d1:c6:31:f6:95:37:ab:83:33:7c:dd:67:74:
1b:bf:9c:1a:a8:43:21:4b:d4:3c:27:74:17:c8:9b:
42:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:03:6D:D0:48:D7:24:21:4B:35:EC:F6:BF:D5:64:1E:43:82:1B:9F
X509v3 Authority Key Identifier:
keyid:97:59:52:9D:D3:17:06:45:D7:6C:F6:AC:06:59:50:6C:C6:49:CA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1lSndMXBkXXbPasBllQbMZJypA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/nANt0EjXJCFLNez2v9VkHkOCG58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/a86a91-6356-4c2c-9f8f-de4accb00dd7/1/l1lSndMXBkXXbPasBllQbMZJypA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.24.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:ff:1b:51:86:ef:94:5d:4b:0d:ac:ad:c2:f9:c7:fa:60:0f:
8a:05:50:fc:0a:97:62:ea:7a:73:52:37:76:64:e9:69:a7:53:
44:11:17:ec:93:c1:02:cf:83:dc:e0:88:99:0d:5a:81:d3:ac:
ea:c3:b8:5a:98:47:eb:88:74:b6:ae:a5:c5:08:2d:a5:90:c7:
0a:39:79:5d:7d:89:d9:3f:c9:4d:49:16:6c:b3:3b:5a:7e:35:
3e:3d:b8:d5:6b:f2:37:61:9b:4e:e4:3a:94:92:16:c8:a3:90:
21:14:70:c3:d2:ef:b9:66:c4:02:34:95:2c:1d:d0:f4:52:c6:
6c:96:3d:bd:07:69:93:7f:53:4d:bf:42:b0:80:4e:86:90:54:
76:5c:f3:7f:63:aa:87:1a:cc:fe:44:e6:ff:26:6b:95:ad:36:
e5:3a:33:27:a0:73:04:ee:13:fd:36:7d:4d:31:77:3d:e1:c9:
e3:7d:c4:93:2e:06:7b:20:f4:86:7f:30:7e:b9:50:f9:6b:3d:
27:56:05:04:42:66:77:27:17:17:1a:1d:73:dd:3e:57:41:41:
15:21:ed:42:6c:8a:31:7d:0a:87:e8:b6:26:b8:cf:ea:27:8b:
82:f6:58:d4:ee:e3:3c:d0:29:48:a2:dc:8e:f1:21:82:ec:0b:
d6:36:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:28 2024 by rpki-client on console-ams.rpki-client.org