Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NiqXDZjWbPTa4mCQtOTjdAx_ub4.roa
File: NiqXDZjWbPTa4mCQtOTjdAx_ub4.roa (raw, json)
Hash identifier: 5CrmrvS1Js3RyE06gV9NZjWOrh9LHmTKx2/EZOxoujo=
Subject key identifier: 36:2A:97:0D:98:D6:6C:F4:DA:E2:60:90:B4:E4:E3:74:0C:7F:B9:BE
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD51B393DFC869A00024B3AF87CD8A0
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NiqXDZjWbPTa4mCQtOTjdAx_ub4.roa
Signing time: Mon 02 Jan 2023 00:15:15 +0000
ROA not before: Mon 02 Jan 2023 00:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39758
IP address blocks: 86.104.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1b:39:3d:fc:86:9a:00:02:4b:3a:f8:7c:d8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=362a970d98d66cf4dae26090b4e4e3740c7fb9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7e:8c:74:ea:ce:1b:d3:3f:b1:96:ff:77:b4:
5b:c2:17:b6:53:fb:f4:45:c3:90:1c:93:55:9e:ad:
e3:f3:83:04:07:0a:09:15:6b:97:d9:6f:4e:11:c0:
89:de:89:e3:50:5f:93:24:a7:1f:d1:8b:ec:e4:d5:
f8:e6:d3:f7:e7:b4:b4:40:c9:ee:40:13:42:63:4c:
d8:3b:cc:56:5c:47:9a:04:d1:24:8a:fd:24:b1:18:
3a:60:81:59:18:e0:d6:d6:7f:12:33:f4:71:d5:95:
9a:5d:cd:c6:7b:a8:03:0d:89:ba:af:c1:db:9c:10:
e5:fa:54:bc:d4:16:37:11:62:36:d4:3a:43:2d:bd:
f9:f3:a8:5f:34:39:71:89:39:50:73:39:56:3b:c9:
af:68:58:5f:d8:f4:a1:6a:92:83:3a:74:96:4e:c3:
74:e3:8b:34:02:d8:c9:ee:81:10:59:de:5e:83:87:
90:ab:d1:48:97:f5:32:f2:62:8d:02:0a:d4:b7:5c:
e3:be:a2:12:22:89:3a:c1:c4:54:e5:ce:48:81:fc:
44:d9:ef:18:2e:25:1c:bb:05:bd:9e:3d:20:78:3e:
54:93:3a:f9:58:3e:f3:4a:8a:bb:6f:38:6d:67:0d:
85:2a:12:7a:09:a2:53:39:3c:a3:dd:98:17:4f:42:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:97:0D:98:D6:6C:F4:DA:E2:60:90:B4:E4:E3:74:0C:7F:B9:BE
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NiqXDZjWbPTa4mCQtOTjdAx_ub4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.18.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c2:ff:2d:89:1d:b5:74:52:63:d1:f3:f8:74:ef:a0:d7:34:
8e:3e:f9:8e:b0:42:39:68:f9:5b:7f:91:34:00:43:65:44:b4:
4b:be:32:fe:35:f2:ed:12:51:7d:f9:68:d4:ea:2b:57:a5:ca:
ef:29:89:99:8f:84:12:35:af:0b:c2:b4:72:05:f5:92:92:35:
01:9e:af:ae:26:bc:a9:7f:1f:b9:e1:9e:8e:69:12:0a:3b:8b:
c3:5d:61:89:cb:d1:a7:10:6f:3a:d1:e8:6c:21:51:63:59:0e:
11:c1:ab:cc:ae:ba:ba:a4:f7:e9:b1:50:84:ca:27:b5:d9:69:
8c:88:8d:3a:10:16:da:85:c3:71:69:e5:0b:9e:80:fb:db:55:
21:f4:6f:c3:5d:ad:50:7c:9f:83:ca:d7:c9:a2:90:d4:00:c2:
ba:36:be:36:2b:e5:62:78:f8:af:a6:23:f8:30:cb:f9:29:cc:
4a:e7:9e:e7:48:eb:a6:f5:49:11:62:9c:c4:20:3e:6d:9f:7c:
8d:56:d8:bf:c4:11:78:de:3d:76:45:21:65:e6:87:fa:62:18:
7a:33:0e:2b:ee:fc:41:03:87:cc:3b:82:d4:3c:ac:f9:c7:3a:
f4:f3:92:8f:e7:71:05:2c:90:89:55:5c:de:50:ff:2f:86:66:
a4:c3:15:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org