Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/NErj4iFanq6TUpWuqs_IMzn1jc8.roa
File: NErj4iFanq6TUpWuqs_IMzn1jc8.roa (raw, json)
Hash identifier: PVt/LUkStZJ4M398Y2gf9M7zdAVW9YEkiOzVX0kAQM0=
Subject key identifier: 34:4A:E3:E2:21:5A:9E:AE:93:52:95:AE:AA:CF:C8:33:39:F5:8D:CF
Certificate issuer: /CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Certificate serial: 0185710BFD60685DF2D68B58246E106AFC3C
Authority key identifier: B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/NErj4iFanq6TUpWuqs_IMzn1jc8.roa
Signing time: Mon 02 Jan 2023 05:54:49 +0000
ROA not before: Mon 02 Jan 2023 05:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30816
IP address blocks: 193.27.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:fd:60:68:5d:f2:d6:8b:58:24:6e:10:6a:fc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b17b44904c7694a5408a0d2972c39ff0b1b03ea5
Validity
Not Before: Jan 2 05:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=344ae3e2215a9eae935295aeaacfc83339f58dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:86:b7:3e:ca:b9:92:9d:ba:24:a4:15:e8:
7e:f8:d9:8b:ba:ee:54:9f:a0:0b:1c:e1:71:42:4f:
7b:4e:cb:95:66:17:60:d9:d6:d2:67:76:a6:42:04:
8a:e2:f2:11:d5:93:dc:74:cc:67:83:17:80:b7:49:
ae:09:3b:e9:bc:c3:6c:31:98:a0:bf:0e:64:79:37:
f4:e2:3e:c2:79:a7:d9:94:30:96:09:3a:40:30:c2:
85:87:0c:22:63:9d:ff:83:62:44:e2:22:8a:60:7e:
47:fd:d3:0f:95:5e:26:b2:18:7b:8f:3d:63:31:98:
e3:a1:75:c8:8c:d5:9c:04:b3:51:f9:5d:89:a5:23:
87:c8:96:e0:d0:61:05:a4:2c:d2:6f:aa:69:44:68:
f5:44:10:ab:52:5f:f8:3d:d4:7d:d7:99:7c:40:91:
ea:b0:6f:2a:45:dd:5f:ac:c3:a1:b9:c5:a3:21:b1:
47:78:b9:20:89:a0:36:70:8e:70:43:e2:e6:24:88:
1e:37:88:5b:13:2f:9d:30:fd:ca:32:b1:a0:57:a6:
01:0e:27:dc:56:d1:f9:7c:2d:97:de:2e:68:c8:7d:
25:57:ed:54:8d:6e:52:de:77:36:b1:5f:0f:ec:64:
7c:30:c9:3d:e0:33:cd:06:5d:79:c1:97:de:13:89:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4A:E3:E2:21:5A:9E:AE:93:52:95:AE:AA:CF:C8:33:39:F5:8D:CF
X509v3 Authority Key Identifier:
keyid:B1:7B:44:90:4C:76:94:A5:40:8A:0D:29:72:C3:9F:F0:B1:B0:3E:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sXtEkEx2lKVAig0pcsOf8LGwPqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/NErj4iFanq6TUpWuqs_IMzn1jc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/918245-7b50-4952-a3a7-a45916955e6f/1/sXtEkEx2lKVAig0pcsOf8LGwPqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.27.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c0:ca:2b:1d:ce:76:91:91:86:0d:03:54:42:fc:42:6f:a8:
d7:6e:42:14:fe:45:61:83:1c:88:fc:b3:6e:50:08:ba:cb:0f:
3a:02:2a:80:26:fe:e7:7c:64:06:d0:60:9a:c1:5f:ca:40:44:
54:37:54:b3:70:e2:c2:4a:d6:e0:c1:74:e3:96:a6:30:34:ef:
87:5c:2c:ec:8f:76:00:11:4e:9d:cb:fd:91:02:bf:a3:09:b3:
15:0e:cc:38:62:59:4f:d6:54:fb:36:04:20:17:28:f8:c7:da:
f4:cb:f0:16:c4:4e:40:07:c2:11:74:b1:b2:80:0a:ef:e3:61:
aa:d4:88:12:5c:7e:2d:8d:6c:ff:3f:3b:58:c6:79:88:87:f4:
d7:d0:c5:21:b2:7b:91:c8:dd:89:9e:20:9e:69:cf:de:e4:b6:
d2:a2:68:37:53:0d:5c:7f:18:cd:61:a7:e8:d6:25:11:f5:2b:
da:44:a8:58:e9:b4:3b:ef:51:37:bf:f8:ac:40:bc:db:9b:f7:
54:c0:83:a2:41:32:23:33:2d:20:fe:55:c9:98:e7:7c:63:fb:
9b:e3:b4:98:e8:ea:fb:a5:91:37:16:5d:bb:f3:14:88:0d:91:
14:b8:21:60:fb:d0:e8:c8:ea:1b:ae:39:3c:48:c1:5e:44:0c:
e5:18:0c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:57 2024 by rpki-client on console-fra.rpki-client.org