Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Npn8aTc5vLGnSE4B8r8RqCy9t9M.roa
File: Npn8aTc5vLGnSE4B8r8RqCy9t9M.roa (raw, json)
Hash identifier: lCQ1/FE8M10nYXuD5Tqiyv9yW7pVwRXVUzFPm+0vuxA=
Subject key identifier: 36:99:FC:69:37:39:BC:B1:A7:48:4E:01:F2:BF:11:A8:2C:BD:B7:D3
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018AF8A2F55A167C77302A2120818BAEA9AF
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Npn8aTc5vLGnSE4B8r8RqCy9t9M.roa
Signing time: Wed 04 Oct 2023 03:02:23 +0000
ROA not before: Wed 04 Oct 2023 03:02:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39200
IP address blocks: 193.189.123.0/24 maxlen: 24
2001:678:b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:a2:f5:5a:16:7c:77:30:2a:21:20:81:8b:ae:a9:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Oct 4 03:02:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3699fc693739bcb1a7484e01f2bf11a82cbdb7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:6f:ee:fc:da:f2:37:3a:85:c7:b3:23:b1:
ee:d7:8c:87:75:28:e9:c5:0d:4b:2d:7a:cd:33:5b:
8b:55:2b:17:d6:33:54:c3:6d:66:2a:7d:be:5f:95:
3e:1b:e1:68:8d:e4:a9:ac:15:2c:97:15:b2:a1:c9:
3d:67:d7:9b:11:39:eb:d4:2b:ff:ea:32:14:70:d5:
7c:b7:95:d8:0e:c3:98:7d:db:7d:2d:89:1e:98:a6:
80:4b:0e:bd:a4:ef:b8:4d:29:19:de:6d:d4:0b:b4:
0d:19:9d:1f:33:a0:ee:fe:93:02:fd:b8:5c:5e:7b:
68:67:2b:37:45:80:29:dc:61:95:61:78:b5:f0:79:
55:4f:f6:08:e7:9c:25:35:7f:9a:01:c2:33:2e:0b:
ce:73:af:88:eb:cb:12:df:2d:97:47:75:36:7d:5d:
40:a6:13:69:f3:24:a0:be:4b:26:04:ad:98:e3:9a:
6d:ac:11:f2:d6:f5:64:b7:b8:40:98:35:e5:5e:50:
73:7d:5c:4a:10:09:75:6e:29:2e:cc:a5:74:08:1d:
e5:3c:0f:e5:ca:10:d3:a8:3e:92:be:41:ab:ed:c8:
3a:80:fe:c1:a0:18:4e:05:8a:b5:30:85:39:76:7d:
4a:1a:db:19:0b:16:3f:f7:35:15:91:03:7f:12:43:
46:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:99:FC:69:37:39:BC:B1:A7:48:4E:01:F2:BF:11:A8:2C:BD:B7:D3
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Npn8aTc5vLGnSE4B8r8RqCy9t9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.123.0/24
IPv6:
2001:678:b0::/48
Signature Algorithm: sha256WithRSAEncryption
ad:4d:7c:ad:ba:1f:8a:fc:3c:3e:b5:22:ea:92:c6:7b:b7:e2:
db:ab:17:17:e4:ce:82:95:cc:43:4d:9b:86:7a:3c:7e:1b:61:
1d:08:f2:35:3e:0e:b9:e5:7b:34:41:92:0c:98:83:28:85:e2:
74:5b:6a:f7:e5:37:7c:ae:22:6d:ca:3c:f3:6c:75:64:d4:6b:
fe:23:61:a0:fc:91:92:a5:b4:e0:31:31:89:6a:da:73:5a:5a:
5b:c6:34:65:f0:8b:73:49:22:ee:ab:46:8f:a3:38:5f:6c:93:
e7:2f:73:9f:dc:29:95:bd:9f:91:8b:14:d7:6e:6c:a4:3f:1b:
fa:45:2e:34:1c:2d:d0:0c:ef:03:ad:a1:bd:8b:90:87:c6:16:
58:8b:65:cd:02:f8:84:df:ea:69:ae:a3:be:eb:a2:98:1d:0c:
5f:a5:96:6e:25:af:d1:f2:6a:c9:69:e3:49:a0:4e:fa:20:8a:
42:ae:5d:d4:e8:81:a0:f3:5e:ac:7f:5d:a5:6c:ae:5d:bd:2d:
3a:2f:ee:b3:1b:2f:dc:50:bf:88:46:d7:58:32:b4:ba:3a:e0:
2c:6f:06:94:1c:7b:eb:c3:8e:c7:a3:85:69:0d:ff:1b:fb:44:
2e:df:3a:3d:b8:4f:bb:dc:c1:d0:93:db:e4:ff:6d:30:9c:33:
3a:79:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:22 2024 by rpki-client on console-fra.rpki-client.org