Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/c9nGvn27_NNAKcUiZLh74OJa2S4.roa
File: c9nGvn27_NNAKcUiZLh74OJa2S4.roa (raw, json)
Hash identifier: 8uIk0EMqSdU8FB4p6HIccnQYkYlLW8fHqTCmcf0l4m8=
Subject key identifier: 73:D9:C6:BE:7D:BB:FC:D3:40:29:C5:22:64:B8:7B:E0:E2:5A:D9:2E
Certificate issuer: /CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Certificate serial: 01856FD51F452321DF991600D9BC0A7A0A5C
Authority key identifier: E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/c9nGvn27_NNAKcUiZLh74OJa2S4.roa
Signing time: Mon 02 Jan 2023 00:15:16 +0000
ROA not before: Mon 02 Jan 2023 00:15:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31354
IP address blocks: 195.234.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1f:45:23:21:df:99:16:00:d9:bc:0a:7a:0a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e887e5fcbcbf1ad03268dac9ee5d292025368090
Validity
Not Before: Jan 2 00:15:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73d9c6be7dbbfcd34029c52264b87be0e25ad92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b8:e8:a3:7f:d0:99:a3:27:49:fa:78:88:d3:
84:f5:18:e7:51:15:75:76:86:a3:a5:39:b7:46:cf:
56:7d:35:1a:66:dc:11:aa:c1:65:ff:7e:92:1a:70:
8b:cb:1a:16:b1:ba:b3:e2:d0:c1:75:bc:46:87:5f:
fd:a6:9b:4e:c4:d3:b7:37:8b:50:0b:da:e7:bb:8c:
df:bf:a8:a3:ee:cc:37:4f:e7:c6:9f:13:ac:70:36:
cc:70:69:2b:3d:cc:40:e6:27:c8:02:14:19:f2:20:
e5:2e:8f:52:da:06:5f:6b:3f:be:23:c0:2b:9d:e9:
c0:23:fa:68:aa:af:20:01:22:d6:8c:9e:5f:00:d8:
91:e3:2d:22:0c:66:e8:d3:b0:55:74:f7:20:5c:d6:
03:42:86:c9:e8:b2:94:66:90:b4:3a:3c:cf:27:56:
3e:76:44:90:77:f7:09:22:02:96:aa:38:22:d7:88:
0e:64:42:c6:a2:fb:09:2b:6d:fc:ba:42:b2:da:ee:
39:98:30:d1:8e:73:60:7b:55:73:e3:0d:ba:fd:52:
e4:68:fb:c4:e4:b8:e6:52:c3:07:60:19:7a:70:09:
f2:b4:08:1e:1f:ef:40:76:56:50:e5:a0:9b:8c:36:
85:9e:54:d8:f4:f9:9b:14:5e:1c:bc:56:92:ad:04:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:C6:BE:7D:BB:FC:D3:40:29:C5:22:64:B8:7B:E0:E2:5A:D9:2E
X509v3 Authority Key Identifier:
keyid:E8:87:E5:FC:BC:BF:1A:D0:32:68:DA:C9:EE:5D:29:20:25:36:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/c9nGvn27_NNAKcUiZLh74OJa2S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c1fb46-8b47-4f91-8b9a-d7faa7e7e84d/1/6Ifl_Ly_GtAyaNrJ7l0pICU2gJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.182.0/24
Signature Algorithm: sha256WithRSAEncryption
63:cf:99:d9:b3:d8:4b:fb:89:91:ac:6d:5c:7c:bf:f4:61:a3:
96:2a:d6:63:74:66:ff:ff:9c:45:d8:fe:4c:4d:37:87:80:b5:
6a:fa:71:3a:7c:08:28:a9:91:2f:64:46:d6:0a:c3:5e:2f:de:
a1:65:6b:33:d0:d1:3a:b3:db:8c:66:1b:8c:c1:bc:3b:6e:f7:
bd:a6:c9:2f:3c:ef:e2:9b:6a:06:ba:ae:bd:4d:99:6a:33:11:
16:da:c6:c4:98:9b:5f:a8:43:d0:d5:d7:0b:a6:95:93:7f:d1:
ee:27:6b:19:96:c6:dd:99:b2:9a:4e:39:de:c5:6d:c2:52:1a:
a1:e5:ba:d5:54:de:05:97:04:df:76:e7:3c:5a:95:c0:a2:b5:
57:11:40:ce:a8:77:34:9f:21:70:c0:19:15:5e:59:78:2e:30:
4a:aa:72:20:52:a5:bc:87:8c:95:18:c8:6c:9d:3d:9f:9d:20:
22:3f:db:1b:0b:63:58:02:e1:11:7d:24:d3:0d:2a:c0:e8:81:
15:85:65:b8:09:d8:5a:f8:78:ce:97:51:01:43:dc:0d:d1:ee:
be:32:50:53:ba:b9:ce:12:6d:fe:ef:38:d6:35:81:79:d8:2a:
ab:ab:67:ab:7f:b6:e2:14:c2:11:84:16:3e:8c:b1:bd:c9:53:
b8:0b:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:01 2024 by rpki-client on console-fra.rpki-client.org