Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nILeaNFPmv56_LFiLyHqPaphvXg.roa
File: nILeaNFPmv56_LFiLyHqPaphvXg.roa (raw, json)
Hash identifier: neVQXRARFzYMOjwJFnasig+Y6+iN3SN8/wBZ6IQyKzQ=
Subject key identifier: 9C:82:DE:68:D1:4F:9A:FE:7A:FC:B1:62:2F:21:EA:3D:AA:61:BD:78
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571030E7261901995F206993EBF8515DD
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nILeaNFPmv56_LFiLyHqPaphvXg.roa
Signing time: Mon 02 Jan 2023 05:45:03 +0000
ROA not before: Mon 02 Jan 2023 05:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57138
IP address blocks: 194.242.2.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:0e:72:61:90:19:95:f2:06:99:3e:bf:85:15:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c82de68d14f9afe7afcb1622f21ea3daa61bd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cf:28:8b:d9:be:4f:1f:7c:d7:95:75:b5:e1:
a4:1b:25:f2:a8:ad:e6:c5:d1:8d:42:c9:2c:46:64:
88:ee:cc:e7:d3:09:af:32:8b:f8:e4:c4:c1:10:1c:
00:35:7b:a9:13:46:8b:c7:cc:f9:c4:c4:19:e6:dd:
69:c3:dc:25:39:2e:a0:84:c1:66:98:7a:67:25:ba:
ac:f7:d6:20:65:31:fd:2b:41:a6:0d:8f:5e:62:8e:
ea:3d:83:83:1b:22:e1:a1:04:54:80:e6:da:05:3c:
68:d4:42:ea:d2:69:7e:0c:b4:9a:57:03:89:d2:06:
bc:72:f8:a7:e4:10:32:b2:db:cf:4e:60:63:2d:85:
6d:35:18:7f:f8:18:cb:2d:6a:a1:7a:2e:d3:40:cd:
e1:71:ad:e2:7c:4a:bf:d3:1f:01:06:f6:54:60:c5:
0e:7f:13:13:25:d9:0b:49:4f:18:e6:29:47:13:bf:
2a:42:35:0a:64:1d:06:1c:3e:11:f0:51:f6:65:6f:
0f:6b:11:ab:d4:5b:07:82:67:c9:2d:dc:35:57:0a:
08:d7:37:1e:22:28:fb:5f:d8:2c:06:37:20:6a:c1:
39:b2:ee:d8:d8:ea:cf:aa:9b:eb:91:a3:65:95:02:
4d:3e:18:00:49:a7:89:c0:f2:d0:3a:7a:75:02:d1:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:82:DE:68:D1:4F:9A:FE:7A:FC:B1:62:2F:21:EA:3D:AA:61:BD:78
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/nILeaNFPmv56_LFiLyHqPaphvXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ea:ee:e5:c4:28:74:d6:a7:7a:ef:65:16:5f:70:3f:94:6f:
a2:a9:09:51:c0:14:aa:be:fe:b9:91:e9:61:c3:df:cf:04:48:
7e:54:78:d6:eb:45:ec:82:1e:8c:be:6d:d7:ed:65:0a:0a:6e:
72:a3:e9:eb:04:ca:7a:16:ad:4b:c5:77:24:82:b9:5c:36:7d:
48:0f:8c:f2:cc:bf:56:9a:5e:f4:4c:5e:76:45:84:af:38:5f:
93:04:71:4a:cb:14:80:8e:66:f1:b3:79:40:f7:9d:9d:40:57:
cc:d9:37:e7:2c:41:4a:41:d2:2b:03:a5:c9:01:c0:c2:12:e5:
68:08:1e:12:7c:4a:85:57:ed:c1:65:8a:94:d7:db:e0:2f:c1:
db:7c:4d:c0:ed:d0:3c:85:09:ad:2b:0f:98:7a:71:62:42:8f:
e7:7a:5f:9e:8f:84:5f:5a:6b:54:f2:48:58:28:db:49:e1:b1:
da:6d:62:f8:7c:b1:58:b5:5d:e9:3d:55:d1:bd:16:37:e4:ea:
31:d0:38:da:cc:cd:11:54:51:52:0b:83:27:b3:fd:db:2d:6d:
ca:f2:8c:ed:0e:ad:f9:24:6f:b5:16:0c:3b:6d:df:01:32:15:
ab:22:30:d1:7b:23:3d:a0:35:ca:3d:72:04:57:ca:08:55:78:
34:8c:87:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org