Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ngdfMccFFk2EfZO4xmU9lnWFLpc.roa
File: ngdfMccFFk2EfZO4xmU9lnWFLpc.roa (raw, json)
Hash identifier: D3ArouqJRTHsktN83IhPwAu2WKtcspOQEGGK1/TU4Uo=
Subject key identifier: 9E:07:5F:31:C7:05:16:4D:84:7D:93:B8:C6:65:3D:96:75:85:2E:97
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018AA52575A51BC7149E4356F0269AA2A40E
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ngdfMccFFk2EfZO4xmU9lnWFLpc.roa
Signing time: Sun 17 Sep 2023 21:56:50 +0000
ROA not before: Sun 17 Sep 2023 21:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43581
IP address blocks: 194.169.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a5:25:75:a5:1b:c7:14:9e:43:56:f0:26:9a:a2:a4:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 17 21:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e075f31c705164d847d93b8c6653d9675852e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:52:7e:8b:b3:07:07:51:4e:41:af:a3:02:c2:
a5:80:83:58:57:0c:e5:86:f6:75:d9:c6:74:bd:55:
99:ff:dc:44:66:c5:0b:4f:20:ec:85:8e:97:a2:37:
54:a7:5a:0c:5d:59:3d:61:05:53:4a:29:4a:40:94:
bb:80:5f:09:5f:3a:71:d8:e7:7b:b4:9d:e3:56:60:
1b:d0:7b:8d:0d:dc:82:6f:75:50:5e:a8:8b:c1:fa:
1f:f6:e2:fa:3a:d6:d3:1c:f8:32:d5:da:f6:c7:b9:
21:9b:25:ac:89:c9:2f:35:76:e6:1a:5a:c1:c9:43:
b6:80:17:e5:47:8d:dd:c0:a3:59:e1:c6:91:df:ae:
ad:e8:44:fd:18:d8:2d:e9:77:02:51:ef:a2:a0:44:
6a:0f:79:ce:91:d8:28:41:b9:ff:29:47:f8:9d:54:
de:fb:64:50:a9:7b:ce:11:db:2c:e0:64:16:95:6c:
1b:79:59:39:c7:22:b0:23:7b:de:4b:6b:51:b0:c4:
7e:ff:b1:c7:78:3b:d0:cb:c5:37:61:19:33:c5:33:
b6:98:30:7d:d4:3e:31:7b:47:37:78:b6:90:09:0a:
17:11:69:89:0a:15:fa:fc:70:2b:2d:20:c1:9c:dd:
32:7f:43:47:7b:b7:28:ac:e9:8d:41:df:e4:8d:ce:
91:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:07:5F:31:C7:05:16:4D:84:7D:93:B8:C6:65:3D:96:75:85:2E:97
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/ngdfMccFFk2EfZO4xmU9lnWFLpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.160.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c1:d3:6f:6b:55:62:2c:93:9e:92:38:b8:80:b1:8b:d9:ac:
4e:28:ec:77:3e:8f:52:0f:a5:eb:28:c7:3c:3e:85:e0:e2:54:
f8:fd:17:61:c4:5b:01:18:fe:c6:17:95:5b:05:6c:df:76:c9:
5e:bc:de:7c:32:83:a0:e5:b6:88:74:67:ca:29:4e:70:63:11:
92:ed:ab:e8:98:6c:fc:ec:f8:1f:75:58:1a:a1:aa:52:4b:76:
4b:6d:a5:8a:62:82:89:f4:33:b9:0b:d8:9e:bf:12:55:af:5e:
ba:75:99:4e:39:d2:5b:f7:a4:d1:1b:74:72:16:60:9d:5f:49:
ec:55:aa:c9:8b:0f:52:41:bd:28:60:07:e0:8a:52:ac:02:b3:
f1:97:d3:00:73:bf:40:19:fd:ac:d3:d9:93:3e:54:34:0d:c0:
02:e0:36:bf:93:30:84:ad:1d:e3:61:d5:23:f8:f1:0d:7f:38:
9d:f5:0a:aa:e6:ee:9c:dd:45:f0:12:3d:35:80:78:53:9f:d7:
b9:c8:7a:10:62:ab:6b:6b:25:30:5d:20:cd:e9:0c:50:58:79:
b0:fc:04:7b:52:c7:55:11:64:cf:6d:9f:bb:67:dc:99:90:dd:
d8:f3:97:bc:06:1e:1f:8f:50:3f:3b:ae:03:ca:1a:f4:cc:63:
fc:e6:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:41 2024 by rpki-client on console-ams.rpki-client.org