Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/NmwlBqe_uLwnu_hFsJ4LC9weoMU.roa
File: NmwlBqe_uLwnu_hFsJ4LC9weoMU.roa (raw, json)
Hash identifier: UKdXvfvPcVyjk792yFMI2K8yq0N6G62zhaQFxelZSA8=
Subject key identifier: 36:6C:25:06:A7:BF:B8:BC:27:BB:F8:45:B0:9E:0B:0B:DC:1E:A0:C5
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01934EE3286626F4AAD3FD37929FBEDAB8BA
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/NmwlBqe_uLwnu_hFsJ4LC9weoMU.roa
Signing time: Thu 21 Nov 2024 13:22:10 +0000
ROA not before: Thu 21 Nov 2024 13:22:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.168.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Nov 2024 11:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:e3:28:66:26:f4:aa:d3:fd:37:92:9f:be:da:b8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Nov 21 13:22:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=366c2506a7bfb8bc27bbf845b09e0b0bdc1ea0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:bb:52:85:87:7b:29:c9:66:ef:2d:26:14:
76:a2:d7:bb:1c:b3:b2:91:1d:ed:5c:af:31:c7:61:
b1:7e:6b:5f:23:0d:38:cb:41:6a:ca:88:bb:88:23:
56:12:35:fe:44:69:9f:cc:dd:4c:7a:5a:f5:cb:4b:
ba:50:79:69:da:07:fd:02:9c:c4:be:db:99:48:da:
de:ec:1e:64:06:fe:29:54:5a:a3:42:2b:ca:80:1b:
6b:9c:09:dc:d0:99:d7:f4:33:9e:07:74:f8:5a:5f:
94:2b:2f:89:f2:0e:09:20:a3:bc:e2:d1:42:09:10:
c3:14:25:d2:2b:24:4d:84:3b:2d:06:21:84:e1:2e:
a6:40:ff:05:de:0d:20:10:25:e9:fa:a4:28:93:3a:
d0:c1:9b:84:64:a0:b0:6e:03:3e:c3:db:f1:3a:cf:
05:a5:39:44:88:c8:52:46:ef:bb:86:5a:cb:21:5b:
3a:1c:f8:7e:15:54:b3:0c:99:a5:6d:0a:7b:88:14:
98:a6:25:f9:89:39:66:2e:37:d2:fc:3c:d6:8b:5b:
d7:50:6c:d4:8d:9f:93:9c:0f:e7:32:08:a9:86:3d:
02:2f:90:b4:87:3b:2e:e7:8b:13:ad:84:c0:79:d8:
1b:80:29:bd:fd:c7:60:bf:59:cd:c0:4a:97:42:e7:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:25:06:A7:BF:B8:BC:27:BB:F8:45:B0:9E:0B:0B:DC:1E:A0:C5
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/NmwlBqe_uLwnu_hFsJ4LC9weoMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.200.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e0:da:bc:82:05:05:1e:04:54:46:17:52:67:c6:33:20:62:
c1:45:ee:73:fc:52:8c:92:00:38:1f:42:2f:3b:da:c3:6e:17:
e9:11:78:c6:1b:dd:f2:db:39:09:ff:d2:03:ce:14:0a:ba:c2:
d5:79:62:b4:87:02:b3:72:f0:aa:89:c4:f0:6b:1b:29:b1:75:
7b:7c:55:cb:b8:85:40:ba:bc:0f:79:f5:8a:7c:57:5e:7d:f0:
45:3e:6b:3d:22:46:c4:81:6d:13:41:62:d6:6a:ca:07:4f:c2:
95:be:8b:3c:40:e2:9f:c3:d3:38:3d:0d:d6:1d:25:e0:d9:79:
3d:c3:da:ca:3c:e0:32:e0:fe:19:68:8b:98:0a:53:5d:b3:c3:
14:6e:9e:6c:a9:22:80:07:a9:8b:f7:03:f9:7d:37:44:ee:eb:
3b:bc:f6:57:2b:cd:7f:97:e5:75:f0:c0:17:e6:53:df:09:f4:
1f:f0:20:3d:6b:c2:5e:ce:56:8d:61:f4:c0:0a:53:b1:f6:bc:
5c:24:a5:31:9f:1f:73:58:32:be:d9:99:aa:ad:0f:06:23:ce:
87:7e:b4:76:64:46:bd:0f:0f:48:da:75:af:51:b0:ce:f7:e2:
88:83:db:84:3f:96:67:5c:0b:34:6c:75:17:04:bb:82:4b:02:
04:41:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:29 2024 by rpki-client on console-fra.rpki-client.org