Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/JrVlXDb7MPuH6exYY7EOgLN_nio.roa
File: JrVlXDb7MPuH6exYY7EOgLN_nio.roa (raw, json)
Hash identifier: O9RhDXaUPoxPx9GQ2rTmxj+LOT+PAQ48JcO7WJVmqRc=
Subject key identifier: 26:B5:65:5C:36:FB:30:FB:87:E9:EC:58:63:B1:0E:80:B3:7F:9E:2A
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 01857169A59B57C72B9D08B1FC65597F8007
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/JrVlXDb7MPuH6exYY7EOgLN_nio.roa
Signing time: Mon 02 Jan 2023 07:37:07 +0000
ROA not before: Mon 02 Jan 2023 07:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31593
IP address blocks: 193.22.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a5:9b:57:c7:2b:9d:08:b1:fc:65:59:7f:80:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jan 2 07:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26b5655c36fb30fb87e9ec5863b10e80b37f9e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c3:73:03:14:bb:a3:a5:d1:a7:39:5a:f4:73:
13:55:82:a9:03:17:f9:eb:97:d0:7c:27:75:a0:9c:
42:26:48:88:68:af:9a:b1:6b:f9:a1:9b:48:df:5d:
cc:95:67:c2:69:b7:66:c7:48:6b:57:b6:8f:b7:83:
63:33:a9:47:c3:4e:88:59:65:cb:ec:8f:79:d9:77:
b4:fd:17:d0:81:15:c2:4d:71:ea:ed:a8:e2:9c:ca:
93:23:42:84:94:b3:0d:f2:4c:12:f5:8e:be:87:b3:
85:f3:79:a6:ce:84:eb:be:a7:e8:51:58:9c:37:10:
65:49:f2:76:97:2d:ab:c7:69:34:18:4e:f3:02:86:
a1:ed:b9:ab:47:2c:d9:34:8c:b2:00:40:e6:5f:a6:
39:3d:c2:64:af:c9:fe:aa:dd:f0:e0:54:0d:07:c8:
71:01:94:a6:43:47:66:12:84:84:f5:5d:ea:4c:47:
d9:40:e2:86:5d:dd:97:75:20:5e:b1:4f:c7:32:cc:
27:00:f3:33:b9:20:c1:dd:ad:8c:94:40:2b:50:3b:
08:17:2d:ac:0c:e6:18:0b:8c:db:b0:ed:34:53:3c:
33:ed:07:24:82:51:d6:b6:0f:ab:29:13:96:70:b8:
90:92:0c:d9:35:ee:74:63:89:aa:18:62:79:5c:3b:
ab:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B5:65:5C:36:FB:30:FB:87:E9:EC:58:63:B1:0E:80:B3:7F:9E:2A
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/JrVlXDb7MPuH6exYY7EOgLN_nio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.84.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a6:f7:7a:09:54:e1:43:91:64:38:ba:b7:70:dd:dd:cf:51:
27:b6:eb:b4:3b:30:3e:f4:17:51:b6:8a:d9:62:a7:54:b5:b5:
fb:91:d5:73:ec:ea:fd:76:63:fa:4b:d4:53:46:2a:9c:c1:8f:
06:1e:40:5f:f9:6f:aa:1f:a4:6a:6d:73:bf:80:f9:96:ca:2b:
00:79:60:30:20:79:ad:35:4a:91:02:a0:0c:2f:21:44:e0:5d:
11:2c:b2:12:b8:3e:76:9a:7b:a1:a4:5e:0e:9f:36:24:d4:17:
d8:80:64:e7:cd:91:ba:ef:59:0c:12:71:80:08:02:9f:b5:ba:
7c:79:4e:16:aa:3e:b3:08:75:3e:5e:9e:49:07:76:7f:74:0b:
ed:bb:02:6e:d1:33:94:61:59:45:69:e4:56:6c:56:e0:eb:fa:
8f:a7:d2:65:39:29:79:c1:e8:21:8f:01:bc:84:91:71:af:e9:
5a:cb:70:09:f8:84:f7:58:54:34:78:91:fe:9e:d3:cf:79:d4:
03:55:cf:f7:96:cd:78:0c:6c:b0:78:5a:d8:b0:c8:50:4c:20:
1e:6c:c3:0e:44:42:0c:7d:d0:1e:2b:11:9b:05:b1:dd:4b:18:
f8:01:9b:0c:e0:78:a0:68:37:15:40:d6:3e:ac:11:b4:14:77:
8c:05:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:12 2024 by rpki-client on console-ams.rpki-client.org