Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/nxoFzmJSvPvRGGaqKQIg7jIvqf4.roa
File: nxoFzmJSvPvRGGaqKQIg7jIvqf4.roa (raw, json)
Hash identifier: 97+vxPq/AaiUCb+3F3+ROrTR+upeA2Napv9AW1eqbNA=
Subject key identifier: 9F:1A:05:CE:62:52:BC:FB:D1:18:66:AA:29:02:20:EE:32:2F:A9:FE
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01856D8AEE3F546F620A1E95BEB72E9191E8
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/nxoFzmJSvPvRGGaqKQIg7jIvqf4.roa
Signing time: Sun 01 Jan 2023 13:34:59 +0000
ROA not before: Sun 01 Jan 2023 13:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208746
IP address blocks: 193.56.233.0/24 maxlen: 24
193.56.235.0/24 maxlen: 24
193.56.236.0/24 maxlen: 24
193.56.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:ee:3f:54:6f:62:0a:1e:95:be:b7:2e:91:91:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jan 1 13:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f1a05ce6252bcfbd11866aa290220ee322fa9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:a0:e9:11:c4:6b:4f:7b:7c:07:a2:6b:bc:
04:13:2a:a1:10:34:57:49:68:93:0f:19:3a:b7:25:
39:77:7d:c2:29:47:24:68:40:e7:2c:e9:ef:49:4b:
64:cc:7e:60:01:ef:6c:d2:be:73:09:a6:16:dd:39:
11:28:02:56:9d:8b:9b:e9:7c:db:91:ed:ad:02:a8:
24:46:be:a2:1f:11:df:0d:bf:96:e3:ec:c8:f8:32:
7d:93:b6:58:91:d5:29:4c:80:b4:c4:59:81:e6:ff:
a5:1b:07:50:7b:a8:6f:69:d7:0d:f5:bb:e8:7c:b0:
5c:55:a1:18:f6:54:9f:30:b0:33:97:64:4a:df:5a:
f3:30:43:dc:d7:c7:fa:7e:a7:c2:b3:43:29:bf:04:
4d:37:d9:7a:8d:1d:25:cd:75:53:15:12:72:b8:f8:
79:8f:62:d4:bf:7b:2b:41:c7:6c:0a:69:84:68:92:
56:69:5f:51:49:59:ad:fe:81:40:48:33:e2:5f:59:
0d:7a:c1:0a:46:5f:f1:96:cd:cd:09:e4:27:77:11:
5d:92:29:09:e3:94:7a:90:5b:59:ee:34:18:82:87:
51:0c:89:6d:9e:4c:dd:eb:86:f2:dd:22:c5:fe:dd:
cd:a7:ea:a5:11:16:1b:a0:56:10:52:a4:6c:3d:c3:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1A:05:CE:62:52:BC:FB:D1:18:66:AA:29:02:20:EE:32:2F:A9:FE
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/nxoFzmJSvPvRGGaqKQIg7jIvqf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.233.0/24
193.56.235.0-193.56.237.255
Signature Algorithm: sha256WithRSAEncryption
99:a0:9f:2c:95:da:f3:9b:41:18:80:bc:b4:2f:e9:f2:a8:18:
70:d1:c0:e5:4d:04:31:be:00:dd:c7:2c:f0:04:a9:21:a4:ef:
90:a4:e0:a7:c1:a8:a8:96:66:a6:83:24:a8:c2:91:4f:35:84:
8e:48:7b:7b:8d:b3:0e:eb:3d:28:ef:da:ff:0f:58:37:29:36:
68:94:b3:60:67:f4:34:e5:69:38:62:b0:8d:e8:2b:85:0f:1b:
7a:e7:a6:9b:c4:a2:a2:39:e3:a8:32:33:2f:8e:ce:f9:31:82:
e3:a3:1e:fd:fe:33:26:16:8d:22:8a:7a:6d:e2:2c:8c:e0:a1:
e3:ff:15:d0:50:4e:1f:e8:54:99:b2:dd:2e:38:e9:a1:9a:77:
c6:3c:97:96:d5:af:d6:2b:32:0e:28:06:fc:26:d6:89:a5:95:
37:47:71:fc:fe:58:77:31:93:f8:cf:21:2f:b8:5f:0c:a1:bc:
7b:34:31:73:2a:a3:ca:08:c2:ad:22:ed:9c:a1:2b:6d:68:11:
1d:91:27:44:47:eb:17:ab:bd:46:29:d5:a3:6a:b5:e7:01:4d:
ab:4c:79:b9:0f:f2:44:17:66:49:bc:88:d1:a0:46:fd:d0:eb:
bf:36:3a:1a:9a:41:e0:fa:b2:ec:cd:cb:42:dd:ba:2a:04:f9:
23:d8:71:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:24 2024 by rpki-client on console-fra.rpki-client.org