Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/n2tfvN1veB-8AtkMmoxmlOxMcrw.roa
File: n2tfvN1veB-8AtkMmoxmlOxMcrw.roa (raw, json)
Hash identifier: AgMQ5pfQAoN1SpDqw2XyPYZegCm7SltPa1RKphhy4f4=
Subject key identifier: 9F:6B:5F:BC:DD:6F:78:1F:BC:02:D9:0C:9A:8C:66:94:EC:4C:72:BC
Certificate issuer: /CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Certificate serial: 0188E8A4D561ABD3DE7C41176ADE6D6295B2
Authority key identifier: C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/n2tfvN1veB-8AtkMmoxmlOxMcrw.roa
Signing time: Fri 23 Jun 2023 14:24:56 +0000
ROA not before: Fri 23 Jun 2023 14:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 193.34.81.0/24 maxlen: 24
193.38.244.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:a4:d5:61:ab:d3:de:7c:41:17:6a:de:6d:62:95:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3a8e8648e0ba36a323ab9df6341d668bda6b4d2
Validity
Not Before: Jun 23 14:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f6b5fbcdd6f781fbc02d90c9a8c6694ec4c72bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:8a:25:57:7e:d2:64:58:1b:03:4c:92:ab:35:
e0:04:09:9f:d3:45:13:7d:5f:43:f0:95:43:c8:8b:
e1:aa:9c:74:f6:8e:28:28:c5:d7:9d:cc:be:7c:13:
38:9c:39:df:08:48:6e:3b:ea:44:50:b3:e4:f2:15:
5d:4d:1b:57:ec:62:d7:bb:a9:db:70:e8:c8:e6:e1:
73:c7:a7:86:c5:b0:a9:a8:21:c7:80:f6:48:1b:22:
9e:61:5d:8a:eb:f1:11:3c:a6:ae:98:0a:3f:06:0a:
2a:d4:d9:73:73:cf:b2:ed:af:cc:dc:56:f5:c0:0b:
ba:f6:98:05:e4:c8:3c:fb:6b:8f:7c:f3:c0:f4:1a:
6b:df:a0:49:81:fc:d4:45:6f:0d:cd:21:b4:25:42:
ce:ab:e3:b9:81:f5:ef:a0:ac:42:7b:35:12:b8:77:
a7:44:3b:04:d0:4a:62:d7:b5:a6:22:57:79:90:4a:
5b:29:5c:f4:69:9e:18:78:df:7e:06:68:8e:11:d6:
79:f0:72:66:d6:e9:f0:95:21:0f:6c:bf:35:ca:0b:
ff:c8:02:4b:dc:7f:b7:ac:93:50:0d:c7:a1:81:7a:
96:3f:89:6b:6e:69:43:91:31:42:2d:f5:85:ab:48:
85:27:ee:f9:ed:f8:55:00:85:63:54:4f:c5:71:a6:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6B:5F:BC:DD:6F:78:1F:BC:02:D9:0C:9A:8C:66:94:EC:4C:72:BC
X509v3 Authority Key Identifier:
keyid:C3:A8:E8:64:8E:0B:A3:6A:32:3A:B9:DF:63:41:D6:68:BD:A6:B4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6joZI4Lo2oyOrnfY0HWaL2mtNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/n2tfvN1veB-8AtkMmoxmlOxMcrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5a3d20-ecaa-40ea-9db2-d59845fb9b3d/1/w6joZI4Lo2oyOrnfY0HWaL2mtNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.81.0/24
193.38.244.0/24
Signature Algorithm: sha256WithRSAEncryption
45:3e:61:cb:8e:5b:4b:2b:bc:1c:4b:e1:1b:27:a0:ad:b0:49:
47:1c:25:f9:e2:f4:b2:6a:0e:57:19:64:07:07:f8:e8:0d:70:
42:bd:9e:71:2b:81:85:66:94:82:b8:4b:07:b7:36:3c:ea:4c:
7b:b0:f8:64:eb:e1:e8:8a:33:f6:6e:10:24:4e:f5:44:72:1b:
4d:66:af:a1:09:80:47:35:a9:70:dd:5b:f7:b0:81:4a:7d:db:
4e:a0:a1:dc:3e:64:3a:e2:11:56:45:c2:0f:b9:1d:b0:78:c2:
37:ec:b2:25:cb:04:ab:ab:71:07:18:f2:3a:50:cb:27:90:bb:
94:d2:a2:45:7a:4a:b0:b5:dd:ef:0b:cb:ca:a4:e7:e4:42:a4:
9e:35:b9:2b:05:1f:b2:28:2c:d3:22:1e:11:38:36:d4:52:12:
ed:47:bc:fe:1d:c8:b6:9d:9c:ae:42:0d:84:4e:03:c1:6a:a3:
a0:9b:9d:ad:80:96:81:d4:6e:04:0c:82:d7:67:d1:d1:9c:c1:
fa:69:c6:8c:aa:bb:cf:4e:d3:e6:26:42:e9:fa:c3:df:40:30:
70:b4:9f:55:24:37:38:8b:4a:d8:80:84:4c:73:fc:03:cf:50:
f0:4c:a5:50:d4:a2:29:cd:ff:8a:22:1e:d4:12:97:f1:ab:e8:
06:64:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:20 2024 by rpki-client on console-ams.rpki-client.org