Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/StOpuuD-vDaJeLaNRSKPn_LT6dg.roa
File: StOpuuD-vDaJeLaNRSKPn_LT6dg.roa (raw, json)
Hash identifier: oDk+l+3/sG7j/mqf3LTrbehea0ULN5jimkrUCMR2Irg=
Subject key identifier: 4A:D3:A9:BA:E0:FE:BC:36:89:78:B6:8D:45:22:8F:9F:F2:D3:E9:D8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0187131133E0653B2B3B073E4CE9B0E37C6F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/StOpuuD-vDaJeLaNRSKPn_LT6dg.roa
Signing time: Fri 24 Mar 2023 10:01:47 +0000
ROA not before: Fri 24 Mar 2023 10:01:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62096
IP address blocks: 192.159.102.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:11:33:e0:65:3b:2b:3b:07:3e:4c:e9:b0:e3:7c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 24 10:01:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ad3a9bae0febc368978b68d45228f9ff2d3e9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:20:0a:54:2c:7a:47:d8:22:0b:e1:77:7f:5d:
c7:6d:f2:a8:5f:77:83:bd:fa:a9:57:b4:a7:65:74:
91:20:b6:e2:6b:be:08:45:a9:d8:22:bb:0b:7e:43:
07:6b:9b:99:b3:d8:9b:4d:10:25:bd:01:a7:ab:f9:
1a:4a:e6:ab:d9:ee:61:bb:99:d2:67:1e:62:85:78:
c2:e3:b0:7f:87:15:4c:b4:71:61:d6:55:6d:15:93:
ad:e7:5a:6c:4f:5c:fc:d1:33:0d:27:da:4c:18:bc:
a8:02:89:df:93:62:f2:c6:b3:f9:77:23:1f:c3:f6:
46:26:9d:12:49:da:ac:35:6e:b9:fe:d7:e9:63:4f:
09:7c:3c:2b:eb:be:6e:05:37:c4:20:fd:52:25:6b:
53:79:e6:54:75:03:f8:dc:45:d4:0a:dd:d5:1c:00:
0f:92:ff:b0:eb:6b:d7:0a:e3:a9:f6:a4:6f:27:96:
44:17:f0:6b:b1:11:0e:6d:39:16:ed:a0:05:0b:d5:
77:c6:5e:9e:9d:cf:fd:03:99:96:53:20:24:48:af:
da:22:c0:eb:2e:32:3f:19:89:3a:c2:81:60:86:da:
93:6d:35:bf:12:c9:19:13:eb:c7:9b:e1:a5:ad:4c:
cf:e0:2a:fa:b0:2f:2c:5e:a1:7b:91:90:a5:80:5e:
6b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:A9:BA:E0:FE:BC:36:89:78:B6:8D:45:22:8F:9F:F2:D3:E9:D8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/StOpuuD-vDaJeLaNRSKPn_LT6dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.159.102.0/23
Signature Algorithm: sha256WithRSAEncryption
58:4c:db:75:fa:5f:4d:e5:f3:fa:b0:ad:1d:94:8b:43:8a:d5:
08:63:3c:d2:18:3d:50:74:f6:04:66:48:62:09:82:9b:0c:18:
63:a7:71:e4:49:45:f2:f7:1f:b2:49:51:5e:ee:70:6d:26:74:
42:97:10:b1:f7:0c:35:4f:93:cd:ba:4a:7f:0d:bb:60:df:69:
c0:3b:17:1f:d9:60:ad:a2:1a:fc:8b:18:fa:83:9d:b1:ba:d5:
96:74:d8:db:20:9f:29:0c:bf:11:f3:ec:f4:55:1a:75:32:f8:
f2:ea:1b:38:16:8f:e8:1f:e8:ef:46:1b:50:62:61:75:90:ca:
a3:0b:c6:c1:8d:01:23:30:00:15:2b:5f:09:98:b7:50:06:b0:
e3:2a:72:ef:c6:f6:0e:29:8f:7c:ca:13:a2:a1:bd:b3:7a:24:
91:5b:9c:d4:da:a0:cc:ca:6c:93:59:9f:91:58:3c:f6:a8:98:
a9:95:24:9f:a4:bd:76:7f:2b:46:5c:51:a1:55:a5:a4:8c:f0:
12:46:09:cf:5f:54:50:e5:6a:30:d9:0c:14:8d:69:db:00:df:
2d:b7:c4:99:0c:e9:2f:a1:90:56:1e:fd:cf:29:83:6c:09:37:
f9:40:1b:ac:02:46:a5:f8:72:ec:a5:a5:30:c4:23:02:5d:bc:
d2:f8:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org