Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/nGXGBS16qn93icHdA5vkEbtItCE.roa
File: nGXGBS16qn93icHdA5vkEbtItCE.roa (raw, json)
Hash identifier: nA8gx4tBwqTIhZ75CUv3+lflMGuRdZU1seI87k27QrI=
Subject key identifier: 9C:65:C6:05:2D:7A:AA:7F:77:89:C1:DD:03:9B:E4:11:BB:48:B4:21
Certificate issuer: /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial: 01857079887E7EF36131195406C6B01DD119
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/nGXGBS16qn93icHdA5vkEbtItCE.roa
Signing time: Mon 02 Jan 2023 03:14:50 +0000
ROA not before: Mon 02 Jan 2023 03:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197091
IP address blocks: 195.43.73.0/24 maxlen: 24
195.43.72.0/24 maxlen: 24
195.43.72.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:88:7e:7e:f3:61:31:19:54:06:c6:b0:1d:d1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Validity
Not Before: Jan 2 03:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c65c6052d7aaa7f7789c1dd039be411bb48b421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:e4:1f:73:41:8b:ea:10:a1:fd:00:75:50:
36:53:35:fa:ea:2b:51:3d:87:87:8b:66:2b:34:d8:
92:9a:5e:88:51:22:f4:0c:dc:9f:61:53:e4:96:76:
2e:a4:38:57:bc:09:e4:96:a8:3e:c4:26:42:65:59:
b7:c3:87:39:39:27:6a:67:36:41:47:55:a2:ab:e9:
0b:ba:54:b5:ea:83:2b:2f:c4:e0:7e:c9:1f:a6:28:
9c:9e:f0:33:31:22:0a:f3:ac:67:1b:6d:be:c0:99:
1c:b4:3e:01:86:c5:42:ca:28:79:4c:bb:52:e6:59:
ca:72:69:6f:52:83:02:f0:b3:e9:ec:e8:2f:4f:9e:
77:7a:b1:c1:d3:60:f6:42:a8:23:15:32:19:9b:c9:
d1:da:78:64:52:ca:57:8e:21:67:82:81:41:a5:2f:
2a:9b:58:db:4d:e2:05:9c:6d:90:8e:50:db:af:ac:
a5:01:59:01:d9:b0:59:ee:bb:03:ed:c6:07:9c:35:
7f:58:88:5f:9b:cc:cd:2c:93:10:b7:48:20:b0:2a:
b0:85:ed:ee:e3:87:67:fb:74:fe:d2:bc:70:10:00:
e4:14:6d:76:fa:f6:01:db:af:86:ec:f8:ce:a2:d7:
5d:2a:ca:70:73:a6:e2:bb:28:10:2d:c3:b5:2f:55:
5a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:C6:05:2D:7A:AA:7F:77:89:C1:DD:03:9B:E4:11:BB:48:B4:21
X509v3 Authority Key Identifier:
keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/nGXGBS16qn93icHdA5vkEbtItCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.72.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:9f:1f:9c:fb:9d:e3:b6:e6:6b:fb:bc:50:6d:12:55:be:59:
30:0b:41:c3:e6:1d:a9:e3:31:04:d0:fe:cb:f4:68:83:2e:f0:
64:c0:11:27:9b:fe:3d:07:71:02:c8:57:61:cd:05:2b:62:0f:
db:49:f3:a5:1c:63:dc:c4:a5:03:63:bf:f2:a4:11:60:e4:53:
e5:21:72:73:f3:d5:a5:31:f6:99:51:52:83:98:e8:33:85:c5:
14:bc:33:ff:b4:c6:c4:8a:2e:3e:00:3e:ee:0f:05:4b:c6:74:
cb:2e:27:84:20:22:d5:fb:03:c2:f9:98:50:73:6c:72:6f:82:
f8:6c:f1:54:bd:cf:d0:00:c6:45:36:03:00:3a:ae:7b:30:8e:
ca:f8:ba:dc:ce:e4:5d:f1:c4:77:ef:e0:df:34:5f:3f:7f:d6:
58:a1:0d:ff:84:fc:19:66:11:a0:51:42:76:75:6b:97:cf:99:
6d:45:88:b6:52:d8:ad:97:c7:5b:c4:5c:b8:2d:2a:96:31:c6:
a9:a5:2a:6a:3a:e1:f1:57:2e:a0:a1:7a:bd:25:e8:a8:94:71:
7b:9a:ea:86:af:60:5e:54:c9:11:a7:a7:fc:58:dd:a2:f8:d7:
9c:fc:86:53:6c:e0:e6:e8:00:bc:6b:9f:21:51:d0:60:36:03:
51:cc:d7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:41 2024 by rpki-client on console-fra.rpki-client.org