Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/nbNCOvPa3GlCpR-CwjgKLP8QBww.roa
File: nbNCOvPa3GlCpR-CwjgKLP8QBww.roa (raw, json)
Hash identifier: hwSdCy4rRFJ7eSJdntN0ue0ElpGPGGMIZPar8hYDDps=
Subject key identifier: 9D:B3:42:3A:F3:DA:DC:69:42:A5:1F:82:C2:38:0A:2C:FF:10:07:0C
Certificate issuer: /CN=daddd1b636fe3df1df3d811f644583312a651337
Certificate serial: 018571155345478B3A486E9D2A9E5A8212A5
Authority key identifier: DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/nbNCOvPa3GlCpR-CwjgKLP8QBww.roa
Signing time: Mon 02 Jan 2023 06:05:01 +0000
ROA not before: Mon 02 Jan 2023 06:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49010
IP address blocks: 193.162.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:53:45:47:8b:3a:48:6e:9d:2a:9e:5a:82:12:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daddd1b636fe3df1df3d811f644583312a651337
Validity
Not Before: Jan 2 06:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db3423af3dadc6942a51f82c2380a2cff10070c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:60:45:57:a3:e8:fd:b7:c3:12:3b:ff:9a:
55:95:9a:36:ab:52:09:62:b9:e7:3c:ff:82:de:21:
70:ce:76:14:5e:92:82:ba:df:b5:b4:11:f5:c1:50:
6a:35:24:7f:1e:81:88:d0:21:36:63:f0:3c:ef:c3:
69:cf:bb:a8:11:aa:f1:1c:d4:8c:7f:27:e9:68:b7:
79:e8:e1:ae:8a:0b:7c:4d:25:6e:69:16:b6:18:48:
5c:4a:e1:cf:fc:93:49:d5:4a:2b:a9:02:64:36:88:
e8:cb:7d:55:31:1b:41:90:10:3e:36:93:c3:fe:81:
e7:fc:f5:ad:6b:c0:b5:e9:7d:91:da:91:31:8b:5e:
2c:49:c5:7e:a5:c0:2d:19:c4:e9:5c:f0:ee:7e:62:
7d:ca:9e:b0:1b:ce:94:67:17:31:ab:00:41:ef:98:
f1:a3:8c:dd:2e:53:32:ac:66:35:bf:bd:9b:03:24:
d1:b6:8a:27:0c:5b:98:7c:67:c4:cd:99:6e:06:1b:
25:ce:e5:48:33:48:3a:96:df:0b:ec:78:ba:75:05:
29:51:d1:d7:93:6c:1a:37:9b:8f:23:e8:ac:5e:9a:
58:ae:d5:56:9e:40:08:5c:07:86:c5:0a:83:2d:ab:
8c:a2:e2:9f:a9:41:85:5d:43:aa:00:f5:7a:65:c5:
57:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B3:42:3A:F3:DA:DC:69:42:A5:1F:82:C2:38:0A:2C:FF:10:07:0C
X509v3 Authority Key Identifier:
keyid:DA:DD:D1:B6:36:FE:3D:F1:DF:3D:81:1F:64:45:83:31:2A:65:13:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2t3Rtjb-PfHfPYEfZEWDMSplEzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/nbNCOvPa3GlCpR-CwjgKLP8QBww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4643d7-37d7-4b3c-a1a5-632ce67c085a/1/2t3Rtjb-PfHfPYEfZEWDMSplEzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:9c:01:10:b3:2c:75:d5:ef:f8:f6:f2:ef:4a:cf:e2:14:65:
54:4c:79:07:31:7b:2b:67:96:1a:93:f5:0a:e9:c3:5d:2a:7e:
0e:91:35:a3:9a:02:84:19:82:47:cd:7a:c9:f1:75:95:d2:e0:
64:e5:8f:26:bf:e9:98:dd:8f:4f:88:d9:34:7e:dd:ed:ad:a7:
cb:86:0d:77:30:20:4c:95:ad:b3:38:02:ad:03:79:a5:ba:29:
9a:e6:f7:14:17:9b:7d:45:ec:ae:ed:2a:c7:30:29:51:ed:e4:
63:a3:a7:dc:1e:c1:03:a5:fa:31:bd:96:b5:7b:3c:d7:c0:2d:
42:31:c5:22:f2:85:93:1e:a1:c2:79:8f:c6:f2:42:ed:e9:90:
2f:44:ee:fd:f3:cf:a8:f5:c1:e4:de:ea:a2:4a:35:1a:f7:d0:
d9:a5:48:a7:0f:c5:6d:f4:e2:61:a7:ca:cc:9b:5f:a6:b3:aa:
be:9c:18:2f:06:0a:17:69:31:79:05:c5:8f:31:b9:00:69:b9:
1a:54:77:74:27:72:56:2d:b9:ac:f3:52:39:1e:3a:13:33:15:
59:5e:ad:89:8d:e8:1e:03:a7:8c:b2:e1:2b:64:39:95:b8:d3:
35:09:96:0d:3a:42:05:1e:f8:fc:b8:25:e2:e0:00:53:ba:bc:
9a:f5:3a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:16 2024 by rpki-client on console-ams.rpki-client.org