Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/nExC-1OMGdFhdVe1bRIuKVgYuFo.roa
File: nExC-1OMGdFhdVe1bRIuKVgYuFo.roa (raw, json)
Hash identifier: aw8keNj5yOy7t0dpaAatKBYkakCcIzBy/mUOdkAehlw=
Subject key identifier: 9C:4C:42:FB:53:8C:19:D1:61:75:57:B5:6D:12:2E:29:58:18:B8:5A
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 018651B4BD5DDF40F66BDE2A70B77FA56B8D
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/nExC-1OMGdFhdVe1bRIuKVgYuFo.roa
Signing time: Tue 14 Feb 2023 20:54:04 +0000
ROA not before: Tue 14 Feb 2023 20:54:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 193.242.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:51:b4:bd:5d:df:40:f6:6b:de:2a:70:b7:7f:a5:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Feb 14 20:54:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4c42fb538c19d1617557b56d122e295818b85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:7a:65:1f:0c:1e:70:cc:f9:8b:4a:1b:74:
89:4d:dc:95:48:e5:22:f9:0c:ae:c9:fe:92:95:9c:
8f:04:2a:d0:80:7c:1a:cc:e2:05:0b:51:2c:ba:a3:
ed:ad:98:8b:bb:95:32:bf:96:5a:d9:c7:53:be:02:
bc:6b:9e:33:4b:4a:68:12:54:d0:77:c2:03:25:6d:
59:08:ad:71:cc:b2:74:b0:91:d7:1d:4b:ff:e8:91:
10:48:8a:0d:76:f3:b0:ff:06:74:a6:d4:a5:b9:56:
e4:31:ed:dc:af:c1:1f:84:a8:fb:1c:6b:2f:72:33:
04:a1:9c:e3:e6:24:9f:35:1a:96:cd:f7:d5:bf:ec:
95:25:d2:1a:c3:ef:08:a4:1f:ac:8b:5a:31:2c:a0:
43:cc:de:87:9c:01:7d:4e:88:85:57:75:bb:a4:8e:
72:d5:3d:ab:3e:a2:63:e2:89:0d:3f:63:a1:61:cd:
e2:28:ff:e1:5a:d4:ae:d5:3b:18:48:8a:0e:1e:5b:
85:b6:b1:b9:03:cd:c2:73:86:82:66:66:b0:4d:95:
f2:48:1d:4d:56:36:f4:df:10:7a:21:c9:c2:98:e7:
a4:af:e6:38:b1:d0:24:be:3a:1b:62:74:b3:e5:3a:
b2:50:86:e5:c8:d2:45:a5:7f:25:2c:11:30:c7:a1:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4C:42:FB:53:8C:19:D1:61:75:57:B5:6D:12:2E:29:58:18:B8:5A
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/nExC-1OMGdFhdVe1bRIuKVgYuFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.117.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b5:09:45:18:c1:a4:1c:8f:86:04:ae:ea:99:ec:bb:59:01:
b1:0c:b4:66:6d:1b:a8:1b:0f:8a:5b:01:33:4d:b7:da:0b:a4:
88:e1:ff:df:15:ec:59:68:bd:ee:b2:0b:fa:1a:da:c9:ca:74:
ba:73:75:07:4f:be:d2:5a:db:69:d3:41:8a:ad:77:c3:7e:a1:
04:3b:2d:7b:4a:fe:6c:a6:55:bd:fd:cf:b0:16:5d:58:5b:8f:
e2:cf:8c:08:a2:e8:20:47:17:09:39:1e:7f:01:80:3b:dd:bb:
a8:71:0c:3f:92:1a:13:b4:11:8e:8e:02:7c:2b:63:48:fe:ae:
1a:20:7a:36:47:f4:0d:53:58:79:ab:c1:56:5b:13:2b:c0:c4:
72:70:a5:8a:4b:f9:0d:1e:7f:70:08:5d:ee:04:68:39:f2:0e:
40:e8:bc:fc:c4:50:32:5c:2b:20:68:c0:c3:27:96:e1:b7:db:
da:b4:0f:65:9a:c8:60:e5:4f:a7:d3:15:98:62:d7:46:f0:c1:
2b:70:12:3c:f4:ff:f7:6a:f3:b8:e9:e4:25:e5:93:16:d7:db:
a3:72:7c:e5:87:59:ae:7c:64:36:4f:2e:db:99:41:c0:64:11:
4f:89:52:0d:c2:be:cf:a0:d0:99:54:95:36:4a:71:76:d8:ca:
ca:d0:c5:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZRtL1d30D2a94qcLd/pWuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz
M2RiOTYwHhcNMjMwMjE0MjA1NDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzRjNDJmYjUzOGMxOWQxNjE3NTU3YjU2ZDEyMmUyOTU4MThiODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj96ZR8MHnDM+YtKG3SJTdyVSOUi
+Qyuyf6SlZyPBCrQgHwazOIFC1EsuqPtrZiLu5Uyv5Za2cdTvgK8a54zS0poElTQ
d8IDJW1ZCK1xzLJ0sJHXHUv/6JEQSIoNdvOw/wZ0ptSluVbkMe3cr8EfhKj7HGsv
cjMEoZzj5iSfNRqWzffVv+yVJdIaw+8IpB+si1oxLKBDzN6HnAF9ToiFV3W7pI5y
1T2rPqJj4okNP2OhYc3iKP/hWtSu1TsYSIoOHluFtrG5A83Cc4aCZmawTZXySB1N
Vjb03xB6IcnCmOekr+Y4sdAkvjobYnSz5TqyUIblyNJFpX8lLBEwx6H61wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJxMQvtTjBnRYXVXtW0SLilYGLhaMB8GA1UdIwQY
MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt
MmM3MDg2ZmRlZDkzLzEvbkV4Qy0xT01HZEZoZFZlMWJSSXVLVmdZdUZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz
LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfJ1MA0G
CSqGSIb3DQEBCwUAA4IBAQCEtQlFGMGkHI+GBK7qmey7WQGxDLRmbRuoGw+KWwEz
TbfaC6SI4f/fFexZaL3usgv6GtrJynS6c3UHT77SWttp00GKrXfDfqEEOy17Sv5s
plW9/c+wFl1YW4/iz4wIouggRxcJOR5/AYA73buocQw/khoTtBGOjgJ8K2NI/q4a
IHo2R/QNU1h5q8FWWxMrwMRycKWKS/kNHn9wCF3uBGg58g5A6Lz8xFAyXCsgaMDD
J5bht9vatA9lmshg5U+n0xWYYtdG8MErcBI89P/3avO46eQl5ZMW19ujcnzlh1mu
fGQ2Ty7bmUHAZBFPiVINwr7PoNCZVJU2SnF22MrK0MWs
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:54 2023 by rpki-client on console-fra.rpki-client.org