Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/37npw_OaDbWIC1Ci4jTF-hyB8q0.roa
File: 37npw_OaDbWIC1Ci4jTF-hyB8q0.roa (raw, json)
Hash identifier: izl3moCTrRIsxcpGnJ8hXxtewJyWrS9BmUg/dVPJOcU=
Subject key identifier: DF:B9:E9:C3:F3:9A:0D:B5:88:0B:50:A2:E2:34:C5:FA:1C:81:F2:AD
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0186B8794521B651F21493C6838A8EC18706
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/37npw_OaDbWIC1Ci4jTF-hyB8q0.roa
Signing time: Mon 06 Mar 2023 19:50:00 +0000
ROA not before: Mon 06 Mar 2023 19:50:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20853
IP address blocks: 195.210.9.0/24 maxlen: 24
193.93.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b8:79:45:21:b6:51:f2:14:93:c6:83:8a:8e:c1:87:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Mar 6 19:50:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfb9e9c3f39a0db5880b50a2e234c5fa1c81f2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3c:4c:5a:b3:ce:65:46:8c:70:a1:fa:64:2c:
2d:0b:cb:53:4e:1b:f2:84:f5:d3:3b:71:a6:5b:44:
ef:5c:08:a3:43:66:dd:1c:8d:00:14:61:ca:bf:78:
70:71:b3:46:d9:41:fb:d1:a5:68:49:b1:c5:98:36:
f8:8b:13:0c:30:f0:f7:13:43:48:75:b8:32:b2:1d:
88:64:bc:22:c8:1a:1c:eb:ba:b5:ed:51:73:bb:14:
d8:09:00:ca:7d:0c:06:3d:02:23:45:f8:ff:59:82:
69:8f:63:24:57:a6:6f:38:71:62:37:9e:b5:53:1a:
79:31:03:d6:41:c7:13:b8:b2:ec:7d:38:7f:0c:21:
ec:d0:80:a9:6f:06:fe:2e:83:42:dd:a5:86:1e:29:
78:32:9a:76:4d:eb:35:96:d9:3d:a9:47:9e:3e:6b:
70:b1:7d:23:2b:de:46:e0:0c:40:89:0b:73:53:82:
1d:64:34:bc:a2:62:02:49:87:87:57:35:ae:4f:fd:
12:c4:4a:34:12:17:ca:24:bf:5a:52:61:24:c8:b2:
b4:6c:da:d4:ff:20:75:4d:7d:40:cb:55:78:5a:ca:
0c:3a:db:7a:b4:af:e7:fe:e0:00:3e:bb:23:9b:e8:
b3:44:46:92:63:0c:e9:88:21:3c:c9:e3:9f:17:54:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:E9:C3:F3:9A:0D:B5:88:0B:50:A2:E2:34:C5:FA:1C:81:F2:AD
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/37npw_OaDbWIC1Ci4jTF-hyB8q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.61.0/24
195.210.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bf:3f:36:da:e0:2e:e4:99:43:bc:77:a4:f5:8e:30:b0:60:
74:fb:12:43:31:8c:51:c5:83:1f:56:6b:ed:3b:0d:74:5c:01:
cd:79:ce:54:f9:af:95:7e:1f:0e:5a:56:ed:96:ff:de:36:6b:
e3:01:bd:a0:03:6e:1a:a0:c8:cb:15:7c:fc:19:97:52:38:d7:
fd:4a:c2:8c:ad:39:55:fd:d9:2c:92:9e:b6:a6:1a:8c:5f:a4:
42:2c:3a:57:4a:b9:2f:64:6d:0f:24:27:75:dd:ca:4e:17:d4:
3a:e0:da:c6:f5:96:e3:58:7d:a9:fd:eb:93:9b:13:83:24:2c:
2e:ab:6b:7b:b5:f7:ad:7c:f0:2f:8c:92:72:60:7b:ba:5e:03:
cf:63:46:16:dc:02:46:04:e2:49:77:97:59:7d:f2:0e:9f:1b:
9b:32:7f:6e:8c:8b:e0:06:ef:6f:41:f8:64:81:90:f8:e6:0f:
a6:4e:a1:5f:4c:ec:72:fd:80:ef:35:4f:c6:cf:e0:cb:d2:0f:
cc:13:b1:fa:98:de:de:74:8c:b2:98:4b:c8:04:2e:29:7c:0c:
18:7e:be:8c:5d:a5:38:55:20:bb:10:ed:bc:b3:b0:07:9b:ac:
59:ff:70:ee:6c:91:fb:e1:e3:a2:27:91:40:06:65:53:50:bf:
04:10:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:45 2023 by rpki-client on console-ams.rpki-client.org