Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/Np49ECK1zsTh5FDIfFvsd41UE5M.roa
File: Np49ECK1zsTh5FDIfFvsd41UE5M.roa (raw, json)
Hash identifier: sQtdW3FPzQx+6yfh4f6YS6hzO46fpINmbqBackyiY80=
Subject key identifier: 36:9E:3D:10:22:B5:CE:C4:E1:E4:50:C8:7C:5B:EC:77:8D:54:13:93
Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Certificate serial: 018573CD168F2B18EFA0FFA839F828657A9F
Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/Np49ECK1zsTh5FDIfFvsd41UE5M.roa
Signing time: Mon 02 Jan 2023 18:44:58 +0000
ROA not before: Mon 02 Jan 2023 18:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8303
IP address blocks: 149.219.0.0/16 maxlen: 16
149.219.249.0/24 maxlen: 24
149.219.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cd:16:8f:2b:18:ef:a0:ff:a8:39:f8:28:65:7a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115
Validity
Not Before: Jan 2 18:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=369e3d1022b5cec4e1e450c87c5bec778d541393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:e1:7b:24:00:55:37:53:08:79:cf:04:d7:
0a:a1:9c:9c:a5:3b:97:d6:64:db:bc:54:4e:96:b6:
26:b4:a8:f6:1e:34:11:25:8d:62:f6:db:14:97:1f:
1d:b6:8b:39:83:6d:c4:03:4d:9e:bf:da:74:f5:4f:
a7:ec:06:9c:05:35:e2:32:7b:bf:da:1a:bf:89:28:
73:04:d3:61:a1:21:45:56:7b:39:79:36:6d:c7:63:
8b:35:63:6f:62:43:40:3c:3e:37:2a:2b:cd:92:12:
24:99:76:2c:61:31:82:a9:18:c0:bb:30:b7:34:d9:
86:c0:b4:0b:19:2c:26:ba:ad:1b:b8:ed:d9:66:fd:
25:47:6b:b7:6c:1f:46:1e:0f:28:69:8b:73:ae:66:
d5:43:1c:99:78:2e:da:d3:9b:68:62:0e:bb:70:01:
7a:ee:35:c8:f3:73:9b:84:89:35:b8:d5:15:8e:68:
d3:47:93:16:f1:45:00:db:86:20:82:81:81:d0:48:
62:9c:e5:2f:e6:ea:64:7e:b0:05:52:a5:d8:71:5b:
9e:09:c5:33:b7:b8:71:1e:c2:bc:88:0b:51:90:af:
69:e5:05:57:4a:20:0c:ad:5b:49:d5:6e:a9:a6:16:
34:8a:67:fa:57:34:06:37:d9:df:1f:e5:1a:69:d4:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9E:3D:10:22:B5:CE:C4:E1:E4:50:C8:7C:5B:EC:77:8D:54:13:93
X509v3 Authority Key Identifier:
keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/Np49ECK1zsTh5FDIfFvsd41UE5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.219.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:57:5a:1b:16:05:a2:b5:d7:8b:71:2a:3a:79:6a:75:6f:7e:
7a:15:0f:db:5d:2a:d7:54:b5:16:17:a9:fb:20:5b:95:0b:d1:
81:f6:50:10:4c:69:78:17:20:b6:b5:d9:dd:a8:94:df:11:f8:
79:72:49:1d:ba:29:76:85:3a:61:b6:52:e7:7c:71:fc:e1:94:
98:d6:68:83:5f:86:bf:61:1f:4d:42:4d:dc:3c:a5:11:02:6a:
aa:8c:e8:43:12:08:f1:db:6c:40:08:7c:e3:31:a9:98:6e:00:
64:6b:ee:d3:64:a7:2d:a0:6d:9b:b5:1e:2e:c4:37:ce:65:7e:
1f:a4:75:16:a6:05:82:22:44:c6:a3:5f:ff:ff:14:6e:df:e4:
62:1c:c3:d6:fa:65:66:89:f4:68:cc:65:0a:be:73:47:bb:66:
d6:4f:5d:85:f1:55:24:b1:46:01:1d:4b:4e:99:5b:3d:29:ad:
00:d8:56:e3:81:9f:55:74:fa:98:1a:52:82:5f:00:3d:16:b5:
69:82:40:8b:cc:58:d1:9f:b1:1e:42:1c:e7:4a:29:44:9d:c0:
f6:59:92:06:2c:4b:5a:e3:0d:00:7c:1f:a8:1d:93:c8:2f:b0:
ce:c0:a6:c2:cb:02:cc:7b:45:e7:6b:c0:da:16:1e:e5:e5:cb:
34:11:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:09 2024 by rpki-client on console-ams.rpki-client.org