Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jNGiSf3M14DaCL6xGQt8mQ2Nx88.roa
File: jNGiSf3M14DaCL6xGQt8mQ2Nx88.roa (raw, json)
Hash identifier: mIVv8NpMmYoFB3Dly3sL+mfkYX87EFDLVKl93U/rSA8=
Subject key identifier: 8C:D1:A2:49:FD:CC:D7:80:DA:08:BE:B1:19:0B:7C:99:0D:8D:C7:CF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCADDF1939AF741C1EA2F0A509F206C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jNGiSf3M14DaCL6xGQt8mQ2Nx88.roa
Signing time: Sun 01 Jan 2023 10:05:12 +0000
ROA not before: Sun 01 Jan 2023 10:05:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28099
IP address blocks: 193.235.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:dd:f1:93:9a:f7:41:c1:ea:2f:0a:50:9f:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cd1a249fdccd780da08beb1190b7c990d8dc7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ae:e7:36:c3:06:62:f9:17:95:13:da:c2:65:
98:52:df:9d:ea:2b:2b:b0:a1:fe:fe:11:53:75:ce:
2e:08:33:2a:8e:44:1e:67:7b:15:6e:80:54:33:f7:
1e:10:17:02:70:6a:05:4f:c6:c3:57:9d:5a:4c:ed:
f2:11:35:58:d4:9e:38:87:15:6e:c2:c9:2a:ae:38:
71:55:32:6a:66:45:b6:1c:e6:c4:57:80:71:f8:e5:
b1:9c:dc:8b:ac:3e:56:94:5e:d7:aa:8f:06:1c:26:
0e:e1:3e:77:2a:d6:b2:5d:f6:ea:a1:3e:34:62:5a:
df:b2:b3:a2:76:52:ba:7c:97:10:af:c9:03:7d:f4:
46:d3:e1:b9:60:88:05:03:80:48:e9:93:dd:2b:09:
f2:19:12:4b:72:1f:af:07:c7:3e:e5:ae:c6:ce:54:
cb:f4:aa:9e:a7:f1:56:36:3f:53:2b:31:f0:e8:44:
99:4e:19:cc:42:5c:a5:63:0c:77:e7:4c:77:33:a6:
56:f4:d0:65:91:1c:b2:85:88:b7:b8:f8:02:d6:a9:
15:28:0d:d4:b5:2e:39:ef:02:59:e1:91:dd:6f:57:
8a:e8:6b:b4:40:15:02:d4:15:db:85:a3:11:d5:da:
34:f0:16:05:5b:7f:8f:80:d2:03:c0:b8:72:a4:aa:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D1:A2:49:FD:CC:D7:80:DA:08:BE:B1:19:0B:7C:99:0D:8D:C7:CF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/jNGiSf3M14DaCL6xGQt8mQ2Nx88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.146.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:ac:ec:04:94:8c:7e:ff:f8:2d:b7:9e:1c:27:67:2e:62:be:
01:ce:b4:29:65:f8:81:9e:22:bd:9b:2e:b0:e3:cb:f7:53:38:
89:57:ed:92:9f:db:c0:6b:39:30:fc:bc:98:37:76:2e:58:e8:
47:6b:9b:9f:9b:9a:46:27:01:9d:40:fa:6a:7e:c7:0f:81:37:
e9:f5:c4:6e:73:a7:89:42:89:0b:67:8e:7c:81:88:75:98:af:
c5:d7:36:f2:4c:37:af:71:e2:b8:0c:af:ba:57:94:c5:98:3f:
21:ae:43:33:4d:0c:b6:72:b4:8c:75:b6:b2:af:b0:73:b7:fd:
fd:ca:2f:be:d4:4e:40:f7:9e:4b:d2:70:b6:2a:70:d1:6a:2e:
4d:14:36:1c:f3:7f:5e:16:86:7d:b0:5e:c3:af:9a:17:b6:54:
f6:d1:fa:57:9b:f7:b7:ac:7a:81:79:42:9e:73:72:e8:5d:d3:
e7:b5:c4:ea:d4:65:cd:ab:bf:d7:04:85:20:99:fe:fc:a4:df:
f6:1d:01:e8:8f:37:47:c4:22:b1:8f:89:c9:9b:bc:03:8a:38:
8b:05:be:56:33:b2:92:4b:43:b3:ef:b8:e2:a0:d4:d2:ab:86:
17:4e:ab:d4:83:8f:42:9a:23:cd:9b:16:6e:eb:d5:35:3f:15:
c8:66:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org