Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N5NDprDPf7yxwZnifhNlBvHli7k.roa
File: N5NDprDPf7yxwZnifhNlBvHli7k.roa (raw, json)
Hash identifier: ocznU/BVDseFMxVid8pXiVPn7ncRx1TpaUz7iLAHysE=
Subject key identifier: 37:93:43:A6:B0:CF:7F:BC:B1:C1:99:E2:7E:13:65:06:F1:E5:8B:B9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018C7C509A513DC1A401EA56FB771D3A150F
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N5NDprDPf7yxwZnifhNlBvHli7k.roa
Signing time: Mon 18 Dec 2023 09:45:06 +0000
ROA not before: Mon 18 Dec 2023 09:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 194.180.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7c:50:9a:51:3d:c1:a4:01:ea:56:fb:77:1d:3a:15:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 18 09:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379343a6b0cf7fbcb1c199e27e136506f1e58bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:c3:67:67:c2:6e:7f:50:c1:a6:06:62:db:
d3:2d:88:eb:d6:1c:b2:bc:be:82:2b:7a:58:db:aa:
63:18:9d:48:2b:f4:41:c9:e1:97:e0:ed:33:b5:c5:
49:a9:c6:3a:ee:9d:f8:1f:18:05:85:cc:5b:67:b2:
a4:b5:a1:94:3f:0e:41:f6:2f:58:12:89:7c:7b:80:
da:1b:eb:8c:3c:d6:a3:10:d2:25:05:0f:84:12:33:
c0:c8:9a:95:35:7f:1b:b2:38:4a:2a:48:e4:99:d9:
66:b0:b7:8c:23:c5:9b:1d:46:5d:4a:25:2a:99:89:
07:d6:14:45:0d:82:1a:1b:9f:5a:6d:2a:e3:11:f2:
7d:ba:b3:af:df:d1:10:0e:c4:ba:16:5e:f4:7f:3f:
ac:f1:c2:24:c0:78:0d:b3:83:ab:a3:34:d4:b6:d2:
fc:7f:d4:e6:8f:35:1e:8e:08:8b:8b:31:3a:0d:cd:
be:49:d0:5e:6f:df:3b:0a:7a:e8:1c:ac:51:f4:86:
f5:5d:4d:bb:cd:6d:ab:9a:30:3a:8a:ba:0b:c4:05:
da:ca:95:74:a2:b2:3a:9a:70:b5:ff:2b:69:7d:83:
ce:15:a7:c3:c7:99:f0:a9:f6:17:a0:72:c1:9a:bb:
8d:36:41:49:c6:36:da:38:88:bd:04:e4:01:05:de:
03:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:93:43:A6:B0:CF:7F:BC:B1:C1:99:E2:7E:13:65:06:F1:E5:8B:B9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/N5NDprDPf7yxwZnifhNlBvHli7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.238.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:43:4d:e4:8f:5c:b0:0c:90:a6:bd:ee:98:de:26:e8:60:50:
04:54:ec:34:36:2b:99:bb:b3:0c:08:64:34:d4:ea:7c:ae:e1:
49:0d:20:41:af:4e:ab:7c:ed:52:86:e9:c2:2f:c0:26:2c:a4:
25:94:aa:00:04:dc:df:41:08:86:da:09:ef:e1:8c:95:f3:c4:
33:72:aa:09:78:9f:2b:a3:09:c1:53:9c:2d:39:ab:00:31:53:
d2:cb:fa:88:1a:c3:19:49:83:74:ce:cf:61:b8:0c:e4:13:25:
d1:ab:dc:45:e4:b4:a5:3d:d7:16:b5:f0:ff:27:91:11:0d:d4:
ae:9b:fc:e6:1b:89:a1:ee:8e:0c:3d:99:1c:0d:d8:e3:e3:5e:
1f:50:e5:33:e0:be:31:f3:87:d0:f8:9c:81:de:29:f1:55:9f:
fd:2d:93:6a:6a:ac:10:7f:7e:e8:e6:3b:a2:4e:65:6b:dc:82:
28:69:be:78:85:c6:05:3c:d0:00:a1:3d:64:13:5d:29:34:0d:
eb:4e:24:bd:a8:4c:de:0d:43:72:df:6d:a9:e2:3d:a0:ef:a6:
3b:db:6e:bc:03:00:cc:1b:17:c5:8e:b5:36:9a:dc:10:dc:f8:
68:65:a1:b0:49:4b:57:51:f9:9a:d2:20:15:99:fa:c5:f8:8a:
98:ea:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org