Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NueYxWNemZCmcJzPAU6aEIrz23o.roa
File: NueYxWNemZCmcJzPAU6aEIrz23o.roa (raw, json)
Hash identifier: 5N6Hc+Y+qE0k70GbwD/kqfys6xtyd5uTp/48Y1SDDzc=
Subject key identifier: 36:E7:98:C5:63:5E:99:90:A6:70:9C:CF:01:4E:9A:10:8A:F3:DB:7A
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C3F42E6AEA943FE61CED7A3F78934
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NueYxWNemZCmcJzPAU6aEIrz23o.roa
Signing time: Mon 02 Jan 2023 05:55:06 +0000
ROA not before: Mon 02 Jan 2023 05:55:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209962
IP address blocks: 194.36.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:3f:42:e6:ae:a9:43:fe:61:ce:d7:a3:f7:89:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:55:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36e798c5635e9990a6709ccf014e9a108af3db7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:50:69:a7:fd:f1:48:22:88:aa:d6:20:99:
de:a1:f0:49:ea:54:84:1a:75:9e:88:06:43:9d:0b:
a7:08:02:02:e1:f1:d3:3c:68:1a:a3:c3:88:35:e6:
f9:69:3e:d9:79:53:bf:97:00:f0:c8:aa:8b:a0:d5:
70:1c:14:29:f8:1a:44:d5:28:76:52:7e:62:69:ea:
c0:05:e0:48:9b:e4:99:71:05:fb:3d:29:1f:fd:c9:
2a:76:58:6b:67:80:ef:36:b3:72:8e:fa:a9:21:a4:
54:d5:49:95:ca:24:07:4c:2f:b8:4d:82:f5:9a:50:
51:02:50:aa:79:97:fb:ec:a9:17:f7:dd:57:c2:bf:
97:bd:ec:38:77:d0:c8:b7:7b:2c:ed:42:71:3f:ce:
43:41:99:a6:ec:4f:b7:51:b5:62:65:3a:a7:0f:21:
ec:e7:31:22:37:ce:9e:02:ce:32:e3:38:c4:ac:ac:
71:c8:64:76:b9:97:7d:5d:97:ee:66:5c:8d:8a:f7:
b6:9f:04:d0:d8:f1:6a:ef:60:00:ec:58:2e:81:f1:
c7:69:dc:57:48:6e:64:34:93:ed:1e:dc:90:7a:64:
1e:0c:03:d1:c1:19:a6:78:90:f4:24:a0:8b:30:4c:
3b:b3:31:16:f3:fa:e2:26:15:4a:b8:20:1d:ef:ea:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E7:98:C5:63:5E:99:90:A6:70:9C:CF:01:4E:9A:10:8A:F3:DB:7A
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/NueYxWNemZCmcJzPAU6aEIrz23o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.176.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:cd:f8:2f:be:fc:1a:0e:fb:15:c6:91:5b:d9:2b:2f:b3:17:
df:63:86:8e:b0:d9:9e:9d:46:10:21:96:49:73:25:69:67:4e:
e5:59:ec:2f:0b:00:bb:d3:ce:bb:04:fb:36:00:e4:5d:60:49:
44:22:3b:f7:ba:50:4a:6a:ec:8f:f4:46:85:45:2b:fe:05:2a:
b4:56:d8:fb:fb:4a:d8:2b:ce:77:f7:af:26:f9:57:47:01:e9:
4c:61:65:69:6f:8c:32:ab:85:a3:cd:c8:3a:5e:45:3b:c9:7e:
99:72:33:21:0c:ad:d8:e7:d6:bf:04:49:3b:88:90:c9:67:3a:
51:5c:93:78:28:5f:62:a2:5d:5a:42:6f:e3:25:45:42:80:b2:
ef:ed:8f:18:ae:10:e1:3e:04:2d:14:16:b0:c4:c2:16:a7:4d:
ad:a3:b4:ef:58:b3:cb:94:52:d3:18:28:3c:a5:c6:28:9e:77:
5b:55:10:22:77:a9:bd:1b:b0:72:9b:c4:35:1e:c5:29:67:6c:
d2:35:5c:99:e3:20:d0:98:bc:52:a2:a9:ac:c6:ed:b7:60:df:
54:9e:c0:97:10:ef:d0:c9:81:ef:20:a2:cb:1b:7b:fd:a9:9b:
fa:ac:92:ff:14:3c:45:d4:00:e4:7e:32:ba:92:0f:0c:a3:52:
f4:9c:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:28 2024 by rpki-client on console-fra.rpki-client.org