Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/n94d-upl7BaAC1gXJWpw6iJ9yMI.roa
File: n94d-upl7BaAC1gXJWpw6iJ9yMI.roa (raw, json)
Hash identifier: LQj0KiI3K4qgm2RWH876295GhajoRZ5gvSFmu2jJWWM=
Subject key identifier: 9F:DE:1D:FA:EA:65:EC:16:80:0B:58:17:25:6A:70:EA:22:7D:C8:C2
Certificate issuer: /CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Certificate serial: 01857067447A1DCBFF7122601FA878FE8368
Authority key identifier: C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/n94d-upl7BaAC1gXJWpw6iJ9yMI.roa
Signing time: Mon 02 Jan 2023 02:54:54 +0000
ROA not before: Mon 02 Jan 2023 02:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204599
IP address blocks: 193.105.18.0/24 maxlen: 24
194.0.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Nov 2023 09:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:44:7a:1d:cb:ff:71:22:60:1f:a8:78:fe:83:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c340909aec320a8c2ee1cabce1302cbb7d4e0486
Validity
Not Before: Jan 2 02:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fde1dfaea65ec16800b5817256a70ea227dc8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:89:dd:1d:7d:dc:04:d0:3c:09:69:91:66:
dd:53:32:ec:5c:6c:ad:dc:f2:1c:69:8f:3d:53:ab:
cd:c5:02:07:06:1b:55:0a:41:d9:a4:bc:48:69:57:
37:39:d5:02:58:74:50:8c:26:c7:6c:57:a0:54:9d:
44:62:53:af:e9:f3:5d:0f:1a:23:bf:ea:73:4f:d4:
d6:4f:e7:7a:05:17:75:4a:98:86:95:d4:37:ee:4d:
f6:ee:cf:35:ea:1c:a4:4d:f0:c8:e5:8c:38:50:83:
d6:58:9a:a5:4a:b0:58:ff:c7:cb:dc:bc:3c:7d:a7:
0d:79:01:32:a3:2c:93:06:d9:8a:e7:12:91:cf:63:
b8:1b:03:b3:cf:04:8e:1a:a1:a2:a1:14:cd:29:e4:
38:cb:40:5f:09:16:21:e2:12:ae:ce:bd:b3:07:73:
5a:ae:38:ab:00:a2:f0:df:58:f0:58:ec:37:f3:25:
bb:e9:85:43:f6:8c:58:a2:7b:ae:62:57:1d:fa:71:
0c:05:84:c1:ac:56:af:e3:e2:e4:9e:35:f5:54:ee:
50:5f:75:6f:08:4d:cd:b0:63:f3:84:74:d3:2d:fa:
48:2e:71:40:08:d3:a5:45:31:5c:b9:eb:dd:79:25:
c7:da:2a:45:11:63:27:69:c8:b4:03:7a:47:d1:42:
df:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DE:1D:FA:EA:65:EC:16:80:0B:58:17:25:6A:70:EA:22:7D:C8:C2
X509v3 Authority Key Identifier:
keyid:C3:40:90:9A:EC:32:0A:8C:2E:E1:CA:BC:E1:30:2C:BB:7D:4E:04:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CQmuwyCowu4cq84TAsu31OBIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/n94d-upl7BaAC1gXJWpw6iJ9yMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/50b205-8f21-46f5-a3f6-bca0a8f2f78c/1/w0CQmuwyCowu4cq84TAsu31OBIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.18.0/24
194.0.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:84:19:06:bf:1c:87:f6:4a:5a:0c:cb:33:44:b1:41:8d:e1:
47:53:b7:a1:98:15:bc:c0:4c:a9:32:2b:a9:e2:5c:ca:84:e2:
aa:63:fa:cf:ba:59:a2:05:6d:cd:39:cc:b2:17:17:bf:62:eb:
02:e6:2c:27:60:15:ec:e1:c1:90:2b:d1:f2:ce:43:c8:9f:41:
c6:49:bd:c0:f7:3c:1e:22:83:8c:e5:87:85:0d:a0:a6:a1:d6:
41:8a:de:cd:98:66:06:83:43:ce:17:ab:e8:da:bc:b7:ac:5b:
68:73:32:76:9b:fd:47:d8:4c:b7:5f:a1:0e:f7:8d:92:6f:47:
a7:48:c6:05:14:57:7e:e1:a4:40:88:75:c7:b1:b0:e8:98:7a:
a3:c9:da:59:4a:f9:ee:9a:a2:38:b2:06:24:b4:23:c2:79:6e:
96:d1:ce:dc:1e:d2:b9:a3:19:39:9a:c1:6a:4d:de:cc:22:59:
53:6b:96:e3:15:b4:83:1e:6c:28:ab:46:ea:c8:10:2d:33:22:
64:74:94:c3:57:84:05:97:25:54:81:99:13:59:53:3f:f7:55:
19:b2:84:70:d9:8c:2a:65:f5:10:97:6c:9a:d0:c4:a7:57:65:
6d:81:5e:e1:c9:e2:0f:22:85:da:af:55:1c:6e:e8:86:66:d8:
81:7a:70:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:25 2024 by rpki-client on console-ams.rpki-client.org