Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/Njp7b7NBWYVLcO7uIbscIeBOOnQ.roa
File: Njp7b7NBWYVLcO7uIbscIeBOOnQ.roa (raw, json)
Hash identifier: aub1qI4I58gyiMIuZuBp7krysclsX4Md0Rk1+MPANns=
Subject key identifier: 36:3A:7B:6F:B3:41:59:85:4B:70:EE:EE:21:BB:1C:21:E0:4E:3A:74
Certificate issuer: /CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Certificate serial: 018570153668293F2D1477AEA762876E5AD5
Authority key identifier: FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/Njp7b7NBWYVLcO7uIbscIeBOOnQ.roa
Signing time: Mon 02 Jan 2023 01:25:16 +0000
ROA not before: Mon 02 Jan 2023 01:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 193.26.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:36:68:29:3f:2d:14:77:ae:a7:62:87:6e:5a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0c9f30e3b46d50b8d1bf79b9d1db84f25134ba
Validity
Not Before: Jan 2 01:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=363a7b6fb34159854b70eeee21bb1c21e04e3a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:07:19:f4:45:0e:aa:29:e5:fa:ae:8f:2c:c7:
1f:8d:5e:89:fd:8d:a8:79:e9:c0:97:8b:6e:1c:03:
08:c0:73:e7:77:8e:c1:0d:6d:ec:21:84:ca:d8:3c:
fb:fb:55:cb:08:fb:e2:2d:cc:b8:6f:61:d7:61:6d:
b6:21:83:b9:d7:e4:54:ce:4a:f4:a3:86:d7:0e:b4:
d1:04:c4:c9:ea:d3:bf:3e:85:91:f7:6f:b4:65:26:
9e:bc:5d:4a:fe:b7:f2:2c:10:07:a4:90:62:c8:08:
90:42:b7:9a:a5:87:05:32:f8:aa:c3:69:62:5e:c6:
e9:93:d0:e5:3b:d7:bc:2d:8e:b6:c8:d3:ea:ba:96:
3c:b9:e5:11:b4:62:49:22:c1:7f:c3:20:00:b9:74:
ee:f8:1a:20:f8:4f:65:20:fb:25:9d:8f:37:98:68:
37:84:93:51:20:da:10:87:7f:b7:b7:da:7b:bf:21:
89:58:6c:4b:6c:4b:e4:45:55:99:93:3b:d9:09:50:
16:77:dc:02:23:35:66:24:5c:7c:93:8a:d0:19:64:
09:ed:00:28:70:52:ab:6e:3e:e7:25:a5:b1:12:1f:
85:9c:81:8c:da:ea:da:51:32:24:b0:ee:0d:1c:b6:
66:0d:c5:2d:41:c2:05:d0:77:c5:6d:7c:b1:33:80:
7a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3A:7B:6F:B3:41:59:85:4B:70:EE:EE:21:BB:1C:21:E0:4E:3A:74
X509v3 Authority Key Identifier:
keyid:FE:0C:9F:30:E3:B4:6D:50:B8:D1:BF:79:B9:D1:DB:84:F2:51:34:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gyfMOO0bVC40b95udHbhPJRNLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/Njp7b7NBWYVLcO7uIbscIeBOOnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/b9ed6c-e8c5-431e-b188-f5200f549377/1/_gyfMOO0bVC40b95udHbhPJRNLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.21.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:e9:9a:10:01:bc:4f:77:8c:2a:ac:2a:91:8c:9c:93:f5:3d:
30:09:ab:e9:c2:49:db:32:5b:cb:60:c8:f1:43:b2:dc:b8:dd:
8a:b4:08:7f:1e:04:d8:99:8b:b7:63:de:57:1d:53:ab:bd:b8:
b8:81:cd:17:a1:33:7a:94:f0:52:00:0b:f2:4c:2f:f5:e7:2b:
25:5a:6a:f5:11:64:87:95:8e:2c:c0:e9:d9:eb:c7:fc:7a:b3:
8b:c4:73:73:98:59:c9:75:f0:ae:64:09:62:fa:22:6e:53:8f:
c8:65:88:ab:8d:ca:4b:ab:5b:12:b1:e7:26:93:9c:38:58:b3:
10:fd:cd:63:5f:3e:92:c6:3d:90:2a:01:b3:b5:62:2e:7c:8b:
d6:29:4c:4f:f0:18:57:5e:a6:fc:75:4d:07:54:80:5a:5c:b0:
ea:76:d9:73:5d:6b:51:bd:d7:37:e0:06:44:eb:f8:76:91:e7:
54:e1:74:05:31:d4:a3:0f:ae:45:ee:92:73:78:ff:e8:1c:c8:
d2:09:dd:b9:99:e5:8c:1e:a4:86:26:e4:b7:ce:b4:c3:86:da:
b7:ae:77:bc:83:0e:72:af:a2:dd:0f:30:27:3d:7e:1d:4a:41:
94:02:59:5a:ee:97:df:11:1d:1a:1d:ff:68:de:4f:a8:9f:86:
97:78:76:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:43 2024 by rpki-client on console-ams.rpki-client.org