Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NO55YH1Y45KfHXH2S544CfZpqu4.roa
File: NO55YH1Y45KfHXH2S544CfZpqu4.roa (raw, json)
Hash identifier: fZ2HGxR2HqVZAEoxGrbDXeLIgR9TjZWsM/6KhkMnOZ8=
Subject key identifier: 34:EE:79:60:7D:58:E3:92:9F:1D:71:F6:4B:9E:38:09:F6:69:AA:EE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185CD5610FA430730B33604361317D1BDA6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NO55YH1Y45KfHXH2S544CfZpqu4.roa
Signing time: Fri 20 Jan 2023 04:00:47 +0000
ROA not before: Fri 20 Jan 2023 04:00:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205544
IP address blocks: 192.159.100.0/22 maxlen: 22
192.159.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:56:10:fa:43:07:30:b3:36:04:36:13:17:d1:bd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 20 04:00:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34ee79607d58e3929f1d71f64b9e3809f669aaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:48:33:41:47:98:17:7c:a5:df:ad:e8:e8:
72:b8:4f:51:9e:12:ea:b0:b8:8e:6d:76:b7:b4:e7:
75:0e:11:bf:a2:ba:68:85:c2:c7:fe:66:38:5e:ee:
df:f3:29:9c:f7:4d:e7:f2:1d:3c:86:f2:57:bc:13:
25:9c:ab:23:bf:a7:4f:b8:bd:5d:2f:a0:4a:9d:b7:
f3:64:7b:a8:f8:57:c6:65:0c:76:fd:5f:2a:eb:c1:
9e:d9:af:ac:45:5d:af:1e:f4:d5:fc:10:a8:7d:8d:
d8:b5:db:16:d1:89:f5:92:ca:a2:a7:82:21:28:6c:
95:af:cb:72:08:82:50:b0:14:7b:57:e5:8e:d0:03:
e3:a3:e8:3d:44:45:60:8f:94:be:2d:97:b2:db:2c:
5d:9d:89:4a:ce:93:02:6b:93:77:1a:49:63:fb:13:
8d:06:61:37:bb:30:87:e7:72:f7:8d:16:2c:c4:59:
4d:1d:0e:b3:41:70:ec:4f:9b:0f:00:1a:05:c9:26:
28:40:3b:ff:3d:4f:94:f9:0d:0b:d7:b8:45:47:21:
8f:86:17:42:4e:63:ee:3c:80:83:34:47:40:77:5b:
13:60:81:0f:9a:8e:65:a1:0e:c3:ce:0f:a2:8c:9f:
10:32:08:72:d6:e3:ab:6d:c2:d9:83:a9:54:10:84:
54:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EE:79:60:7D:58:E3:92:9F:1D:71:F6:4B:9E:38:09:F6:69:AA:EE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NO55YH1Y45KfHXH2S544CfZpqu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.159.99.0-192.159.103.255
Signature Algorithm: sha256WithRSAEncryption
37:32:68:ed:2d:b9:08:0f:de:e4:fd:25:cd:c5:76:9b:1e:96:
8a:f2:e6:36:d6:69:83:c3:c8:9d:09:1a:79:6f:dd:86:43:04:
53:95:83:10:42:b7:f4:d8:87:72:83:72:67:a7:23:5d:2d:fa:
fc:bd:9a:22:f9:70:44:35:f6:77:57:49:df:ad:f2:23:6b:82:
03:21:af:cb:91:0f:8a:9c:71:f9:b6:4f:44:89:27:4c:f6:50:
bf:24:74:cc:a7:be:59:b9:eb:d3:8e:f5:75:aa:9d:f4:71:41:
49:74:ba:b4:ed:ff:fe:e7:a4:73:f8:c2:0f:a9:25:20:91:63:
c6:ae:76:a2:26:b5:7b:9e:39:33:8b:bb:9a:1e:7d:bc:fc:48:
37:da:87:18:4f:5e:cc:c7:a7:fc:29:0a:5a:58:78:b1:17:dc:
22:6a:d7:c2:7a:ee:2b:c7:77:8d:c5:65:24:a0:28:19:b7:51:
ce:ba:78:6d:2c:5c:7c:97:e9:65:a3:bd:ce:ec:b5:de:43:c8:
b9:9f:30:e3:be:8e:92:97:98:9c:14:d3:cc:17:6e:fa:eb:78:
e1:cf:ff:bb:d4:7c:ff:f3:ba:4c:1c:bd:e5:1e:ea:18:7a:72:
2d:c2:9e:39:7a:2e:42:1d:65:93:54:e5:ae:f1:e3:d0:7d:77:
14:19:fe:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org