Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/N2KXOAGK-k6riYoK3r_bX_jmtOs.roa
File: N2KXOAGK-k6riYoK3r_bX_jmtOs.roa (raw, json)
Hash identifier: nXqodvLpjnXRp6LusUxakTHvpsMEVE8hVdAb1pLIk1U=
Subject key identifier: 37:62:97:38:01:8A:FA:4E:AB:89:8A:0A:DE:BF:DB:5F:F8:E6:B4:EB
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DDBDFE7AD7FD6BCE99FB93B6E45A2
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/N2KXOAGK-k6riYoK3r_bX_jmtOs.roa
Signing time: Sun 01 Jan 2023 22:05:00 +0000
ROA not before: Sun 01 Jan 2023 22:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39456
IP address blocks: 195.12.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:db:df:e7:ad:7f:d6:bc:e9:9f:b9:3b:6e:45:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37629738018afa4eab898a0adebfdb5ff8e6b4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:c5:58:ac:52:a3:78:e2:38:2d:70:f6:c5:
1a:0e:92:40:1d:a6:df:b1:b5:ab:2a:8a:e3:5d:ba:
2e:a0:d3:3f:3f:ff:e9:92:e4:13:b8:6c:21:76:47:
93:0d:a2:fb:ff:fb:a4:81:01:b1:a4:5e:9b:4e:35:
72:69:37:f4:cc:ef:88:a3:95:75:bd:dd:a6:85:d1:
e9:48:6a:0c:1e:ef:6e:06:a6:e4:21:0c:32:36:1e:
b3:8e:7d:f5:33:9c:7f:1a:f8:16:c2:79:59:4c:86:
92:b9:a1:13:db:98:58:65:05:fa:36:b9:80:3a:53:
a6:36:f4:a4:16:b5:1f:06:0f:67:b6:c3:b8:3b:cd:
67:ee:da:9d:f3:bf:87:ce:32:42:85:51:93:3b:0c:
0e:36:f0:75:16:81:4c:96:d8:1b:a1:e9:3d:1d:f9:
2f:43:70:bc:5d:d2:8b:44:93:4e:15:7d:e1:d1:aa:
55:e2:94:88:82:d1:bf:ee:e1:14:46:6c:6e:fc:44:
ba:89:60:56:78:11:45:97:18:f5:ca:8d:49:a3:b4:
d6:4c:12:2b:3d:73:28:25:d4:87:87:08:04:bb:7b:
7d:64:6c:6a:3d:41:54:4a:fe:ed:3e:25:37:18:28:
f2:f2:86:7b:00:33:70:98:60:ef:65:4a:cd:46:df:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:97:38:01:8A:FA:4E:AB:89:8A:0A:DE:BF:DB:5F:F8:E6:B4:EB
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/N2KXOAGK-k6riYoK3r_bX_jmtOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.12.137.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fd:6c:02:e7:43:2d:26:eb:ea:6f:91:5a:8e:7d:98:f3:74:
08:46:40:1a:ab:cd:4d:08:42:73:e7:47:2b:4f:e2:e7:0d:20:
78:58:89:c9:f5:b0:78:05:08:10:87:16:20:e4:f7:8b:ad:18:
19:ab:8c:53:ff:20:8f:98:10:98:bc:e0:0d:4b:cd:4a:da:82:
8c:80:57:0e:23:14:86:3c:d9:e5:39:37:cb:1a:ed:08:0f:ad:
00:6b:fd:6d:c6:95:bc:0a:c2:03:19:f1:2f:6d:f2:c4:35:34:
f1:3c:83:a1:20:ed:7e:66:fa:66:81:63:5c:0f:da:c8:0d:37:
03:91:d8:d8:fe:71:d2:8f:e1:e1:32:43:5f:7e:1e:aa:aa:57:
75:a8:fb:90:07:09:09:63:a5:1e:2b:ec:86:d4:70:00:a1:29:
79:46:fa:95:e1:8a:c8:8f:ab:d8:08:75:cd:83:bc:ad:8c:c2:
f1:3e:89:d3:8c:bc:64:45:98:df:33:46:e8:05:35:3d:24:f0:
76:fa:27:ea:b6:a9:d5:5c:8d:bf:1f:7a:2b:c8:8e:50:c9:17:
dc:f2:a8:36:6f:ce:f0:b2:08:5d:c3:57:d6:52:a7:b2:10:ac:
fc:45:8b:85:e2:3d:b7:31:2b:63:6d:f3:ed:5d:da:fe:35:bb:
dd:c1:73:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:18 2024 by rpki-client on console-ams.rpki-client.org