Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/neTGR8ZFkbHYHHrjQL6rYGGJBCQ.roa
File: neTGR8ZFkbHYHHrjQL6rYGGJBCQ.roa (raw, json)
Hash identifier: cQQXtT/wePOQ2L7Ljm1//Mi09tCr042L+4dEAzj9lws=
Subject key identifier: 9D:E4:C6:47:C6:45:91:B1:D8:1C:7A:E3:40:BE:AB:60:61:89:04:24
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 01856F26B2C441065DF927792602A3CFE643
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/neTGR8ZFkbHYHHrjQL6rYGGJBCQ.roa
Signing time: Sun 01 Jan 2023 21:04:45 +0000
ROA not before: Sun 01 Jan 2023 21:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24802
IP address blocks: 193.111.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:b2:c4:41:06:5d:f9:27:79:26:02:a3:cf:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jan 1 21:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9de4c647c64591b1d81c7ae340beab6061890424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:cc:3f:ad:a9:67:7a:a9:80:d0:75:bf:dd:b8:
c8:cb:6e:52:17:69:dc:a2:ec:de:82:35:c3:c1:ad:
c0:65:54:74:ff:29:e3:28:52:9e:a6:50:4d:ca:b5:
4d:fc:43:ce:44:3d:e1:3d:da:a0:f9:b2:8f:9c:6b:
02:c2:f9:18:11:51:3c:22:21:ac:cb:96:af:3c:ab:
80:85:68:02:ae:cb:f5:7f:d2:49:6b:99:6c:33:19:
4d:93:d3:90:fb:d9:c3:16:7e:4c:4e:f3:de:03:e3:
c8:5a:63:cb:0b:73:e5:20:2f:71:8d:08:d2:9f:cb:
2e:94:33:95:4c:95:52:09:7a:cf:54:1c:26:95:04:
12:3d:15:8d:c6:40:7b:36:fe:64:1b:4d:77:46:d0:
12:7c:6b:43:fa:05:d7:a3:93:1f:5c:df:93:00:d0:
d5:99:6e:fb:47:f5:7e:33:79:31:d6:5b:87:c8:3f:
97:93:a9:66:3e:0b:83:23:ac:ed:6c:74:f3:f2:45:
65:ce:bd:25:ca:fb:48:29:80:a4:b4:55:e5:bb:f7:
a2:cc:29:9a:62:cf:34:b1:c8:68:04:06:78:10:26:
42:a7:c9:ab:98:51:dd:ba:0c:6e:95:c9:71:12:fe:
f8:bb:dd:a0:c1:f0:06:2a:d8:75:71:67:ab:6b:68:
73:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E4:C6:47:C6:45:91:B1:D8:1C:7A:E3:40:BE:AB:60:61:89:04:24
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/neTGR8ZFkbHYHHrjQL6rYGGJBCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a1:02:5b:a3:b2:74:90:c7:f0:09:96:f9:83:b4:f8:a1:c3:
bc:c5:14:f2:24:de:1c:0b:eb:4c:ac:9c:47:9d:e2:b6:b2:62:
8e:01:26:91:81:7e:86:79:e8:c1:72:f1:c9:79:8b:f2:4c:06:
f1:81:4b:46:a3:3e:e0:6e:aa:19:e0:61:30:27:da:7c:e7:89:
05:04:00:57:2c:51:4a:d5:ee:63:a0:12:d1:aa:c2:f4:ea:93:
46:ef:46:10:ca:50:dd:94:b3:3e:57:aa:36:79:f3:02:13:45:
71:7b:e3:b8:0b:75:33:5e:1b:79:ce:1a:73:d7:44:64:e0:db:
4b:33:2d:17:97:40:b5:e1:9d:8a:ad:d8:55:c5:14:53:d3:4f:
08:86:97:36:35:ca:bb:97:f0:24:d7:08:bf:2c:9a:a8:b9:7c:
60:fc:20:70:47:4d:0d:d6:dc:5f:9c:45:00:f0:9e:6c:0c:3e:
4b:eb:38:1e:39:4a:8a:69:f7:07:5d:ee:73:be:49:09:3f:2e:
db:c1:e4:3a:b9:68:1c:b3:e8:76:1e:18:22:95:a1:08:cd:da:
fa:73:85:f5:1a:4b:52:3f:94:bf:11:d3:1d:85:62:2d:c1:7c:
7b:81:e6:3d:f2:30:45:62:65:6a:be:72:12:39:19:9f:f7:6f:
73:3f:5c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:12 2023 by rpki-client on console-ams.rpki-client.org