Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/NJUvFc_W-Y0LIabfs1nh5GsTUjA.roa
File: NJUvFc_W-Y0LIabfs1nh5GsTUjA.roa (raw, json)
Hash identifier: 76aunha5ywQeDEsZ/6LQzgfXYH+CQWZua2Bta8h/STc=
Subject key identifier: 34:95:2F:15:CF:D6:F9:8D:0B:21:A6:DF:B3:59:E1:E4:6B:13:52:30
Certificate issuer: /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Certificate serial: 018571F0EC1240DF92C4E6A0D3B9B6FCA151
Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/NJUvFc_W-Y0LIabfs1nh5GsTUjA.roa
Signing time: Mon 02 Jan 2023 10:04:52 +0000
ROA not before: Mon 02 Jan 2023 10:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42061
IP address blocks: 185.248.180.0/22 maxlen: 22
193.186.5.0/24 maxlen: 24
193.186.6.0/24 maxlen: 24
2a0d:ee80::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:f0:ec:12:40:df:92:c4:e6:a0:d3:b9:b6:fc:a1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed
Validity
Not Before: Jan 2 10:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34952f15cfd6f98d0b21a6dfb359e1e46b135230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c9:55:66:98:e4:df:5d:9a:17:16:ec:35:9c:
b3:a0:d2:4f:14:8a:d4:02:3a:4e:7c:82:ab:26:ae:
68:ef:e0:7b:14:be:3a:4f:ae:8d:31:38:f6:a1:a4:
09:04:a3:bf:e4:68:37:1e:0a:f1:89:1a:6b:1c:bf:
1b:7f:70:db:44:2f:7b:9e:c3:b1:57:50:15:36:e7:
0a:58:ae:1a:71:3a:4e:e6:cf:de:ab:23:59:e3:f2:
ad:ba:07:09:ba:e6:2a:a2:1e:c3:bf:d2:c5:ed:ff:
32:29:05:cd:86:a6:c5:79:fd:a5:c0:1c:71:76:b6:
03:e2:a0:df:e2:f2:19:b0:da:d6:72:80:9d:2c:b5:
bc:a4:ed:eb:10:27:f7:96:c8:28:56:c2:41:bb:d1:
f5:32:e1:96:3c:e0:1b:82:96:71:f9:61:d2:a1:4f:
3a:9e:6b:4d:95:f3:d2:f8:18:ae:e4:97:2a:35:d6:
43:e8:b4:12:f3:44:6e:99:6b:71:24:4b:4d:3b:ff:
e1:95:f2:f7:b5:36:50:f6:0e:cd:58:8a:08:6d:33:
d1:99:ee:50:d3:c1:56:10:08:db:67:4c:32:d4:a1:
09:4e:99:7a:54:83:09:9f:04:e5:46:6e:1a:55:73:
aa:56:95:88:ed:9e:61:47:1e:fb:02:2a:1a:58:d6:
f5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:95:2F:15:CF:D6:F9:8D:0B:21:A6:DF:B3:59:E1:E4:6B:13:52:30
X509v3 Authority Key Identifier:
keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/NJUvFc_W-Y0LIabfs1nh5GsTUjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.180.0/22
193.186.5.0-193.186.6.255
IPv6:
2a0d:ee80::/32
Signature Algorithm: sha256WithRSAEncryption
54:ec:8e:08:47:16:94:b8:a3:5d:6d:ce:3b:eb:10:99:1f:d2:
a1:35:33:51:e5:b5:c7:67:4e:b4:fb:79:3a:cb:17:4a:e9:91:
7b:26:30:bb:11:73:c0:ed:8d:fb:2e:7d:b4:24:53:bf:0a:e9:
07:88:12:13:42:03:43:ea:a2:60:bd:46:0f:61:03:a5:9a:b6:
a4:30:ef:98:e3:57:ed:e8:2c:e1:7c:49:a6:44:04:69:50:16:
7e:e8:1b:e3:ce:26:39:b9:78:25:e2:a3:71:a0:f7:78:01:c1:
bf:72:91:45:ab:c8:0a:32:30:59:c5:70:08:fa:60:45:e0:89:
4a:73:d5:75:22:e7:7a:e2:c3:c7:34:a5:b4:b4:6d:19:cf:f3:
ff:69:4e:fc:1d:14:c1:cf:c5:2c:d4:c1:41:4f:af:ab:d0:6b:
4c:9a:60:89:e0:74:b0:f5:47:aa:d8:31:2e:8a:84:e0:35:f6:
dd:2c:e5:fe:04:6c:0d:62:11:4a:00:ac:7f:5a:d6:b5:5c:6b:
fe:da:32:af:66:98:fe:d4:ba:94:b3:a8:37:f6:c7:f5:a5:97:
6c:c1:c6:ee:b2:09:9d:63:5a:ad:00:8f:4f:af:da:e9:28:e8:
65:5c:f1:20:2e:ca:cd:58:1a:dc:fb:28:d3:01:76:e4:8c:b7:
4d:da:99:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:05 2024 by rpki-client on console-fra.rpki-client.org