Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/nT6SkguivG8f0hULwp_DZNtrBXY.roa
File: nT6SkguivG8f0hULwp_DZNtrBXY.roa (raw, json)
Hash identifier: AimNI85nqPG4Nnh6Pdr/UXofoms1Ou/OhXXiva7qfn4=
Subject key identifier: 9D:3E:92:92:0B:A2:BC:6F:1F:D2:15:0B:C2:9F:C3:64:DB:6B:05:76
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 01890380C3D9804F023F4F506FA9AE0DB99F
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/nT6SkguivG8f0hULwp_DZNtrBXY.roa
Signing time: Wed 28 Jun 2023 19:35:17 +0000
ROA not before: Wed 28 Jun 2023 19:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.160.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 16 Jul 2023 08:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:03:80:c3:d9:80:4f:02:3f:4f:50:6f:a9:ae:0d:b9:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Jun 28 19:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d3e92920ba2bc6f1fd2150bc29fc364db6b0576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:69:a7:aa:55:2f:29:07:c0:dd:05:0a:96:
73:0f:6b:b5:f5:99:a3:86:85:51:95:ed:c2:97:e8:
67:68:73:d7:25:0a:40:6b:cb:64:b7:03:99:39:04:
a5:bc:8b:62:71:75:9a:9a:dc:6c:f0:47:23:71:4e:
f5:4a:dd:f4:3b:d7:4b:96:da:38:f9:9c:df:30:25:
5d:53:1a:a2:bf:63:2e:c0:df:1a:43:ff:d9:0f:ff:
18:ed:2a:6b:ec:41:37:88:98:e9:38:0d:61:4b:3e:
f7:23:68:5e:1f:24:d9:8f:b1:36:39:b4:e0:2e:d6:
9a:12:e5:40:33:31:b3:bc:b5:f2:a9:36:e7:5c:bf:
30:07:e2:cd:e1:bf:4e:da:31:96:f4:b0:1a:8c:87:
a5:4c:88:4c:d7:d6:2c:8c:34:33:fd:68:9a:18:77:
f2:13:80:59:dc:80:bc:b2:32:82:7e:ef:69:7f:8f:
cb:d6:6f:7e:d8:ac:a2:bf:22:7a:00:1c:eb:fb:2d:
43:80:16:e7:35:ee:e3:48:04:d1:69:10:35:6e:d0:
0a:c0:0f:a0:62:bc:84:25:ba:98:5e:a5:02:83:26:
f9:8a:a0:6b:f5:d5:7f:2a:01:54:7a:9a:a7:d3:3c:
6c:db:ad:01:56:b1:ae:e8:bc:ee:42:34:c0:60:d9:
17:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3E:92:92:0B:A2:BC:6F:1F:D2:15:0B:C2:9F:C3:64:DB:6B:05:76
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/nT6SkguivG8f0hULwp_DZNtrBXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.130.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:79:50:20:ea:99:94:d6:1c:50:d4:b1:0f:6e:b2:62:97:45:
f6:ff:f0:3d:05:4a:b9:92:79:58:b7:50:26:23:10:3c:8a:4c:
d2:45:d4:bd:c9:79:e7:89:f7:38:18:a2:23:2c:e1:ee:93:38:
80:5f:6e:de:4c:57:4a:ff:ec:b6:dd:30:b1:c8:f2:25:a7:87:
39:5b:1b:38:20:03:ca:d7:03:c0:ca:6d:91:d9:ba:72:0d:a8:
71:e0:4e:17:34:ac:d9:7e:5f:93:67:20:4b:47:32:94:21:27:
30:a2:8c:38:36:46:22:1e:e2:19:02:ce:78:5d:25:a5:28:01:
c9:b8:bb:76:04:93:c6:57:66:03:b6:5c:af:20:4d:90:45:2c:
b1:36:3b:b2:c3:bb:0b:79:51:69:fa:31:b4:10:35:6f:78:6c:
08:76:7a:52:19:1b:09:32:3e:43:c4:29:ff:6c:9a:1a:f2:20:
93:64:e1:3a:e3:61:8d:3c:3c:0f:d8:2e:b1:97:40:55:d3:02:
53:ab:5d:f0:02:df:89:7a:ad:07:22:3a:08:91:e0:15:bc:21:
d4:1d:a2:b3:78:20:13:55:29:a7:46:25:97:a3:e5:a5:ad:bb:
dc:d7:93:a8:35:14:ca:cf:fd:48:1c:a5:f9:53:b7:92:ed:1b:
4c:8f:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org