Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/NBkaQmBTDoykFf-OMVgg5-JxtiU.roa
File: NBkaQmBTDoykFf-OMVgg5-JxtiU.roa (raw, json)
Hash identifier: C1bnPvlzd+zdICNhqtRo6dJAvzS+OMsYXojAeilZa8o=
Subject key identifier: 34:19:1A:42:60:53:0E:8C:A4:15:FF:8E:31:58:20:E7:E2:71:B6:25
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 018F0D4702F29E71DC8C1FD879D85604CB9A
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/NBkaQmBTDoykFf-OMVgg5-JxtiU.roa
Signing time: Tue 23 Apr 2024 23:25:08 +0000
ROA not before: Tue 23 Apr 2024 23:25:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200260
IP address blocks: 193.242.222.0/24 maxlen: 24
2a13:75c1:100::/40 maxlen: 48
2a13:75c1:300::/40 maxlen: 48
2a13:75c1:2000::/36 maxlen: 48
Validation: Failed, certificate revoked on Wed 24 Apr 2024 23:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0d:47:02:f2:9e:71:dc:8c:1f:d8:79:d8:56:04:cb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Apr 23 23:25:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34191a4260530e8ca415ff8e315820e7e271b625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:2d:3e:cb:44:06:ac:19:97:2b:cf:c6:22:
13:58:c6:5d:6e:13:73:20:a9:72:f5:9f:75:24:f0:
72:4e:34:1a:32:99:48:95:2d:28:9c:49:db:26:18:
12:ad:ec:ad:33:a2:82:5c:f1:f1:b8:76:a2:0d:03:
ff:89:0c:75:cf:96:16:19:32:a2:d4:ee:ce:3f:26:
54:a7:44:8a:e6:b1:af:49:3e:e2:0b:48:80:fe:d5:
c1:7f:6b:d2:b7:10:f9:dd:a0:4a:e0:55:6f:5f:6c:
36:22:08:34:3e:5d:fb:ea:56:2a:85:bb:0e:98:41:
1b:d9:b9:dd:84:37:e2:e0:09:b7:a2:d3:0a:2f:c8:
02:39:ca:9c:fe:55:2a:54:14:a8:aa:67:2a:6b:5f:
45:5d:b1:4b:06:db:73:4d:c5:8b:7d:8b:b5:6e:26:
dd:07:d1:b2:80:f5:94:4f:14:f4:b6:ae:0e:0d:9a:
e6:b3:3c:4a:5e:88:d7:29:31:d7:a7:c8:84:63:dd:
7b:37:5b:c5:6c:81:a8:0d:2c:58:64:1b:30:6a:52:
10:ac:76:80:5a:2b:c4:d4:5a:75:82:43:19:b0:fe:
d2:ca:2a:48:a3:9c:ed:6a:cf:0d:55:3b:09:d7:c1:
0d:cc:bf:a0:8b:5e:96:7b:11:46:39:86:87:0e:4b:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:19:1A:42:60:53:0E:8C:A4:15:FF:8E:31:58:20:E7:E2:71:B6:25
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/NBkaQmBTDoykFf-OMVgg5-JxtiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.222.0/24
IPv6:
2a13:75c1:100::/40
2a13:75c1:300::/40
2a13:75c1:2000::/36
Signature Algorithm: sha256WithRSAEncryption
74:9a:cb:ab:88:1a:8c:2c:58:5b:cb:19:d1:f8:a9:83:47:42:
5a:8d:43:e5:4e:94:f6:a9:8d:c3:59:ef:5d:c4:d8:15:47:71:
e2:ab:42:8d:4c:78:a9:b7:37:9d:e1:87:e2:c2:6d:24:dd:a2:
d2:75:9f:a9:27:0f:f6:f8:13:a9:39:85:58:15:a5:11:d3:f0:
3b:6b:b7:a9:a9:f1:52:c1:d0:9f:00:ff:33:d2:03:e3:a1:16:
7f:5b:d9:2b:15:ba:9a:0c:f3:10:fb:7a:8b:cd:e9:b3:e6:0a:
d4:a2:27:c1:a1:72:2f:d1:c1:d2:73:3a:3f:fa:52:15:28:35:
ac:72:3f:3f:49:c7:9b:66:63:34:c3:ed:3d:81:a8:c1:55:a5:
3d:b6:d1:fa:72:3a:ce:d8:b0:4e:10:9d:d7:58:95:94:4a:3f:
49:5c:78:0b:e4:61:60:86:99:f1:7f:80:73:bb:91:86:2c:e6:
e8:7c:56:62:32:9d:29:bb:be:2f:ac:2b:f0:2b:a7:ab:49:d8:
ba:5e:6b:ba:42:44:44:e3:8d:a7:d6:52:b8:62:bb:a7:d3:a5:
94:76:bc:69:27:8d:98:66:2b:1e:0e:3e:23:d6:20:71:85:a0:
2e:ff:0c:40:cf:16:5e:26:33:c6:53:b3:a6:25:ed:06:87:72:
14:56:20:87
-----BEGIN CERTIFICATE-----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Generated at Thu Apr 25 00:46:42 2024 by rpki-client on console-fra.rpki-client.org