Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/nhR0e_72FiaQxkR5Tl5EtSCOyIE.roa
File: nhR0e_72FiaQxkR5Tl5EtSCOyIE.roa (raw, json)
Hash identifier: Ao95kRRiUuBXspHHklEdwTv4MnvNIoc9nZhZ04cvaqQ=
Subject key identifier: 9E:14:74:7B:FE:F6:16:26:90:C6:44:79:4E:5E:44:B5:20:8E:C8:81
Certificate issuer: /CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Certificate serial: 0190C6A2767EFC557299D352C496AAD230BE
Authority key identifier: FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/nhR0e_72FiaQxkR5Tl5EtSCOyIE.roa
Signing time: Thu 18 Jul 2024 16:17:34 +0000
ROA not before: Thu 18 Jul 2024 16:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215687
IP address blocks: 193.56.200.0/24 maxlen: 24
193.56.201.0/24 maxlen: 24
193.56.226.0/24 maxlen: 24
193.56.227.0/24 maxlen: 24
2a13:4300::/29 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Jul 2024 16:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:a2:76:7e:fc:55:72:99:d3:52:c4:96:aa:d2:30:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff29a4b3f0a3af8bbed6029a8b265dc93204e7de
Validity
Not Before: Jul 18 16:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e14747bfef6162690c644794e5e44b5208ec881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:35:dd:95:ff:43:f7:9d:51:dc:90:ef:e9:f9:
03:92:40:5e:b4:4b:41:41:fe:8f:67:7b:8e:bd:9d:
2a:b7:8f:b8:25:ce:8d:c9:bc:2a:f4:29:02:86:5c:
c6:da:4b:1f:ea:6b:4e:16:5e:9d:07:b6:3c:e0:fb:
01:34:0c:54:fe:5d:46:0a:03:73:a6:9b:b5:4b:3f:
d2:5b:7e:41:be:0d:ca:de:8f:47:12:db:ec:b4:6b:
6e:86:c9:74:d2:25:23:c7:27:95:4c:26:c1:87:d8:
40:ad:db:71:b8:4e:66:85:9f:ad:f7:45:9b:3c:12:
50:69:19:35:6a:a7:4a:9c:d4:31:4d:ea:6c:40:28:
98:e9:33:38:e7:64:ba:5e:81:8f:94:d8:17:f8:3f:
4a:4f:96:94:51:1c:4b:ab:30:79:89:07:18:9c:4b:
5b:47:aa:c9:dc:d3:bf:ec:05:e7:b5:fb:6c:a9:13:
0d:62:b2:d9:cb:23:6c:95:15:d2:49:fb:fb:27:16:
3a:fc:23:7c:36:dc:d6:e9:7a:88:9c:c5:7f:27:ce:
71:e4:05:67:74:d0:00:68:28:34:de:98:37:52:1f:
29:b9:a5:c2:9e:d2:23:7b:56:f6:a9:5b:f4:55:37:
ba:65:4b:67:84:c1:89:96:9b:8d:0a:a5:a7:ee:7c:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:14:74:7B:FE:F6:16:26:90:C6:44:79:4E:5E:44:B5:20:8E:C8:81
X509v3 Authority Key Identifier:
keyid:FF:29:A4:B3:F0:A3:AF:8B:BE:D6:02:9A:8B:26:5D:C9:32:04:E7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ymks_Cjr4u-1gKaiyZdyTIE594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/nhR0e_72FiaQxkR5Tl5EtSCOyIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d7a484-3d4a-48bf-b516-caf2f7a5b5f4/1/_ymks_Cjr4u-1gKaiyZdyTIE594.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.200.0/23
193.56.226.0/23
IPv6:
2a13:4300::/29
Signature Algorithm: sha256WithRSAEncryption
35:6a:7a:5d:e7:83:d0:f4:f7:45:8a:f0:c9:02:7a:0d:a2:23:
d9:4e:a0:6e:3d:ca:96:d3:23:80:a6:5b:fb:7e:cd:3d:ef:e6:
58:44:75:45:d2:23:28:5c:30:03:9f:ae:75:09:97:f7:e3:75:
88:c1:ab:f7:cb:5b:ef:9f:ed:95:ee:a2:a4:6f:5d:0d:86:28:
ab:76:d4:69:88:37:3f:71:26:6c:f4:63:0c:e8:32:81:ec:7a:
89:dc:32:10:af:5a:e2:a3:65:d4:91:55:c2:56:c8:44:87:e2:
41:3c:53:9e:ba:0e:97:9d:f1:9c:4c:72:38:2e:86:58:14:b0:
b2:27:14:7c:7f:dd:2f:d5:c5:77:8c:2e:74:25:8f:ad:b3:90:
11:3e:9a:de:03:29:b6:43:c7:bd:44:73:8d:b7:4c:c4:c3:25:
9e:d1:3f:ad:c3:ee:b4:96:e4:ca:1b:17:c2:1c:67:a7:d9:d8:
67:f5:b4:73:4f:94:c0:34:27:18:c3:c0:10:1b:ec:a4:ff:68:
10:ae:8c:55:d9:70:bf:8f:e4:50:35:e3:eb:e4:68:56:69:3c:
b6:ef:25:a1:8c:57:61:2a:2c:63:5d:23:3f:78:6b:0f:97:fa:
c8:b8:b4:45:0e:c6:24:19:0d:6c:a5:cd:19:fa:38:dc:e2:bb:
83:e1:f3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 18:58:24 2024 by rpki-client on console-fra.rpki-client.org