Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/NNupiFZLeVERgO3XBtoLuY3uwh0.roa
File: NNupiFZLeVERgO3XBtoLuY3uwh0.roa (raw, json)
Hash identifier: s/3AmJJE4qcHXjkOTCkA3aPNWSF5F+6GFRnggP5D/4o=
Subject key identifier: 34:DB:A9:88:56:4B:79:51:11:80:ED:D7:06:DA:0B:B9:8D:EE:C2:1D
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 0189DEBEE3C7EF9E06BD562A88C1F1FB6F41
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/NNupiFZLeVERgO3XBtoLuY3uwh0.roa
Signing time: Thu 10 Aug 2023 09:19:59 +0000
ROA not before: Thu 10 Aug 2023 09:19:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209732
IP address blocks: 193.151.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:be:e3:c7:ef:9e:06:bd:56:2a:88:c1:f1:fb:6f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Aug 10 09:19:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34dba988564b79511180edd706da0bb98deec21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d6:5d:47:ca:d8:b9:33:63:df:88:0d:99:87:
17:76:80:4d:ca:d6:33:6f:b5:99:ef:12:a7:ab:68:
01:f7:b1:46:7b:af:6e:ff:a4:5f:02:8a:70:e7:fc:
89:c7:62:00:be:2d:d1:d5:b6:d8:e3:2a:43:b0:0c:
47:f4:31:99:81:af:45:6f:f5:52:c9:bd:0a:03:25:
13:c4:36:25:e0:a3:81:70:0c:ad:26:22:d4:b8:be:
8e:86:4d:9b:46:ff:bb:c6:53:eb:89:a7:71:8a:48:
fb:a0:6a:00:ed:23:c4:4b:d7:4a:06:49:5d:8e:42:
d5:21:96:d9:c7:61:20:20:1d:e2:e0:da:9a:a9:d0:
81:42:ad:18:07:b1:cf:be:79:93:8f:5f:11:b4:e2:
a1:c1:da:91:5e:08:94:6d:0b:02:f2:8f:fc:c4:d4:
b8:fb:48:d3:7a:68:2e:ce:a4:cf:5d:dc:4d:30:e9:
48:5e:6e:c7:25:2b:cd:bc:b5:6f:c2:79:9e:75:8b:
f4:6a:c8:8a:f0:e0:6f:e6:9c:4f:8d:17:c8:01:32:
ae:c1:03:97:a8:be:16:1f:ab:91:6e:bc:10:82:38:
30:7a:2f:92:27:43:b4:bf:25:ec:49:fd:05:5b:80:
bc:d2:6b:2f:93:8a:8e:45:ee:bd:0c:d4:f8:44:b5:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DB:A9:88:56:4B:79:51:11:80:ED:D7:06:DA:0B:B9:8D:EE:C2:1D
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/NNupiFZLeVERgO3XBtoLuY3uwh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.165.0/24
Signature Algorithm: sha256WithRSAEncryption
34:46:32:cf:e6:42:32:16:35:a6:ac:ec:21:c2:57:be:a3:e4:
44:18:cd:64:25:56:f7:13:3f:12:a8:09:c3:e3:8b:f2:ec:78:
8b:b5:11:aa:86:da:e3:c2:9a:2a:e8:37:a6:89:ea:14:2d:dc:
aa:1c:66:bd:b9:7e:e5:85:24:b4:83:b0:67:9d:c8:95:35:f5:
fb:ca:2d:5a:97:85:21:71:06:7e:4e:d7:9d:01:45:bb:30:a6:
b7:d1:44:1a:3d:f7:1f:bb:78:91:29:f7:1e:31:13:63:15:c6:
cb:ac:b8:1d:29:0b:5f:3f:4e:f9:ad:68:24:ce:17:c4:6b:a9:
66:3a:26:ea:b5:12:ab:5a:eb:05:29:87:48:33:a1:75:59:7d:
0b:28:e4:86:34:4d:39:ab:10:3e:a0:bb:99:cb:fd:71:68:9e:
f5:e4:80:45:14:21:ee:d0:23:16:fb:9e:b1:a6:3e:76:11:1a:
ee:31:42:47:b4:ea:7b:10:1a:f1:78:fe:a7:ba:b3:73:c0:62:
36:7f:12:76:dc:73:e6:a0:06:d1:2c:1f:be:9d:99:5b:17:27:
89:a9:e3:50:76:75:f0:2d:6f:fc:d9:57:f0:3f:0b:4f:a3:bd:
82:af:17:ae:14:dc:db:93:ff:e6:fb:45:9e:ad:a1:32:c6:ed:
34:88:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:13 2024 by rpki-client on console-ams.rpki-client.org