Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/NPSsT9dAAtRdk748-2kU6xT1LyM.roa
File: NPSsT9dAAtRdk748-2kU6xT1LyM.roa (raw, json)
Hash identifier: Hxj2lok+Q+bfJ3gPoo1Kh4i+tJUdCcdvaD/jj5ckse8=
Subject key identifier: 34:F4:AC:4F:D7:40:02:D4:5D:93:BE:3C:FB:69:14:EB:14:F5:2F:23
Certificate issuer: /CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Certificate serial: 01932AB783042E3FFC08D0C83226C5818717
Authority key identifier: 99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/NPSsT9dAAtRdk748-2kU6xT1LyM.roa
Signing time: Thu 14 Nov 2024 12:48:09 +0000
ROA not before: Thu 14 Nov 2024 12:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.246.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Nov 2024 22:05:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2a:b7:83:04:2e:3f:fc:08:d0:c8:32:26:c5:81:87:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99201f609e7a893da86cf0ebbca4bbf47279d617
Validity
Not Before: Nov 14 12:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34f4ac4fd74002d45d93be3cfb6914eb14f52f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:c7:bf:a8:0b:82:ea:44:f2:53:ec:2a:c3:
91:a1:84:60:59:69:58:c2:9b:bc:b2:e8:87:48:32:
ee:86:00:14:02:84:50:ef:91:f6:65:61:08:35:b3:
68:2f:df:8f:02:06:5a:bd:af:12:c6:a5:eb:cf:f4:
0d:47:ae:11:1b:97:b3:64:06:0e:5c:2e:46:40:7d:
83:94:54:97:39:56:d1:9c:c8:76:5d:2b:55:7c:bc:
59:d0:9e:dc:28:3a:89:cb:9e:51:e9:84:4b:11:08:
9a:32:c8:7b:c6:7f:d7:de:8f:d4:bf:20:96:a4:87:
5d:23:cb:6f:6a:6e:e2:7d:13:93:e3:0b:42:32:d6:
61:76:50:a1:fd:b5:9d:34:56:98:f2:06:88:c9:52:
8f:65:37:c8:7e:56:59:b1:ee:da:1f:d0:7d:72:bf:
bd:01:e8:14:c9:81:49:ac:c3:99:05:a6:b9:85:0c:
80:51:d5:08:e6:2b:ad:90:5e:03:6b:8f:97:15:15:
6e:95:99:c1:2b:c2:a2:c7:d0:04:fc:f9:e8:26:05:
fe:07:09:d7:ae:76:44:9c:28:42:cd:54:2e:e2:57:
c8:07:ea:50:7a:66:d0:85:1e:0f:70:34:a7:2f:dd:
df:0d:4a:63:64:f1:39:07:11:cb:d0:28:cc:fa:9a:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:AC:4F:D7:40:02:D4:5D:93:BE:3C:FB:69:14:EB:14:F5:2F:23
X509v3 Authority Key Identifier:
keyid:99:20:1F:60:9E:7A:89:3D:A8:6C:F0:EB:BC:A4:BB:F4:72:79:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSAfYJ56iT2obPDrvKS79HJ51hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/NPSsT9dAAtRdk748-2kU6xT1LyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6536f9-87dd-4edd-b01c-b23172eb81fb/1/mSAfYJ56iT2obPDrvKS79HJ51hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.34.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:e8:66:cb:b9:96:2f:71:e8:a2:98:da:a1:bc:f1:95:15:b2:
fb:1e:1b:46:9e:03:e5:ad:68:1d:90:0e:da:56:f8:eb:9b:40:
3b:bf:0d:9d:9a:ae:f7:fc:0d:31:f8:4c:3d:f3:7b:2d:6e:65:
92:b4:30:21:99:63:c8:21:6e:39:50:d6:6f:db:09:7e:35:47:
2e:69:b9:82:69:b7:8e:cd:48:62:05:4d:6e:a6:e7:a7:22:f0:
65:66:db:36:80:d3:a8:a9:23:02:0d:dc:5b:77:e2:6a:b1:34:
59:1b:af:c7:15:fd:80:0e:79:7c:30:9f:08:cf:02:1d:ec:fa:
f8:a7:37:5e:48:b1:43:94:e6:ba:c6:c0:68:f9:15:fe:f5:c2:
f5:79:c3:4f:1b:5f:24:f0:7e:cb:0d:16:38:43:d9:b0:30:56:
da:11:6d:8e:b9:48:c2:e4:0f:a2:0a:13:6f:6b:93:ad:74:fe:
74:29:6d:db:d8:c2:12:60:8e:30:2d:07:5c:3d:31:ad:48:cc:
27:7f:1b:9c:04:f7:f6:46:cd:42:ed:57:c0:28:d4:ba:a5:c1:
2c:1d:e4:1a:98:11:0c:98:0d:10:c8:7b:ca:82:70:87:c0:de:
1f:c1:aa:29:e0:16:df:f4:95:8e:00:da:63:ba:1b:65:ea:96:
7e:1d:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:01 2025 by rpki-client