Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/nNhGBF52_-mmoMKBEu8ucbN83lQ.roa
File: nNhGBF52_-mmoMKBEu8ucbN83lQ.roa (raw, json)
Hash identifier: SFVE6vcsUlqPpi6nJaO2vQo2iOT89IZmH4bn819jjrc=
Subject key identifier: 9C:D8:46:04:5E:76:FF:E9:A6:A0:C2:81:12:EF:2E:71:B3:7C:DE:54
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01895DC7F2E9B002E79BC8EC40ED21532C8E
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/nNhGBF52_-mmoMKBEu8ucbN83lQ.roa
Signing time: Sun 16 Jul 2023 08:18:52 +0000
ROA not before: Sun 16 Jul 2023 08:18:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.160.102.0/24 maxlen: 24
193.160.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5d:c7:f2:e9:b0:02:e7:9b:c8:ec:40:ed:21:53:2c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jul 16 08:18:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cd846045e76ffe9a6a0c28112ef2e71b37cde54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3a:6a:c0:91:5a:4d:a4:ff:61:04:d3:d5:21:
a7:f6:e3:e6:25:ce:ba:5a:95:ac:18:76:fa:e4:31:
05:75:b9:ef:81:0f:7d:71:c8:96:38:39:fb:01:82:
df:65:3a:c8:58:25:c8:99:09:67:e8:dd:87:64:71:
b3:80:c5:f8:43:c5:4f:dc:35:bb:03:e9:9e:87:ab:
2a:bc:7f:5c:71:d2:b9:08:fc:a7:0e:74:53:78:40:
af:38:58:00:4e:1c:2f:e2:5e:0f:c7:26:61:ca:65:
7f:dd:f9:26:43:8f:78:19:68:ac:f7:12:63:f8:5e:
f5:92:4a:50:af:2d:c2:cb:45:96:cb:94:61:db:36:
06:fb:af:50:97:22:4c:84:28:3f:19:06:7d:8e:c4:
0f:cc:a8:a8:80:53:f2:b3:f0:e4:49:c0:31:9a:89:
76:2a:73:47:f5:bf:8a:6a:9d:87:0a:69:1c:ce:fe:
40:3a:36:0c:dd:91:3b:b3:23:5c:6d:06:ff:eb:5b:
01:c7:d2:89:4e:c3:5b:9e:91:42:07:0a:4b:87:42:
8b:e3:65:f1:5e:d8:30:78:67:ad:29:42:f4:20:00:
10:44:3b:30:e1:6f:5b:a8:45:70:c2:de:de:85:25:
f1:02:be:e0:24:43:83:66:fd:50:95:cf:b0:3a:b5:
d9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D8:46:04:5E:76:FF:E9:A6:A0:C2:81:12:EF:2E:71:B3:7C:DE:54
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/nNhGBF52_-mmoMKBEu8ucbN83lQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.102.0/24
193.160.130.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5f:6f:f9:62:ae:24:b5:50:de:9d:66:96:61:49:4a:3d:bb:
a9:7f:e5:ad:a3:45:9e:53:50:ac:90:f6:bc:bd:92:f9:bf:16:
9f:11:71:4f:42:1b:26:3b:0b:67:68:af:28:ff:fb:76:72:61:
89:17:c2:a5:d8:30:bd:df:d0:00:d9:83:c2:51:33:da:29:58:
21:a2:64:14:51:c3:4b:a0:fb:40:d1:68:9c:e0:5a:34:77:86:
70:78:3c:ea:0f:63:0a:b7:33:32:2a:a6:63:a9:88:ee:91:8d:
2e:f4:2a:0d:17:92:0b:af:48:d1:9b:ee:bf:be:fa:6c:1c:2b:
bf:ad:47:d5:8f:36:b6:3b:61:df:ab:f1:f3:e0:da:e5:64:28:
e2:98:fe:0b:ae:c5:d4:fb:1b:0a:3b:51:ed:fd:0d:48:01:67:
fa:40:69:fe:ca:1c:49:27:ae:db:98:ab:59:09:4f:9b:80:a5:
1c:1b:a8:24:71:7a:2e:21:88:af:b2:7d:b1:71:62:c8:24:06:
48:5c:6e:9e:3f:13:f0:73:b1:d8:1e:7f:3c:e2:ca:d7:37:27:
f5:9f:4f:03:cf:54:bf:7b:ae:72:fe:e4:c8:f8:6e:2a:99:1b:
35:76:50:c9:ae:46:e4:d1:02:5c:43:17:ba:c0:4f:84:24:79:
51:ec:a1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org