Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/NhQ_MDm4ww4slS98R-g6o2Aqn54.roa
File: NhQ_MDm4ww4slS98R-g6o2Aqn54.roa (raw, json)
Hash identifier: 5WBFMER4pCsIbaJBbCtceqtgmhft+zBhCd6FmQYYAu8=
Subject key identifier: 36:14:3F:30:39:B8:C3:0E:2C:95:2F:7C:47:E8:3A:A3:60:2A:9F:9E
Certificate issuer: /CN=a802b73ef4a8b6b0e0883a9c8bc6e7f012db93a0
Certificate serial: 018571154DFCF14C48502815911B862618CB
Authority key identifier: A8:02:B7:3E:F4:A8:B6:B0:E0:88:3A:9C:8B:C6:E7:F0:12:DB:93:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/NhQ_MDm4ww4slS98R-g6o2Aqn54.roa
Signing time: Mon 02 Jan 2023 06:04:59 +0000
ROA not before: Mon 02 Jan 2023 06:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 193.141.60.0/24 maxlen: 24
2a12:8640::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:4d:fc:f1:4c:48:50:28:15:91:1b:86:26:18:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a802b73ef4a8b6b0e0883a9c8bc6e7f012db93a0
Validity
Not Before: Jan 2 06:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36143f3039b8c30e2c952f7c47e83aa3602a9f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1c:3e:86:09:75:77:14:63:be:41:54:ac:95:
d2:11:60:ea:47:e7:6b:b3:10:d6:74:82:87:78:e0:
da:59:73:28:16:d0:0e:91:4a:3b:21:24:2c:a6:85:
01:84:a6:81:4e:71:8c:7d:44:a4:d1:ed:24:32:81:
eb:21:5e:6b:2c:2d:a0:4b:4a:3e:8f:68:d9:bd:90:
53:85:28:07:21:25:21:26:8c:68:4e:10:32:4b:e9:
a0:37:56:22:29:23:09:a5:82:92:68:ff:19:9e:21:
f6:4d:c6:75:36:b1:36:f1:77:a2:ca:92:cb:e0:ea:
fa:7d:61:83:ac:33:a1:27:5f:74:39:39:fa:50:2a:
e0:ab:0c:ef:c2:80:db:19:fb:8f:ce:af:05:14:6d:
c9:e8:d5:c0:66:81:ec:d4:3c:9d:46:17:87:d0:33:
3e:e3:6d:16:d6:e9:7d:9a:5a:65:34:b4:2b:cc:8e:
2b:9a:b1:19:79:39:fe:f2:4e:8f:b5:2c:09:ac:a6:
c5:3c:79:34:74:b9:24:a3:79:27:88:1a:ef:a4:34:
be:0c:41:10:ef:0a:8a:5d:2c:76:f5:0c:8f:e5:9f:
39:5d:7e:65:13:29:f2:c4:5c:17:4c:c4:32:4a:85:
cb:cf:d7:a5:67:23:04:ac:ff:03:b8:cb:7d:ca:07:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:14:3F:30:39:B8:C3:0E:2C:95:2F:7C:47:E8:3A:A3:60:2A:9F:9E
X509v3 Authority Key Identifier:
keyid:A8:02:B7:3E:F4:A8:B6:B0:E0:88:3A:9C:8B:C6:E7:F0:12:DB:93:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qAK3PvSotrDgiDqci8bn8BLbk6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/NhQ_MDm4ww4slS98R-g6o2Aqn54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7c07e8-3b8c-4c93-9a08-a909cb0a138f/1/qAK3PvSotrDgiDqci8bn8BLbk6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.60.0/24
IPv6:
2a12:8640::/29
Signature Algorithm: sha256WithRSAEncryption
19:0b:e6:2a:eb:a7:36:79:66:f4:b8:e6:93:75:29:94:d1:cf:
38:14:e9:9c:77:f2:a1:11:34:51:d3:a4:d8:40:8c:ce:52:ed:
a0:94:e2:f5:3e:e7:fa:5c:1f:57:d5:5c:f2:e3:1c:bd:4e:03:
ce:c6:34:b8:5e:33:05:ae:19:6c:23:db:a6:12:70:98:c6:8c:
96:ae:7d:69:12:75:4f:f7:38:b1:b7:be:59:72:89:72:97:14:
a3:e0:5d:da:83:9f:07:e9:b9:8a:94:c6:1a:79:a2:00:5c:c1:
a7:a2:6f:c3:a4:bf:de:ef:90:14:16:51:d9:b5:7f:61:94:f0:
64:ac:6f:a2:e5:e3:d5:3a:7c:1a:29:b5:3d:79:d5:f7:34:a7:
2e:7c:a6:82:e1:4e:4e:a7:bc:e4:c3:5b:da:96:f0:95:3e:28:
5f:9b:cd:e5:33:e4:af:ab:94:5a:6b:0b:4c:d0:0c:67:6a:b8:
ef:13:f5:48:64:a9:e9:fc:2c:22:86:6d:73:61:6b:bd:88:a6:
c1:ff:b9:b2:d5:c1:6d:d0:d0:37:c4:e3:61:ba:10:16:db:99:
f8:1f:44:30:8e:e3:89:98:ed:ff:6e:ae:9a:ed:66:d6:b8:6a:
36:76:be:fb:59:3e:5d:16:ce:3c:d9:fa:73:8a:20:2f:e9:5a:
0c:dd:20:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:55 2024 by rpki-client on console-fra.rpki-client.org