Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/nBgo7nGCJgy-NcKfkg286u_jq0c.roa
File: nBgo7nGCJgy-NcKfkg286u_jq0c.roa (raw, json)
Hash identifier: o8NOia3QubZQ/Hr6/RgX7N8sZKWrRO0DdGSzbZQRIng=
Subject key identifier: 9C:18:28:EE:71:82:26:0C:BE:35:C2:9F:92:0D:BC:EA:EF:E3:AB:47
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 018573560AB95C855D8642F86DA200611F9C
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/nBgo7nGCJgy-NcKfkg286u_jq0c.roa
Signing time: Mon 02 Jan 2023 16:34:56 +0000
ROA not before: Mon 02 Jan 2023 16:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210377
IP address blocks: 93.93.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:0a:b9:5c:85:5d:86:42:f8:6d:a2:00:61:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Jan 2 16:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c1828ee7182260cbe35c29f920dbceaefe3ab47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b4:18:0b:1a:46:15:79:c0:6f:02:34:d2:c1:
3e:b6:00:a0:71:43:83:6a:ce:7d:d8:47:d4:03:f8:
26:c7:68:c1:d5:b6:2f:d4:31:3c:b3:e7:22:c5:b4:
a9:3e:b1:a0:fa:db:45:c8:f3:c2:56:11:cd:23:37:
1e:da:e1:42:53:8a:89:1e:d4:7c:9b:c4:96:63:d3:
91:f3:e6:94:f5:df:51:98:22:7f:07:1b:af:6f:7a:
1f:fe:0a:fe:58:30:cd:27:7e:79:96:bc:1f:a1:33:
c1:b3:ac:1c:f3:29:10:55:90:03:64:3d:dc:7e:f6:
06:d9:06:e1:6e:c6:e3:7a:8f:25:de:d6:a5:f3:c8:
7b:7f:ed:5a:9e:10:51:f6:14:3c:81:7c:a4:10:72:
0d:fe:6e:8b:f1:04:16:5a:69:89:8c:2e:35:2c:62:
e0:88:3d:fb:8b:b2:15:0e:36:5b:11:de:81:6c:c0:
f9:1a:52:65:28:a3:61:57:38:05:7c:fb:e8:14:19:
4a:8d:97:f9:d4:3c:62:1f:f1:24:61:a5:bd:08:fb:
ca:c2:f1:a2:2d:c6:89:23:98:4f:f4:71:9b:83:dc:
10:63:88:83:33:e2:9f:32:88:ca:19:46:f4:e0:b3:
91:1e:3a:54:ca:b7:eb:e1:d9:3a:79:28:4b:b8:9e:
c0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:18:28:EE:71:82:26:0C:BE:35:C2:9F:92:0D:BC:EA:EF:E3:AB:47
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/nBgo7nGCJgy-NcKfkg286u_jq0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.224.0/21
Signature Algorithm: sha256WithRSAEncryption
88:ef:08:fa:1f:7c:97:bb:51:74:f7:7f:17:ab:e5:24:3b:de:
80:90:1f:67:f0:a8:08:00:69:2a:8e:45:3a:d0:63:28:00:cd:
5f:b0:54:37:e1:6c:50:e0:4d:c3:1a:e8:24:74:20:55:89:33:
6f:c0:b1:ab:1f:9b:30:24:15:22:c3:46:9a:49:a9:08:47:cf:
e7:55:a2:b0:a3:bc:ca:f6:66:94:a1:b0:62:c7:f4:26:84:1b:
71:fa:5e:5d:53:62:a3:0f:61:dd:60:0e:e4:29:f1:5c:85:48:
b6:a2:b0:86:f6:e3:be:be:cb:5a:b2:79:96:fc:37:a8:14:66:
fa:40:08:44:e9:c5:6e:55:23:a9:4d:8a:6d:66:5c:16:9b:07:
f6:ef:71:72:a6:25:05:96:17:d1:57:f4:ff:f1:59:55:71:69:
b1:3e:e4:5d:c1:91:23:35:64:70:a3:e0:de:07:26:e6:ac:0c:
71:5d:95:c0:5a:a5:a3:05:e1:a6:8d:79:fa:b2:04:ff:bb:29:
1e:96:74:eb:42:6a:0d:d0:c0:10:a2:e6:e6:11:76:43:87:a1:
c8:42:50:3d:44:12:1f:c0:05:2d:3a:57:ae:c5:94:b9:b4:e0:
61:08:22:56:73:0d:b1:af:ad:20:14:a4:e1:34:63:85:ab:60:
1e:c9:47:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:44 2024 by rpki-client on console-ams.rpki-client.org