Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/nIz90rQDIDcr0j8PeR7PjMPvCBo.roa
File: nIz90rQDIDcr0j8PeR7PjMPvCBo.roa (raw, json)
Hash identifier: 7Lp4A3St3n5EKVaW0MumhdeXV9+6FN5xbn/0A1+BrVQ=
Subject key identifier: 9C:8C:FD:D2:B4:03:20:37:2B:D2:3F:0F:79:1E:CF:8C:C3:EF:08:1A
Certificate issuer: /CN=e9fd155b08ee1a0df3ca418575ea3af901a82853
Certificate serial: 01856EAFE589245D49B9716CA40F82EC10C6
Authority key identifier: E9:FD:15:5B:08:EE:1A:0D:F3:CA:41:85:75:EA:3A:F9:01:A8:28:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6f0VWwjuGg3zykGFdeo6-QGoKFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/nIz90rQDIDcr0j8PeR7PjMPvCBo.roa
Signing time: Sun 01 Jan 2023 18:54:59 +0000
ROA not before: Sun 01 Jan 2023 18:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 195.191.145.0/24 maxlen: 24
195.191.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:e5:89:24:5d:49:b9:71:6c:a4:0f:82:ec:10:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9fd155b08ee1a0df3ca418575ea3af901a82853
Validity
Not Before: Jan 1 18:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c8cfdd2b40320372bd23f0f791ecf8cc3ef081a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:65:00:43:c9:ac:f0:65:cb:e4:99:74:39:
9a:db:72:c2:6e:05:8c:88:61:c9:b2:7b:f3:1b:4d:
9c:f5:48:ec:67:1f:85:70:a1:52:91:90:79:1a:72:
c8:62:55:56:94:f1:0e:20:aa:62:71:b5:85:bf:7f:
3a:33:21:29:f9:e4:ef:6a:e5:97:60:25:18:8b:bb:
81:8d:82:e6:f5:12:bb:61:ba:ce:3c:3b:f5:e7:f9:
3f:f8:04:02:67:61:2a:63:7c:4c:60:25:91:73:52:
0a:33:5d:d3:68:f9:2a:48:7c:cd:93:28:56:a1:dd:
bd:37:38:a7:08:5a:93:9d:4d:d9:45:cc:0f:8c:a8:
33:91:0c:dc:a0:16:9e:f9:02:29:1c:25:ec:62:da:
94:54:d7:29:d7:98:18:2e:c9:ba:27:80:42:fa:34:
a8:48:09:5f:5c:b7:ff:60:10:83:26:88:62:c4:61:
b8:1e:00:92:10:a6:ec:96:3d:4e:22:4d:18:c6:fa:
35:aa:b5:bc:72:59:52:80:e9:dc:f0:02:d6:28:96:
87:82:7e:85:5a:da:6d:c9:c1:72:1c:5c:20:9a:eb:
b1:79:a0:74:58:de:a8:6c:96:a2:d5:8b:11:23:14:
98:c9:af:79:6a:35:4f:3e:43:01:98:d9:1e:56:4d:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8C:FD:D2:B4:03:20:37:2B:D2:3F:0F:79:1E:CF:8C:C3:EF:08:1A
X509v3 Authority Key Identifier:
keyid:E9:FD:15:5B:08:EE:1A:0D:F3:CA:41:85:75:EA:3A:F9:01:A8:28:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f0VWwjuGg3zykGFdeo6-QGoKFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/nIz90rQDIDcr0j8PeR7PjMPvCBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ff4d36-6885-44ff-a052-2fb03f67bc44/1/6f0VWwjuGg3zykGFdeo6-QGoKFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.144.0/23
Signature Algorithm: sha256WithRSAEncryption
49:65:ce:9c:13:6f:bf:1b:bb:5b:54:a2:a5:aa:c0:af:b6:c4:
a9:db:47:5d:ca:a8:95:80:20:68:b2:98:09:ac:7d:13:c1:41:
a4:c7:73:86:e1:f5:de:11:12:44:31:08:83:ec:3c:dc:8f:44:
65:b9:d6:5c:e0:f3:3a:43:c4:33:f1:ad:65:77:24:86:21:64:
79:37:8b:50:b6:13:17:60:f0:7d:bc:08:2c:b3:30:a1:12:4e:
34:ba:98:e8:c4:d2:8e:b2:c0:5f:50:cf:fe:28:5e:5b:64:16:
3d:51:d2:12:17:df:3d:bf:e5:c7:1f:4e:a5:ed:80:80:42:a7:
04:25:b7:9e:1a:05:d2:79:9d:03:ce:b1:6b:9a:28:ed:f1:43:
67:6f:21:7c:87:09:d9:53:8a:52:7e:cf:c7:17:cd:b4:0e:ca:
d2:ee:d4:c4:75:57:0c:bf:e1:eb:cd:2c:06:50:07:cb:a4:b3:
95:7b:09:8b:25:59:60:97:51:6c:52:88:3d:41:a4:9c:b6:24:
7a:53:15:28:32:86:76:55:c4:3c:44:86:22:e3:7d:2b:f8:e1:
49:33:a9:c0:f9:7f:d3:d2:f7:57:08:0d:26:1e:17:41:b1:97:
77:b2:7b:e1:d0:8c:6a:f8:fc:ac:f9:b0:d3:58:57:d0:eb:71:
2a:9b:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:18 2023 by rpki-client on console-fra.rpki-client.org