Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/nDPJ-Zb653HroRaByQ4mkwRDlE4.roa
File: nDPJ-Zb653HroRaByQ4mkwRDlE4.roa (raw, json)
Hash identifier: nJu7YL8/PVyren+xk8cOeD7/xHrk0rb6jfcHw8P0SWA=
Subject key identifier: 9C:33:C9:F9:96:FA:E7:71:EB:A1:16:81:C9:0E:26:93:04:43:94:4E
Certificate issuer: /CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Certificate serial: 01856E78B73C00A22118877C8188EA04A727
Authority key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/nDPJ-Zb653HroRaByQ4mkwRDlE4.roa
Signing time: Sun 01 Jan 2023 17:54:42 +0000
ROA not before: Sun 01 Jan 2023 17:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201213
IP address blocks: 91.199.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:78:b7:3c:00:a2:21:18:87:7c:81:88:ea:04:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Validity
Not Before: Jan 1 17:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c33c9f996fae771eba11681c90e26930443944e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b5:bb:19:d7:e0:d9:f1:36:74:f0:10:0b:48:
be:71:15:6b:4a:aa:2b:18:98:38:c9:4a:a4:fd:74:
8e:0f:d2:95:dc:c0:97:44:39:c1:78:fd:95:91:52:
3c:32:70:39:bf:16:72:a3:12:a8:23:62:18:d4:dc:
06:3f:29:3e:29:69:2c:2a:8e:60:bc:fd:52:24:05:
cb:f4:99:eb:db:09:15:7c:f6:1e:b2:10:12:b9:4b:
20:46:6c:82:83:fd:41:1d:55:17:9f:b1:de:ad:90:
0f:1e:73:04:3a:5f:6a:bb:a0:db:52:db:6f:bc:72:
77:52:84:06:0e:91:7d:76:20:7a:70:ae:28:f9:0e:
2c:58:e1:5c:83:e7:37:ea:d7:1d:94:f4:5e:ae:71:
6a:62:b6:e4:e2:d7:18:e6:11:c3:a1:04:fc:98:1f:
66:ba:50:a3:31:a3:2d:aa:f9:5d:90:74:53:11:6d:
e3:52:a4:68:b1:53:e4:03:39:3b:4d:d9:75:d3:bc:
6c:63:a2:c6:c6:ff:18:d4:5c:31:97:c9:f5:d9:cd:
d6:d1:22:8e:fe:c4:9c:8f:4a:9f:85:ab:73:f0:17:
57:b7:5b:16:7c:92:a0:1f:1f:ba:5b:3b:c7:e1:b5:
f8:68:41:3c:4e:23:5e:61:85:ac:9b:2b:fd:46:4f:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:33:C9:F9:96:FA:E7:71:EB:A1:16:81:C9:0E:26:93:04:43:94:4E
X509v3 Authority Key Identifier:
keyid:0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/nDPJ-Zb653HroRaByQ4mkwRDlE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.75.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a0:be:13:bd:bb:d0:9a:94:b9:4f:1a:1c:c5:6f:d0:41:39:
de:f1:0e:ee:c4:9f:d7:d2:dc:cd:76:04:12:db:0e:08:d7:eb:
ac:7a:a8:5e:9b:fe:00:52:0f:90:6f:1c:e8:a8:3a:8b:b0:0a:
13:11:f0:29:0d:d2:1d:77:8e:b0:57:85:b4:10:83:2d:b4:f3:
1d:af:fb:0b:b8:5f:8e:6e:93:73:ce:67:55:e7:1e:43:d4:f4:
78:4f:34:51:9c:8f:83:37:08:ae:ee:c9:e0:f2:94:13:82:c4:
51:18:a8:fd:82:66:3a:2c:ba:36:2f:42:46:24:e0:00:97:e8:
82:5d:f8:45:41:9d:b2:5a:53:42:4e:94:97:78:6b:32:71:83:
a9:ee:a5:d6:a5:fd:bf:87:3d:6a:2f:28:d0:91:53:7c:a4:ea:
ac:74:80:45:a6:77:33:fc:ed:9b:a0:a8:b3:ad:f5:41:4c:48:
50:3f:cb:81:09:79:79:71:0a:aa:92:61:2b:70:dc:29:e0:7f:
fe:54:87:6a:2e:8f:76:fb:b5:23:c7:49:4a:8c:7a:07:e3:32:
39:f7:c7:2e:8e:a7:d8:d4:2f:75:bf:ab:41:f1:de:c2:63:47:
fd:d3:1d:65:39:0c:aa:69:34:7a:bd:a7:23:1b:cf:cf:4a:81:
7c:41:e2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:57 2024 by rpki-client on console-ams.rpki-client.org