Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/nkJNUCSyp40TcWsB7IX6YNEk63M.roa
File: nkJNUCSyp40TcWsB7IX6YNEk63M.roa (raw, json)
Hash identifier: jVCU5QL1wov0Inij9+GgnVVbF67W7p6e6WKw4o3cLM8=
Subject key identifier: 9E:42:4D:50:24:B2:A7:8D:13:71:6B:01:EC:85:FA:60:D1:24:EB:73
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 01857082C2BBEFB3795E20B381456F9D168B
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/nkJNUCSyp40TcWsB7IX6YNEk63M.roa
Signing time: Mon 02 Jan 2023 03:24:55 +0000
ROA not before: Mon 02 Jan 2023 03:24:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3356
IP address blocks: 193.42.217.0/24 maxlen: 24
193.42.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:c2:bb:ef:b3:79:5e:20:b3:81:45:6f:9d:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 2 03:24:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e424d5024b2a78d13716b01ec85fa60d124eb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e2:2c:54:4c:75:2a:44:b7:4a:47:f3:37:ec:
99:b0:4f:48:9a:bb:5b:1a:ac:ac:5e:a6:2b:7c:39:
5a:b2:c5:ea:4d:2b:96:b0:15:4d:46:78:9a:51:41:
ba:11:ed:81:19:ef:d8:a5:25:ee:19:dd:94:f2:33:
26:bd:af:b1:04:9a:0a:15:aa:05:da:c5:06:a9:3b:
17:6c:e2:a7:e7:99:06:11:97:66:1a:e0:f8:02:9a:
57:aa:fa:75:47:de:03:64:ae:88:c8:c7:3a:d0:84:
db:14:02:a3:bc:3a:7e:42:8e:bc:c6:e9:a1:6d:71:
a7:fb:ed:f2:2d:1d:36:18:6c:88:aa:a0:25:25:05:
d8:61:79:dc:6c:ab:03:11:ad:5b:dc:84:34:71:0d:
6d:b1:d9:8f:d3:67:70:4f:98:07:20:8e:bd:ba:fb:
db:38:2c:6d:93:87:5b:36:d6:ab:a6:a6:a7:02:92:
e8:46:d8:f0:40:b1:b7:a3:66:c6:5b:5f:82:a9:93:
eb:80:a3:70:0f:54:ab:d4:47:28:f7:22:fb:f5:e6:
08:e4:2c:8c:b3:76:14:33:d7:8f:f9:b2:eb:fd:3e:
e1:ba:2d:86:7e:01:0b:41:3b:2c:04:52:2e:ec:76:
4c:37:4f:5f:0d:0d:ac:1d:f4:90:24:6b:d2:25:97:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:42:4D:50:24:B2:A7:8D:13:71:6B:01:EC:85:FA:60:D1:24:EB:73
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/nkJNUCSyp40TcWsB7IX6YNEk63M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.214.0/24
193.42.217.0/24
Signature Algorithm: sha256WithRSAEncryption
78:59:17:b9:db:7d:4b:f8:53:91:9a:0b:14:6a:3f:32:18:9e:
9a:f1:5c:79:bb:e7:76:93:f7:5b:c8:b3:ef:2a:f9:bd:46:67:
34:1d:bf:6b:bf:9e:54:58:80:ec:83:2d:52:28:e9:ca:ca:6b:
32:8e:04:bc:43:fc:24:60:06:13:0b:75:c4:6f:cf:94:a9:89:
40:44:52:35:61:8a:e1:23:bd:5c:6e:5e:d9:cb:74:5a:86:c6:
b0:17:20:b3:68:18:9c:22:2f:dc:45:ef:8d:ac:f4:bf:c5:d4:
7c:9f:dc:d6:24:d5:40:07:b7:09:16:fc:cd:7e:a9:74:1f:98:
10:e5:85:03:11:a7:ed:f4:dd:76:07:ba:ab:ee:5b:02:59:9b:
2a:98:85:dd:7a:7e:a8:58:0a:25:84:b6:34:88:d4:5c:0d:f3:
31:86:57:0f:ac:b9:71:43:f3:97:2c:26:ef:f5:42:18:b3:08:
54:c7:dd:7a:6b:d6:52:de:6a:74:53:82:47:64:9c:a8:77:9f:
0e:fd:60:7f:b6:56:31:b5:1d:3e:78:0c:b1:75:d0:d7:a4:22:
11:9e:09:98:4a:d4:5d:5a:82:d8:27:ea:92:24:bc:3f:11:5c:
66:04:17:74:e8:e7:22:0e:6d:b1:d6:ef:15:10:ed:b9:6e:a0:
7e:de:2b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 08:07:46 2023 by rpki-client on console-ams.rpki-client.org