Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/nSu92TvJHR_K928_81-xCH1xWVk.roa
File: nSu92TvJHR_K928_81-xCH1xWVk.roa (raw, json)
Hash identifier: tu1gv4EBc8YrVkJamTGgeIR7Vs2KJ2PP+LQB1o3m1fI=
Subject key identifier: 9D:2B:BD:D9:3B:C9:1D:1F:CA:F7:6F:3F:F3:5F:B1:08:7D:71:59:59
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 0188B9F11198A99951C9EFC6AE5AE39AE96B
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/nSu92TvJHR_K928_81-xCH1xWVk.roa
Signing time: Wed 14 Jun 2023 12:46:03 +0000
ROA not before: Wed 14 Jun 2023 12:46:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197938
IP address blocks: 146.0.0.0/20 maxlen: 20
2a04:e540::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:f1:11:98:a9:99:51:c9:ef:c6:ae:5a:e3:9a:e9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Jun 14 12:46:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d2bbdd93bc91d1fcaf76f3ff35fb1087d715959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:57:e5:75:c0:46:14:17:6b:48:fd:13:f2:3f:
d0:50:68:d2:18:51:84:d6:ac:d8:84:af:d1:9b:4d:
a5:8e:aa:cf:3f:1c:f4:01:75:4e:dd:55:60:0d:40:
9e:40:bd:e4:ab:ba:9c:11:a6:4e:9f:44:f9:dc:a2:
8e:68:df:f9:57:69:13:7e:a1:d9:91:e9:c0:f7:60:
14:5e:5e:b7:9c:71:1e:b4:40:dc:40:4d:25:e3:ce:
61:5e:8e:64:37:9c:e6:c5:d4:e9:77:7b:d5:12:9b:
34:07:74:14:e4:d9:23:e3:ec:7b:00:09:56:49:8f:
a0:a8:93:74:af:53:97:c4:91:3f:f5:b9:3f:a1:59:
bb:75:af:dd:2e:c3:78:2d:c8:48:12:c4:84:d0:0f:
b0:e5:1d:d3:db:c2:f9:ca:1d:b3:ed:0b:12:89:a4:
4d:6b:f0:de:54:ac:e7:0e:7c:60:dd:05:db:53:4a:
7e:cf:38:bd:eb:07:ce:40:7b:65:af:04:4c:21:3e:
7a:a4:d5:6e:db:04:3b:d9:ae:00:dc:c4:2a:aa:e3:
e2:18:f4:5b:c8:7c:39:a1:f6:e4:07:25:70:c5:79:
95:df:4b:17:07:e0:bd:f3:da:43:2e:60:95:a0:e5:
3d:d5:7a:22:d8:c0:19:91:93:02:d9:f7:ff:6b:66:
c7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2B:BD:D9:3B:C9:1D:1F:CA:F7:6F:3F:F3:5F:B1:08:7D:71:59:59
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/nSu92TvJHR_K928_81-xCH1xWVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.0.0/20
IPv6:
2a04:e540::/32
Signature Algorithm: sha256WithRSAEncryption
b7:25:9b:93:21:cb:21:14:ec:2e:a7:88:ff:b5:e3:c5:f1:ba:
0c:7f:d3:91:e2:e4:fc:d9:86:dd:bf:c0:01:a5:f2:4c:62:b5:
13:04:9a:ca:62:1a:9a:b6:86:05:40:08:db:f2:4b:16:58:22:
f7:5c:31:c0:c5:12:f1:08:3e:1e:fc:52:bb:7f:43:83:4a:a4:
34:b4:cb:58:f4:0e:be:49:23:21:5a:c0:04:47:96:b0:e3:cf:
d7:3b:17:84:d0:96:1c:2a:44:40:30:32:0d:33:a8:9a:e8:67:
5e:75:19:99:8c:30:91:5d:74:92:d9:ad:f5:e6:f4:83:a0:37:
e4:8c:ce:ad:46:9d:6b:13:84:f4:2a:57:d1:cc:c2:f2:3f:aa:
6a:5d:b5:aa:47:4c:b5:37:b4:e9:6d:5d:05:a0:be:c2:c9:13:
05:9e:cc:42:94:7a:ca:8e:5b:94:38:12:be:7c:9e:aa:cc:0a:
41:2b:06:f0:cc:99:5a:85:1b:69:9a:59:52:60:74:ec:18:d3:
14:a1:24:37:07:5b:08:16:33:c1:f4:51:7d:a5:35:75:79:57:
00:e2:87:72:3a:0e:cb:4a:fd:f7:af:1c:a8:6a:fd:fb:db:9f:
2b:8f:fe:a6:f7:33:8e:38:31:99:f0:09:a7:ce:1d:69:b2:48:
df:4b:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org