Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/nrn33BP_8BgV-sKgpQSHZBqpdgY.roa
File: nrn33BP_8BgV-sKgpQSHZBqpdgY.roa (raw, json)
Hash identifier: ARMIGqc8csHrjdwIG5d5E4f/H+wQtcIKTSfLpaX1AdQ=
Subject key identifier: 9E:B9:F7:DC:13:FF:F0:18:15:FA:C2:A0:A5:04:87:64:1A:A9:76:06
Certificate issuer: /CN=b1de96d535d5954a16f67d89201ff8062a151ab5
Certificate serial: 018570673F8A4E9FF2DF98634EC3C45BB3F5
Authority key identifier: B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sd6W1TXVlUoW9n2JIB_4BioVGrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/nrn33BP_8BgV-sKgpQSHZBqpdgY.roa
Signing time: Mon 02 Jan 2023 02:54:52 +0000
ROA not before: Mon 02 Jan 2023 02:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 193.9.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:3f:8a:4e:9f:f2:df:98:63:4e:c3:c4:5b:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1de96d535d5954a16f67d89201ff8062a151ab5
Validity
Not Before: Jan 2 02:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eb9f7dc13fff01815fac2a0a50487641aa97606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:84:5f:b8:19:1f:24:ad:16:33:7a:a1:37:
82:2b:f8:f5:10:1c:c1:fa:6f:37:19:de:e0:ee:07:
19:78:e3:f3:4a:80:ca:7c:f2:15:19:01:92:ff:c5:
1d:d6:99:b2:73:19:03:dc:e6:28:b8:9b:0b:17:4c:
db:de:f3:11:b3:8d:03:44:b9:35:98:15:ad:87:03:
fa:90:72:6a:7b:73:e3:0f:18:55:6c:19:1d:4b:00:
ab:8c:52:90:d1:ad:76:07:3c:f0:8d:36:50:78:2a:
09:b3:e9:61:1d:f4:ac:c5:66:10:92:2d:da:2f:15:
a6:90:e6:dd:97:3f:d2:8d:eb:ef:50:a8:6a:46:96:
df:87:dc:e9:e4:4d:e8:de:2c:da:ed:4e:89:39:fb:
4f:56:4c:dd:6c:15:49:cf:75:f0:b1:4b:38:a4:1d:
27:69:bf:b7:c3:85:fd:12:48:9e:cd:9c:67:3b:e4:
83:82:45:1d:7a:1a:65:d3:3b:f1:11:fc:4a:5b:00:
b5:69:48:0b:4b:5e:b1:7a:d6:f7:ee:e0:80:fe:5c:
32:45:d6:ed:1f:38:df:ff:c9:2a:08:ac:a9:54:0b:
f3:d7:ed:34:0c:b1:af:6c:c3:0e:5a:f6:c1:67:de:
78:22:76:cb:da:9c:5a:b5:cd:6c:16:dc:72:3c:3c:
3c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B9:F7:DC:13:FF:F0:18:15:FA:C2:A0:A5:04:87:64:1A:A9:76:06
X509v3 Authority Key Identifier:
keyid:B1:DE:96:D5:35:D5:95:4A:16:F6:7D:89:20:1F:F8:06:2A:15:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sd6W1TXVlUoW9n2JIB_4BioVGrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/nrn33BP_8BgV-sKgpQSHZBqpdgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/28dea6-2062-4b99-9921-4e2b8e3c65c5/1/sd6W1TXVlUoW9n2JIB_4BioVGrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.49.0/24
Signature Algorithm: sha256WithRSAEncryption
87:0b:ad:8f:3f:52:fc:d0:4b:69:b3:ee:92:30:18:50:5d:03:
db:88:06:f2:47:a1:42:57:3c:14:f5:1f:2d:36:0d:c7:6c:27:
e0:34:a4:90:1a:61:a2:2d:ee:46:e3:44:ae:47:1e:66:0b:69:
f9:3f:85:43:6d:aa:bf:bc:f2:20:96:73:dd:fb:77:ba:25:a4:
a3:6f:d6:d8:35:df:b8:d8:c0:80:f9:a1:d4:17:f0:de:39:3f:
dc:de:a3:98:d1:88:a7:dc:37:1d:5a:e0:0e:d5:d4:60:ae:8d:
b4:9a:e1:1c:4e:92:d5:27:7e:e5:b0:ef:25:18:48:62:b8:d4:
6e:65:aa:79:8b:7b:26:59:3e:eb:8e:46:2c:56:a7:3c:c3:b1:
f7:16:a4:dd:f2:eb:7e:52:e1:39:ca:63:48:24:68:69:6d:40:
e9:7e:cf:c7:0d:b9:2d:31:81:35:a1:f6:14:e6:c8:8d:fb:be:
76:2c:89:2e:8b:e0:c0:23:55:67:04:d2:6e:dd:57:2d:b9:92:
d4:6c:b0:93:ca:04:4d:aa:76:df:d5:8b:42:f4:ed:8e:6e:da:
46:7d:1b:48:12:af:0d:50:08:b3:13:48:b7:e8:53:56:6d:27:
5d:fe:de:d3:60:26:98:0a:67:b8:24:30:06:39:a4:8d:66:b6:
7c:59:ee:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:13 2024 by rpki-client on console-fra.rpki-client.org