Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nV_i49MFK44xCQspszbg59OT0JY.roa
File: nV_i49MFK44xCQspszbg59OT0JY.roa (raw, json)
Hash identifier: PcvAw4GQWFDkx1LRTJPjEpS9HzcwQBsVm2Oh2n2LJSQ=
Subject key identifier: 9D:5F:E2:E3:D3:05:2B:8E:31:09:0B:29:B3:36:E0:E7:D3:93:D0:96
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01858165AB977E682D4989EE401D8673BD0D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nV_i49MFK44xCQspszbg59OT0JY.roa
Signing time: Thu 05 Jan 2023 10:06:41 +0000
ROA not before: Thu 05 Jan 2023 10:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1234
IP address blocks: 192.176.176.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:81:65:ab:97:7e:68:2d:49:89:ee:40:1d:86:73:bd:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 5 10:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d5fe2e3d3052b8e31090b29b336e0e7d393d096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:99:10:b8:40:d5:f8:9a:1f:76:1d:51:ed:51:
6b:b6:d1:74:9c:e3:bd:0a:2c:c6:ef:61:fd:4f:9e:
95:4d:73:6f:b5:6f:19:ba:f9:a7:c5:38:81:16:27:
a4:18:d6:85:2e:6a:22:ea:e4:d7:7a:bc:81:ff:c6:
02:a7:9f:80:12:2b:b8:f8:81:d9:bd:ae:34:bf:8f:
31:a0:91:1d:ec:a0:40:f9:38:38:2b:f6:11:fe:cf:
d1:94:14:3b:7a:43:20:d6:73:d9:75:39:72:bf:e6:
22:bf:a3:e9:b5:50:8a:bc:e3:8f:2a:9a:bb:bc:51:
71:3e:e7:ca:4a:ba:4d:b8:0a:07:ff:c1:7f:9c:a7:
41:74:09:12:2c:a8:b2:aa:cf:e3:e0:4e:e3:de:5d:
3b:4c:5d:5d:00:24:42:41:65:6a:1f:45:94:26:53:
73:a8:32:5f:db:94:35:af:40:29:1c:86:03:8f:2a:
2d:43:c9:73:a7:b9:fe:73:13:c9:34:23:cd:96:c1:
ed:e9:7f:df:09:36:98:ac:66:93:39:ff:bf:13:25:
98:7b:33:e7:1d:20:25:34:93:81:ea:b9:00:8d:b8:
44:81:e9:1e:d8:38:cb:d3:c5:01:10:7a:37:3c:42:
97:8d:d1:cd:8b:ea:5c:49:f6:b8:78:8d:ea:68:69:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5F:E2:E3:D3:05:2B:8E:31:09:0B:29:B3:36:E0:E7:D3:93:D0:96
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nV_i49MFK44xCQspszbg59OT0JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.176.176.0/21
Signature Algorithm: sha256WithRSAEncryption
46:e5:46:0c:26:28:37:d4:30:43:36:9d:9c:d0:05:52:46:ce:
28:7a:ba:1f:f2:58:29:5b:58:9f:7a:30:83:73:94:a4:54:8e:
ca:61:39:fa:b5:e2:36:85:73:a1:92:7c:42:5b:d7:6f:f6:d2:
78:0f:be:d6:08:71:af:29:0b:b3:6e:1a:35:5b:c8:68:13:9a:
a7:94:91:63:b8:f6:42:9b:09:25:02:b9:11:0f:88:16:5e:eb:
af:f1:c2:cc:4f:17:d7:9e:67:69:39:a3:ce:00:83:5a:cf:cd:
4a:be:d3:80:d0:c2:23:d8:f9:7d:d6:6e:b1:06:89:31:d0:56:
64:b3:25:5f:25:0b:97:c7:d8:23:ce:29:6c:03:ea:12:53:a0:
cd:8b:3f:74:7a:47:6f:d6:e9:73:ef:25:4a:d0:f5:c6:ba:b0:
a7:13:5b:78:95:03:06:86:24:41:8f:0d:cf:76:e9:16:60:ca:
49:d1:fc:71:3b:ed:2c:65:7c:77:7a:fa:96:52:c1:51:0d:b8:
9f:a9:4b:d7:ae:b5:ce:6a:62:a4:5a:4a:f3:da:c8:42:6f:59:
14:1e:79:e8:85:c7:a9:7f:33:bd:2a:b7:b8:1f:4b:de:6b:0e:
a7:b5:0b:b9:09:ab:f2:95:94:b8:95:99:f3:ed:0c:75:7e:65:
a6:00:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org