Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/njvySuPIQTkD5Zdo4u5KXNVs16A.roa
File: njvySuPIQTkD5Zdo4u5KXNVs16A.roa (raw, json)
Hash identifier: QdkBZv2kEw5Faz+cZ36UQ1YKesX4vxgHqUzL13IGKyE=
Subject key identifier: 9E:3B:F2:4A:E3:C8:41:39:03:E5:97:68:E2:EE:4A:5C:D5:6C:D7:A0
Certificate issuer: /CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Certificate serial: 018C1EB13E797CCEEECBCC36BE8FA711BEF6
Authority key identifier: DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/njvySuPIQTkD5Zdo4u5KXNVs16A.roa
Signing time: Thu 30 Nov 2023 05:26:21 +0000
ROA not before: Thu 30 Nov 2023 05:26:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200435
IP address blocks: 185.248.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1e:b1:3e:79:7c:ce:ee:cb:cc:36:be:8f:a7:11:be:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc41411e93e25d5ec65099569b1b5c5fadc1ae3d
Validity
Not Before: Nov 30 05:26:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e3bf24ae3c8413903e59768e2ee4a5cd56cd7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:12:8a:11:c3:49:df:3c:99:b8:d1:e6:97:eb:
97:6d:ba:a1:9f:20:6a:8c:56:aa:59:30:e3:53:79:
27:5b:6c:9e:98:e9:5e:19:a8:fc:5d:59:f6:2d:d9:
13:df:18:e0:90:56:9d:a8:98:59:73:c4:51:a5:90:
75:69:99:0c:25:48:60:06:b2:02:6e:19:e5:11:e9:
a6:55:14:9c:33:06:19:55:ee:1e:36:9f:95:de:78:
73:46:a4:aa:76:dd:c1:d0:80:e1:39:78:f6:36:a6:
6c:16:e0:e8:ca:0e:53:d8:7c:77:31:75:b6:5f:db:
fc:8d:4e:89:f6:dd:5e:13:7d:49:28:41:85:d2:8b:
09:0b:0f:2e:34:d4:66:ee:47:92:35:33:01:21:97:
48:fb:0f:89:1b:04:a5:5e:ad:92:b1:e6:46:3c:1c:
f9:5c:ae:2d:04:9d:2f:6c:a9:95:dd:9e:3d:bd:5c:
5d:ea:8e:ef:4a:07:a3:31:31:45:cd:30:72:32:60:
a1:67:12:15:e5:ff:06:9b:d5:b0:68:1c:cd:7a:0a:
2d:cf:5a:be:d2:91:16:1d:6c:56:7e:23:f6:6d:e3:
db:e5:ce:37:c9:5a:51:7c:0c:30:b3:99:63:7d:51:
e6:55:6f:f4:1d:c0:03:92:83:9e:9a:42:49:2a:de:
c4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3B:F2:4A:E3:C8:41:39:03:E5:97:68:E2:EE:4A:5C:D5:6C:D7:A0
X509v3 Authority Key Identifier:
keyid:DC:41:41:1E:93:E2:5D:5E:C6:50:99:56:9B:1B:5C:5F:AD:C1:AE:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EFBHpPiXV7GUJlWmxtcX63Brj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/njvySuPIQTkD5Zdo4u5KXNVs16A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3d4731-8cf3-4327-ae6a-51387d160ba9/1/3EFBHpPiXV7GUJlWmxtcX63Brj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.50.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7f:38:ca:04:be:3c:17:23:9c:10:5a:6a:32:0b:74:eb:b6:
84:08:73:0f:9a:ce:d3:f0:ae:29:51:fe:59:fb:71:24:e4:24:
26:bd:31:1a:b1:f4:98:03:79:ad:18:e6:e1:73:37:54:b2:33:
59:00:fd:e3:3d:b7:fe:b3:d7:31:1c:71:f4:21:80:0d:c6:51:
4c:fd:23:6f:bd:f3:e3:98:e2:6e:00:f9:dc:e7:5e:63:a1:be:
03:a0:e2:31:10:75:1b:24:f5:e7:ab:ff:30:e4:ba:53:c9:25:
34:4d:f3:d5:66:31:b2:79:b7:14:b6:45:e8:fa:6c:82:07:c3:
16:c2:4a:93:c4:60:3e:c1:66:d6:72:8e:96:18:40:c4:05:9e:
17:21:87:ef:3b:aa:3a:c3:b1:58:d4:c1:39:a8:b0:9f:5c:f8:
17:0f:3f:9f:8f:42:1a:4e:3a:2c:80:ae:1a:14:77:64:55:00:
ee:94:e1:09:02:98:15:22:4a:a1:67:54:89:fa:9e:9e:78:c7:
c0:b1:66:86:81:12:ab:c4:0b:1b:00:d3:0d:03:be:55:e4:73:
f0:76:05:33:bf:f3:7f:38:6c:0c:4d:3f:4b:93:20:6c:5d:73:
92:41:f6:42:14:a4:0a:cb:ee:8e:68:48:af:51:db:72:e2:5d:
34:92:7e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:01 2024 by rpki-client on console-fra.rpki-client.org