Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nu9u7IldqVi-sQckGEeM5qsCNng.roa
File: nu9u7IldqVi-sQckGEeM5qsCNng.roa (raw, json)
Hash identifier: 2zK8a+4zfmBMR8mUVyg7lrFFFvj03zXe0b/4nLCcIG0=
Subject key identifier: 9E:EF:6E:EC:89:5D:A9:58:BE:B1:07:24:18:47:8C:E6:AB:02:36:78
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F506367F6F94D641693CECA00E36
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nu9u7IldqVi-sQckGEeM5qsCNng.roa
Signing time: Tue 02 Jan 2024 02:31:26 +0000
ROA not before: Tue 02 Jan 2024 02:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56946
IP address blocks: 193.181.52.0/24 maxlen: 24
193.181.54.0/24 maxlen: 24
193.181.53.0/24 maxlen: 24
193.181.55.0/24 maxlen: 24
193.181.52.0/22 maxlen: 22
194.103.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 08:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f5:06:36:7f:6f:94:d6:41:69:3c:ec:a0:0e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9eef6eec895da958beb1072418478ce6ab023678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d3:be:0b:a1:00:78:25:ed:a8:7f:62:8c:5a:
fe:75:fe:df:a5:a4:59:0e:73:46:d9:e9:61:33:92:
a8:b1:58:81:0b:53:49:09:b5:1b:7d:4d:e6:cb:42:
2a:e9:96:aa:3c:ac:53:81:af:d8:7a:f4:d1:a1:85:
48:89:74:a3:71:97:38:aa:4b:c0:b0:1e:c6:87:5a:
f2:21:9f:48:e8:d7:f9:da:24:ef:da:5c:34:2e:2b:
9f:18:dd:68:39:a8:c0:f8:9f:72:1d:8c:ef:0b:57:
c9:ac:02:80:e6:b1:c5:26:b9:bd:bf:9d:40:59:01:
aa:98:e6:e1:2a:f2:51:01:a3:a8:af:e1:dc:d0:a6:
42:be:ee:dd:5c:33:a7:9a:39:f6:e9:66:15:aa:75:
17:35:c2:93:12:6f:95:a4:7c:39:a8:be:b2:7a:58:
b3:1c:44:55:7d:9f:89:b4:76:36:09:df:a4:7a:9f:
ea:1b:c5:c7:ba:56:f0:33:76:77:aa:f7:b9:bc:9e:
86:50:9d:7b:5b:ec:ab:b1:98:5d:98:41:09:9f:4a:
a8:a4:ed:44:d6:a1:a6:e0:b6:cb:ee:dc:16:43:05:
25:4c:83:f7:41:b4:3b:9e:bd:ee:33:28:18:e3:64:
71:3c:38:6e:ff:41:48:1c:17:c8:2c:85:6a:86:9e:
1d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:6E:EC:89:5D:A9:58:BE:B1:07:24:18:47:8C:E6:AB:02:36:78
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/nu9u7IldqVi-sQckGEeM5qsCNng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.52.0/22
194.103.88.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:fb:a6:1c:55:c4:9a:36:d4:67:76:5b:44:d1:b5:33:d5:8e:
00:93:93:ba:02:38:8e:2d:f2:af:4c:eb:02:83:19:54:5d:20:
0e:62:b3:6b:39:71:8e:dc:84:26:8a:8b:95:dd:09:d5:7b:99:
36:b6:ed:e8:1f:48:10:3b:fa:ca:b5:7c:8e:fd:c3:a3:da:84:
50:61:f0:52:62:1f:48:31:69:3b:9b:43:95:40:7b:51:95:73:
66:24:c7:6d:1e:96:2d:38:3b:e6:8f:71:41:b0:0e:ce:d8:06:
17:a8:16:51:d3:85:f4:b2:1a:5d:9a:a7:bf:e6:7d:ec:49:0d:
b0:95:b2:ba:b8:bf:5a:71:68:d8:61:78:31:7e:fb:c9:de:9e:
85:81:98:d1:5b:59:57:e2:d7:6c:a8:e8:cf:1c:35:0c:62:fa:
8b:d5:dc:07:3d:8f:ef:29:90:3e:79:38:30:62:27:75:71:60:
de:d6:f9:0c:18:d5:00:b1:05:ca:f8:8b:00:2b:81:e1:2e:cf:
cc:86:cb:8e:79:6b:da:17:78:d8:6a:de:d8:c5:ab:4f:eb:b1:
55:b0:15:07:a3:65:49:99:e3:ce:de:86:5c:5e:5b:aa:4c:bd:
89:a5:41:60:ff:38:1b:7a:80:8a:14:55:78:de:c0:2e:73:2c:
17:19:d9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 23 10:44:40 2024 by rpki-client on console-ams.rpki-client.org