Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/NPER-KcXk43NBCJ_THe6fKmH1-4.roa
File: NPER-KcXk43NBCJ_THe6fKmH1-4.roa (raw, json)
Hash identifier: rVZZvK3R3w6bjTOPoQprD8WdwvY7RRNug2go18jG9F4=
Subject key identifier: 34:F1:11:F8:A7:17:93:8D:CD:04:22:7F:4C:77:BA:7C:A9:87:D7:EE
Certificate issuer: /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial: 01856F42D668BAD814290932A9A3FED5849D
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/NPER-KcXk43NBCJ_THe6fKmH1-4.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42346
IP address blocks: 194.56.124.0/23 maxlen: 23
194.56.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d6:68:ba:d8:14:29:09:32:a9:a3:fe:d5:84:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34f111f8a717938dcd04227f4c77ba7ca987d7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:55:10:77:e8:8f:b0:e5:99:81:62:8f:74:
7e:e3:5d:94:a3:6d:9a:ec:14:ac:6d:fb:9e:57:88:
59:50:6e:54:36:f0:33:83:d9:35:a6:58:aa:f3:d9:
f2:a6:9b:ac:34:98:11:47:19:98:bc:af:51:f9:61:
ec:ef:14:d9:50:df:a0:43:28:c4:ad:96:7b:60:a6:
a7:0d:40:7f:ab:b9:41:48:f8:4a:6f:fe:12:73:ed:
71:ac:ef:c2:7e:0a:c5:82:4e:33:1b:60:89:b2:73:
21:18:a4:e3:9b:31:25:47:cf:6c:b0:8a:47:54:2a:
4e:ce:9d:3d:cc:b4:d8:c5:ef:f6:10:e0:44:d1:4e:
5b:2d:2b:9c:3b:0b:93:dd:20:de:3f:c5:2b:89:71:
18:68:c1:ee:71:61:3b:be:67:66:22:56:89:a6:12:
2b:1d:c8:62:c1:7a:3c:1c:bf:26:a9:10:e4:87:33:
33:73:39:1e:3a:53:38:a8:03:d6:8d:f5:00:89:5f:
e1:03:ef:f0:69:32:04:aa:67:ce:18:70:c1:1a:f6:
9c:43:07:b4:e0:b3:0c:5c:b9:a0:d7:47:56:50:bd:
fd:79:bc:6a:76:91:fe:af:bf:86:19:81:38:46:15:
9a:d4:cb:c4:73:52:b4:e1:e9:7d:40:b5:df:d6:04:
b1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F1:11:F8:A7:17:93:8D:CD:04:22:7F:4C:77:BA:7C:A9:87:D7:EE
X509v3 Authority Key Identifier:
keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/NPER-KcXk43NBCJ_THe6fKmH1-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.124.0-194.56.126.255
Signature Algorithm: sha256WithRSAEncryption
0b:a6:45:8f:33:05:61:c3:a5:54:05:b6:92:6a:44:9e:86:7a:
11:a5:f1:19:de:1b:48:5f:13:98:2e:f3:fb:7f:66:3d:8e:90:
00:b2:14:e4:5c:ed:d8:0d:64:2d:3c:29:75:92:be:46:7f:92:
a9:cc:16:fc:54:e1:90:1b:60:36:dc:2d:77:8a:b6:e4:10:c8:
6f:19:6a:6c:81:e9:0d:50:b9:19:53:3e:86:ef:03:38:a6:a8:
72:3d:16:31:5e:bb:8e:ad:4a:f7:9f:7e:06:20:05:6a:63:10:
75:0b:8c:ef:43:de:77:1a:89:aa:fb:36:c3:63:18:e6:16:14:
e6:3d:52:5a:42:aa:2c:1f:c1:75:fd:e4:ab:8e:f1:38:37:c5:
2a:82:f7:f0:a5:42:8f:f3:4a:7d:fc:5c:01:da:0e:71:09:ce:
7c:24:3a:de:c7:c8:dd:85:fd:9a:41:e0:47:c9:1e:90:24:c2:
c3:95:1e:47:87:19:7c:dc:8d:34:95:fd:69:3d:27:45:9a:15:
d1:73:51:d6:53:26:af:6a:55:67:8f:df:37:fa:e1:c1:f4:4e:
5b:55:a1:82:71:2c:23:1e:2f:5d:6f:fa:99:da:c1:f8:ca:a2:
ff:75:82:cb:3c:27:67:3f:22:81:34:b4:b5:13:62:82:4a:ba:
04:56:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:05 2024 by rpki-client on console-ams.rpki-client.org