Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/nEIzqRyuGEalyh7Tl4lqv5OgxxA.roa
File: nEIzqRyuGEalyh7Tl4lqv5OgxxA.roa (raw, json)
Hash identifier: SiWRpHhaVgN0F/1oNvImsec+9TBTSivtt6i3j+OHF5w=
Subject key identifier: 9C:42:33:A9:1C:AE:18:46:A5:CA:1E:D3:97:89:6A:BF:93:A0:C7:10
Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Certificate serial: 0185720337FEFCC9A0B19D0FB33BFB191815
Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/nEIzqRyuGEalyh7Tl4lqv5OgxxA.roa
Signing time: Mon 02 Jan 2023 10:24:51 +0000
ROA not before: Mon 02 Jan 2023 10:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50572
IP address blocks: 193.19.146.0/24 maxlen: 24
2001:67c:2530::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:37:fe:fc:c9:a0:b1:9d:0f:b3:3b:fb:19:18:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66
Validity
Not Before: Jan 2 10:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4233a91cae1846a5ca1ed397896abf93a0c710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:60:5d:97:f2:b1:0a:a8:ce:b1:bc:ed:31:e7:
35:86:79:0f:fd:5c:ba:d0:12:9d:69:a7:65:d8:0a:
bd:fb:29:8e:00:4c:bf:28:bc:85:53:c1:21:15:3f:
b9:e4:1e:c3:df:1b:af:86:81:7f:28:1b:00:0a:cd:
7b:db:07:e5:b3:94:0a:9c:8d:39:e3:7a:3c:0d:a5:
ca:fa:ad:4a:d3:69:70:b9:73:6a:60:39:3e:46:9c:
9a:64:f2:47:37:ce:88:0e:61:76:ff:ad:02:91:87:
78:59:77:d3:27:09:90:97:09:ed:ab:59:33:25:63:
2f:fd:1a:2a:e5:e1:d3:69:23:f6:b8:18:fb:ff:b7:
6e:63:ab:0a:4f:9e:01:a6:15:66:95:c7:94:0c:8b:
85:fb:7b:e3:73:7e:36:1f:95:db:4e:dd:2c:98:3f:
a0:11:fe:a2:bb:b8:23:dc:7c:fd:41:e1:c0:82:64:
d0:90:c3:96:8f:ac:3d:75:ad:85:c7:26:4e:87:47:
d9:c2:3c:21:5c:e6:cb:02:b9:ca:02:c0:41:57:a3:
c9:96:eb:2a:26:12:27:93:22:de:ea:be:3b:9e:9c:
99:03:fd:68:da:de:20:af:da:e6:88:97:02:a2:b0:
76:80:01:6b:4a:43:4c:f6:eb:93:3a:ff:fa:07:56:
79:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:42:33:A9:1C:AE:18:46:A5:CA:1E:D3:97:89:6A:BF:93:A0:C7:10
X509v3 Authority Key Identifier:
keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/nEIzqRyuGEalyh7Tl4lqv5OgxxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.146.0/24
IPv6:
2001:67c:2530::/48
Signature Algorithm: sha256WithRSAEncryption
25:49:cf:21:f1:7f:32:dc:27:4c:88:7a:24:8b:f1:a0:73:85:
00:37:bd:0f:5e:0c:a2:71:44:82:95:c1:92:ca:eb:3b:61:e9:
c2:27:21:f3:3c:a9:a1:42:d3:e3:03:d7:a7:93:22:b3:33:90:
9b:6e:ed:f7:d5:71:a4:59:93:eb:b8:2c:f3:1f:2d:4e:da:92:
70:55:30:cf:44:4d:a8:90:ef:5c:b9:8b:6a:b9:36:6b:6a:2c:
ee:f7:c2:bd:4d:48:be:49:9f:3f:99:fa:dc:d5:eb:80:59:e3:
57:15:b9:62:25:e7:50:2c:06:f5:6a:19:d9:73:9e:7b:b3:64:
f0:9c:a4:a0:7a:7a:87:ee:07:d0:d3:f2:ec:0e:61:c0:c4:11:
d4:24:ec:15:f1:52:5c:d0:0d:0c:d0:5f:8e:5a:09:7a:17:4d:
ff:96:30:07:87:58:79:45:ee:91:f6:e1:e6:fb:69:b7:5c:68:
e2:20:3a:5f:82:bb:b6:41:c5:91:c9:c5:62:50:66:37:45:51:
92:6c:11:32:91:66:0f:65:7d:bf:30:20:80:99:1c:bf:78:7c:
a7:2b:c7:ba:7b:af:e9:29:49:66:fc:87:90:7d:c9:8d:c3:2a:
22:a7:58:7a:04:2b:77:4e:e7:2c:cf:f6:8c:98:d7:a2:a8:46:
45:66:20:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:04 2024 by rpki-client on console-fra.rpki-client.org