Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/N9CDnIgRDZdllN9ua5JHDqYubQs.roa
File: N9CDnIgRDZdllN9ua5JHDqYubQs.roa (raw, json)
Hash identifier: YldwKckpUZxsHUOq6GEKyzAN0u56dqaP8habBlscH/Y=
Subject key identifier: 37:D0:83:9C:88:11:0D:97:65:94:DF:6E:6B:92:47:0E:A6:2E:6D:0B
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 018D562B5FFFE179E5431DA9CB8F5C8B0B38
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/N9CDnIgRDZdllN9ua5JHDqYubQs.roa
Signing time: Mon 29 Jan 2024 17:01:39 +0000
ROA not before: Mon 29 Jan 2024 17:01:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 193.93.188.0/24 maxlen: 24
193.93.189.0/24 maxlen: 24
193.93.190.0/24 maxlen: 24
193.93.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 10:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:56:2b:5f:ff:e1:79:e5:43:1d:a9:cb:8f:5c:8b:0b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Jan 29 17:01:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37d0839c88110d976594df6e6b92470ea62e6d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:86:e2:af:53:42:d5:a4:f8:59:f0:7c:cd:
7c:ad:ec:47:05:ed:75:52:74:39:5c:22:26:ca:5c:
71:f1:27:78:ce:f5:03:be:f4:3b:d8:7e:db:f9:44:
ba:53:5b:cb:f1:3b:ab:76:3b:5b:3c:7e:0c:ae:27:
35:f9:f1:ff:fa:6f:bb:d0:2c:f9:b2:f4:49:a2:0c:
ab:39:d9:8b:4d:6b:2e:c3:ed:36:f2:57:cf:80:d4:
b7:35:d7:02:16:f7:9a:32:3c:c1:f3:8d:c5:f7:76:
ac:ce:ee:be:2e:26:52:4f:b5:24:40:ac:ea:f2:3b:
4c:9b:eb:78:ae:f4:cf:9f:d1:9d:b1:bb:bd:f4:20:
55:d1:78:b0:98:fb:bc:25:c4:a7:d9:4e:11:cf:23:
8d:8a:d4:2d:73:e1:4f:49:f0:60:0f:14:5e:45:9d:
cb:16:f0:a3:46:71:25:41:da:16:e1:64:eb:33:73:
e4:7c:74:b9:ce:ab:14:19:84:e1:a7:2b:38:ba:72:
ab:0c:2f:54:96:cd:c3:c9:0d:be:77:40:a8:06:30:
de:70:22:ec:90:2a:4c:ea:a4:e5:84:f1:f3:60:f2:
ea:08:1c:95:84:07:56:52:ac:df:27:43:3c:02:6d:
9c:e5:aa:d7:bf:47:14:a8:3b:63:b1:93:8b:81:17:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D0:83:9C:88:11:0D:97:65:94:DF:6E:6B:92:47:0E:A6:2E:6D:0B
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/N9CDnIgRDZdllN9ua5JHDqYubQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:0d:f5:8b:95:fe:27:8a:57:8d:c1:fa:1d:f3:64:d7:ca:0e:
7e:a8:2a:93:db:e2:ff:6d:19:8d:4b:d4:73:fd:bd:3f:bc:6f:
59:22:4b:92:de:ca:19:16:f5:c4:73:b2:23:de:5d:c5:77:33:
e6:f8:20:71:a6:92:7b:f0:78:46:ae:4b:4e:23:62:ff:cd:94:
cf:2e:5e:37:8f:a5:2e:48:29:02:03:c6:48:d2:07:ff:56:1e:
a1:69:57:f4:1e:43:f4:86:74:be:98:b9:13:e1:75:74:27:5e:
e8:23:3c:eb:b2:d1:75:79:98:da:5f:20:f2:11:dd:91:d3:2d:
ed:9b:aa:94:97:e0:12:38:a3:8f:6c:47:00:c1:72:86:80:ff:
02:0c:54:78:e9:bf:2b:a9:85:d1:ff:56:be:71:f6:e2:c6:71:
ff:9e:7e:d0:e5:a9:7e:26:5d:3b:5f:dd:27:98:2a:4d:56:e0:
e5:37:5f:ad:98:d3:6c:d7:7a:a3:96:22:b0:83:73:91:ec:14:
74:98:56:9e:e1:c9:dd:ce:3f:d7:2c:3b:b4:df:2e:d1:ad:79:
8a:6b:0a:f6:13:d1:05:b5:d2:90:d1:99:d3:b2:34:e8:8b:b4:
36:35:94:47:c0:a9:8c:44:7d:e6:68:38:52:78:9b:d8:69:a4:
6d:7f:08:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:29 2024 by rpki-client on console-fra.rpki-client.org