Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/NSV3muW_RjeK9IUuwSyXmC9A95o.roa
File: NSV3muW_RjeK9IUuwSyXmC9A95o.roa (raw, json)
Hash identifier: G0bz9hZkF/tlFJJ6wGHFI6SXXD4qJ3cfU7nZkGOSm9I=
Subject key identifier: 35:25:77:9A:E5:BF:46:37:8A:F4:85:2E:C1:2C:97:98:2F:40:F7:9A
Certificate issuer: /CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Certificate serial: 01857246B37A7C2FFF6801EFEC6789237DAD
Authority key identifier: 80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/NSV3muW_RjeK9IUuwSyXmC9A95o.roa
Signing time: Mon 02 Jan 2023 11:38:34 +0000
ROA not before: Mon 02 Jan 2023 11:38:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61232
IP address blocks: 193.135.57.0/24 maxlen: 24
193.135.56.0/24 maxlen: 24
2001:678:e48::/48 maxlen: 48
2001:678:e44::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b3:7a:7c:2f:ff:68:01:ef:ec:67:89:23:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8050504f4b1776e80b8ad9f8b356e613b585b35a
Validity
Not Before: Jan 2 11:38:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3525779ae5bf46378af4852ec12c97982f40f79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:24:22:8a:ba:56:0c:f2:80:d3:d7:7e:93:
a3:08:4a:e5:88:82:cd:e2:8f:d0:83:10:23:db:e7:
1b:f7:15:ba:e2:0a:e4:99:62:fe:cb:37:1d:7f:6b:
ab:5b:95:49:39:9b:20:b6:3d:c5:98:bb:af:ea:91:
d0:ae:fa:c1:fc:4e:6d:c8:01:0d:f3:4f:03:07:ad:
aa:84:e3:af:e0:da:98:be:d6:c5:f1:77:a9:98:9d:
41:c3:90:0c:05:2b:56:03:d2:13:f7:f4:3e:c1:58:
34:ae:00:fa:a4:10:00:40:1b:ae:22:a9:0c:c1:09:
c9:64:9e:69:0a:3e:fb:99:55:56:8f:92:b4:2a:7b:
ee:93:2f:c7:e1:79:fd:b4:10:24:f8:23:33:83:ec:
c9:e3:38:cc:bf:e7:a5:4d:f4:76:a9:8c:df:d2:02:
23:11:b2:82:cb:e6:b2:2c:bf:28:34:84:b6:92:d6:
28:ea:5e:a9:f8:e5:33:ce:e1:67:7b:f8:0a:ba:9c:
6d:8e:d4:c9:93:9a:2c:07:94:8c:06:35:f1:4c:2e:
32:27:16:a4:7b:18:33:e2:d3:63:91:be:a9:93:4d:
67:2b:36:4d:65:6b:78:75:ff:30:dc:fc:73:45:6e:
3e:0b:d3:8d:9c:f7:41:92:d5:9e:6f:ce:c6:ad:8e:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:25:77:9A:E5:BF:46:37:8A:F4:85:2E:C1:2C:97:98:2F:40:F7:9A
X509v3 Authority Key Identifier:
keyid:80:50:50:4F:4B:17:76:E8:0B:8A:D9:F8:B3:56:E6:13:B5:85:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFBQT0sXdugLitn4s1bmE7WFs1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/NSV3muW_RjeK9IUuwSyXmC9A95o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/b59715-b05a-4b4a-a922-0144a3282a2e/1/gFBQT0sXdugLitn4s1bmE7WFs1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.56.0/23
IPv6:
2001:678:e44::/48
2001:678:e48::/48
Signature Algorithm: sha256WithRSAEncryption
02:19:9b:f5:51:1b:f8:0c:9e:f6:33:41:b6:c5:30:6b:d7:22:
4b:e2:6a:37:7e:19:52:ac:a5:ee:42:f5:c2:4b:76:8f:a9:6b:
51:fa:b0:eb:8d:08:b2:c9:cb:29:70:6a:11:5e:9b:ae:e6:2d:
b9:09:9e:fc:a6:0c:77:7b:f1:74:62:62:30:d3:03:cb:ca:c3:
28:e1:90:02:43:10:f8:69:1c:e1:9b:84:f1:10:a4:86:b7:7e:
5a:d4:ff:f1:73:ee:a6:66:73:8e:90:5a:c2:3b:73:65:d3:ee:
d3:8a:fa:5c:b4:27:cb:e6:23:d8:77:3e:f0:8f:fe:e8:e1:85:
e0:63:3b:12:69:f2:7c:e2:b1:e7:6d:2d:25:85:a3:7b:8f:18:
cc:2a:24:a8:b3:6b:75:d7:25:0b:9f:b0:99:d8:ff:af:97:33:
51:32:56:b7:08:45:48:5a:53:40:15:68:0a:d3:2b:35:0e:4c:
2e:c0:96:92:1a:e6:e8:3c:97:19:f8:9c:67:cb:43:96:5f:ba:
ae:92:ce:de:b8:3f:e2:ea:91:84:3b:f3:78:26:1f:91:81:36:
8b:4e:43:5a:59:e9:85:10:8e:2d:4d:6d:27:14:bb:51:41:06:
c7:7e:df:f9:ea:3e:23:93:20:1c:dc:77:6b:33:75:0d:fc:5e:
1a:30:6b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 14:52:31 2023 by rpki-client on console-fra.rpki-client.org