Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nqwhK6SUDP2-RNOXbTNMWTGYV0I.roa
File: nqwhK6SUDP2-RNOXbTNMWTGYV0I.roa (raw, json)
Hash identifier: 2sQBt97+EDn5PQJGe4noCMxHto/n94cvPaALMPC3Rd0=
Subject key identifier: 9E:AC:21:2B:A4:94:0C:FD:BE:44:D3:97:6D:33:4C:59:31:98:57:42
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01856CC17D8DAAAEDAC5F74F0A0051E1AD05
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nqwhK6SUDP2-RNOXbTNMWTGYV0I.roa
Signing time: Sun 01 Jan 2023 09:54:57 +0000
ROA not before: Sun 01 Jan 2023 09:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49036
IP address blocks: 93.191.171.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:7d:8d:aa:ae:da:c5:f7:4f:0a:00:51:e1:ad:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 09:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eac212ba4940cfdbe44d3976d334c5931985742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:0b:46:28:de:36:9b:05:b2:44:15:c5:c0:
95:5d:17:95:8a:08:ec:d4:c1:bf:db:71:f1:a9:94:
b7:3d:35:bd:0f:6a:a6:2e:c5:ff:8a:c3:b6:2e:e0:
b9:3e:24:b4:9b:a9:8c:cb:74:c6:aa:26:d6:26:39:
a4:bf:e0:1c:e3:43:13:ff:aa:5c:1d:8f:84:2c:bf:
81:5b:c3:4e:0b:2e:40:ce:36:fe:86:3e:5f:82:77:
3b:49:37:91:5a:94:82:0e:84:23:16:3e:76:70:f7:
6a:5c:86:2a:bf:70:ed:08:6d:11:44:c4:59:f1:0e:
3d:35:c0:72:ae:f7:26:a3:82:29:74:42:7e:86:68:
d6:c4:da:00:97:2e:70:fd:d7:8d:5e:7d:fc:69:94:
a1:66:05:c2:d2:66:cb:3b:60:9e:75:4f:b6:db:03:
88:20:04:02:0a:1b:dd:cf:3d:d2:51:51:4c:f7:1c:
5d:4c:05:62:df:4e:ef:0e:29:f8:14:99:00:67:2e:
06:cd:1e:a5:0c:e4:fe:7c:0a:74:43:ac:58:b3:41:
bc:bf:b6:67:b7:49:39:f3:62:c6:e6:42:e3:e3:c3:
0a:18:ba:db:91:7c:dd:c5:0a:e2:ae:db:f9:47:e6:
d7:65:b3:bc:8e:dd:df:e7:ef:91:07:66:96:34:d0:
08:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:AC:21:2B:A4:94:0C:FD:BE:44:D3:97:6D:33:4C:59:31:98:57:42
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/nqwhK6SUDP2-RNOXbTNMWTGYV0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.171.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4f:5d:97:64:1e:6d:72:2c:36:f5:88:37:61:b8:a4:e7:30:
2a:b9:bd:67:62:14:a1:9e:79:ad:96:38:43:ba:fd:8f:4c:5e:
c5:f9:03:2d:83:49:68:04:a5:c0:17:4f:40:35:a8:00:83:53:
27:be:39:dd:29:64:96:1b:50:46:84:e9:7b:2e:22:5c:7f:cc:
16:61:ef:a1:c8:dc:73:08:5f:0c:62:8c:90:3f:67:57:78:e0:
32:d6:17:04:44:f3:bf:03:a8:43:d2:20:70:eb:33:74:c2:91:
e9:86:6b:52:3e:7f:7b:22:01:6a:af:a7:94:11:ca:f5:3d:ea:
44:8b:65:fa:bf:e3:b3:d6:99:2f:ed:7a:60:5c:39:d1:ea:dc:
7a:79:f4:d0:29:3c:67:6e:5d:72:53:7f:fd:4f:01:72:87:24:
06:af:e1:93:07:02:4c:1a:92:81:7a:b4:0a:a8:ce:ff:8d:30:
b1:70:fa:e9:c7:d8:ae:f2:9a:d6:c2:d6:4d:b0:cd:97:1a:9e:
be:51:8b:2f:f1:f1:c6:e6:e1:55:a0:b8:e0:13:d9:cc:43:3d:
73:1c:c0:fc:6f:50:59:75:bf:69:73:53:43:75:46:8f:4b:d3:
09:0f:cf:16:41:34:c2:92:9f:90:a0:7e:db:c5:6c:c9:a6:93:
1e:95:6f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:39 2024 by rpki-client on console-fra.rpki-client.org