Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/h1NSLNN__1MBzQqeiRKvKEXcc2M.roa
File: h1NSLNN__1MBzQqeiRKvKEXcc2M.roa (raw, json)
Hash identifier: OhXnhd8hXin7KWEPGR2RBW7LLr0hlfTLH0FKMPiZWLA=
Subject key identifier: 87:53:52:2C:D3:7F:FF:53:01:CD:0A:9E:89:12:AF:28:45:DC:73:63
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 018C436A63732858AA17A73C15310D1C6502
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/h1NSLNN__1MBzQqeiRKvKEXcc2M.roa
Signing time: Thu 07 Dec 2023 08:34:54 +0000
ROA not before: Thu 07 Dec 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41969
IP address blocks: 193.104.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:6a:63:73:28:58:aa:17:a7:3c:15:31:0d:1c:65:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Dec 7 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8753522cd37fff5301cd0a9e8912af2845dc7363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:83:1b:e2:c9:d8:02:9b:ff:01:33:74:49:
61:9a:aa:52:48:69:b7:d3:d1:66:77:86:31:96:9a:
a3:a2:b5:40:ae:4e:3f:09:e4:fc:b5:57:98:00:50:
a4:47:69:bc:c1:ff:87:8b:1a:c6:6c:b5:87:a1:15:
c1:be:11:44:c7:ac:aa:23:f2:64:b6:8e:16:e0:a3:
ee:56:8e:4a:d6:db:5e:71:f9:00:e0:9d:f5:cb:c8:
36:ad:c2:5c:65:f3:aa:86:d9:00:4b:6a:dc:82:7b:
66:29:93:8a:95:d6:6e:05:da:8e:50:07:56:e3:73:
23:47:b3:93:16:45:d0:be:ee:8a:45:25:75:a7:75:
c2:07:fc:5d:32:7f:d4:74:22:99:b7:3a:aa:c5:6e:
08:5a:e4:76:78:07:c2:2d:10:9b:95:c1:c6:25:3b:
5d:5e:5d:19:0c:79:8c:ac:9f:0e:07:40:e9:94:26:
74:e2:d5:23:87:ea:24:74:4d:42:6d:e5:25:a9:ef:
67:2a:52:e3:d5:e1:be:62:95:00:6e:09:97:c6:8e:
64:dd:77:1c:80:7f:d1:c0:44:32:48:be:33:de:86:
c3:a1:4a:ae:8f:13:f2:ad:7a:cf:56:38:cc:2c:82:
9a:b3:43:25:be:06:c6:33:31:2b:4a:08:87:52:72:
07:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:53:52:2C:D3:7F:FF:53:01:CD:0A:9E:89:12:AF:28:45:DC:73:63
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/h1NSLNN__1MBzQqeiRKvKEXcc2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.174.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6e:bc:14:11:88:0b:53:c1:e5:d6:c7:29:a7:60:5f:b1:b6:
88:02:32:3f:c5:ec:9d:4b:6d:29:a8:db:36:80:49:62:cc:a2:
3c:24:d8:2a:82:d5:07:98:e6:e2:00:02:0d:15:74:02:f3:a4:
bb:9c:74:4c:59:d7:84:29:46:97:f0:5a:a1:ba:7a:e0:c4:92:
e0:a9:93:39:8c:85:18:2a:62:31:0b:a3:e5:4a:43:92:50:35:
6b:68:1b:ca:4d:af:2b:82:2b:f0:47:43:ae:ec:55:b6:94:68:
32:06:b3:4e:f5:c5:2c:73:9c:59:ee:fd:c9:93:c6:87:ca:a4:
da:83:3b:2f:37:f1:e3:8d:ec:cc:a4:76:a6:f1:54:3e:e6:43:
17:90:35:73:9c:49:27:aa:23:bd:0d:a4:95:cd:08:94:a0:60:
e3:7b:62:7c:84:5a:63:ae:47:e9:56:4a:38:28:3d:50:ec:ca:
42:f2:4b:5c:d6:e7:1c:d3:32:e7:26:6b:ef:38:77:1b:78:5e:
9f:42:6f:92:26:93:71:2d:e0:40:4f:4f:4e:c0:d4:cd:10:b4:
8d:5d:4f:f8:b0:a3:b7:96:47:e6:c8:2f:49:36:99:37:43:c3:
64:4d:e5:f3:3e:0c:12:cb:b4:3a:d6:fb:97:b9:10:98:49:45:
9b:0f:03:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:17 2024 by rpki-client on console-fra.rpki-client.org