Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1-NS3E507eSUvGpkyGrdJrwtWYa0.roa
File: 1-NS3E507eSUvGpkyGrdJrwtWYa0.roa (raw, json)
Hash identifier: O44IAP/DRUiU1zCzvMZQ/0KkfmjVGZEdJnWSkRK9JpI=
Subject key identifier: F8:D4:B7:13:9D:3B:79:25:2F:1A:99:32:1A:B7:49:AF:0B:56:61:AD
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 0186A6D653153A4F86E46E99F35867888FC8
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1-NS3E507eSUvGpkyGrdJrwtWYa0.roa
Signing time: Fri 03 Mar 2023 09:38:29 +0000
ROA not before: Fri 03 Mar 2023 09:38:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 188.191.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:d6:53:15:3a:4f:86:e4:6e:99:f3:58:67:88:8f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Mar 3 09:38:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8d4b7139d3b79252f1a99321ab749af0b5661ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:bf:67:09:57:d5:f7:4c:9e:30:88:f4:f6:
80:ba:89:25:48:78:de:58:f0:86:c7:a4:3a:11:5f:
05:6e:a7:88:cf:b3:f6:59:d5:9c:7c:7f:7a:7d:60:
ed:fc:3b:34:06:41:b3:52:6f:0b:a0:4e:00:57:66:
5d:f2:56:79:c7:9a:85:1a:56:6c:d8:ab:74:03:46:
12:2c:9b:99:ae:0c:fc:57:06:76:d0:10:7a:a5:d6:
39:51:bd:bc:ca:af:e4:0a:5a:f2:5c:63:76:77:96:
82:1a:9a:07:35:64:af:d3:de:31:ef:66:80:57:97:
23:21:83:20:b0:26:8c:a3:91:df:38:c2:12:5f:9b:
70:d0:64:04:14:a5:c3:d0:34:c4:5a:92:c4:93:2b:
ec:23:d3:ac:6a:23:99:d3:b4:35:fa:34:c1:5b:f8:
f0:cb:e0:c4:80:f3:8a:83:b8:d1:2c:d6:f0:9d:a3:
54:49:b0:8a:82:42:2f:92:43:e8:2f:d1:f8:2d:ca:
90:16:de:ad:59:70:6d:78:34:16:73:53:89:d6:79:
4b:bf:e6:af:90:56:84:d7:7b:7d:2f:f9:15:b9:15:
5b:46:0b:40:71:4d:ea:1e:d7:bf:88:c5:d2:24:3f:
bd:62:4d:14:70:5e:cd:57:b8:d1:92:8f:04:fa:6a:
80:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D4:B7:13:9D:3B:79:25:2F:1A:99:32:1A:B7:49:AF:0B:56:61:AD
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/1-NS3E507eSUvGpkyGrdJrwtWYa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.105.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:9a:96:ef:ce:26:f9:cf:1d:f4:e3:99:61:2b:80:f7:52:10:
95:0d:54:9d:ef:fc:74:74:26:99:aa:46:91:3c:aa:84:39:30:
c3:0e:5a:1d:b8:30:38:cf:aa:1f:c5:a1:15:20:c4:63:22:ae:
12:a5:ab:94:fb:00:a2:40:29:e3:63:38:11:9d:48:8f:cb:54:
90:8e:dd:73:f4:91:29:3f:15:55:d2:26:92:db:de:b9:55:1f:
7e:3f:35:14:1e:fd:d3:0b:d3:16:68:1d:99:63:82:3a:bc:e5:
08:9d:2d:63:07:bd:12:1d:dd:b8:74:2a:60:24:16:63:71:04:
df:d8:43:9a:51:4e:c1:0b:01:ac:ba:79:33:5a:eb:18:0b:ea:
7b:ad:cf:c7:58:38:6d:79:0b:a0:07:f3:af:44:5c:59:ef:9f:
ec:44:36:e3:8d:76:2e:c1:6b:fa:3f:cc:47:94:a5:3b:c4:ac:
44:44:15:45:c5:64:ad:13:a7:cf:09:dd:3e:d1:bb:40:f1:07:
75:cc:0a:a9:e8:55:fb:e0:60:be:4e:13:3c:86:6e:63:85:7a:
74:9d:a5:24:c2:a1:db:0b:ce:1f:ce:1a:8c:d2:8b:1f:7f:12:
cd:a6:cc:91:4c:ec:7b:ee:eb:18:61:3d:01:33:7e:3d:40:85:
22:d3:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:58 2024 by rpki-client on console-ams.rpki-client.org