Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/N_QsWYVVLPI-sOVjxAimYdK_Dpc.roa
File: N_QsWYVVLPI-sOVjxAimYdK_Dpc.roa (raw, json)
Hash identifier: zqm+PKg5Q6oMewxnPthhplK2nUrgp/cmMtusHOhj9E4=
Subject key identifier: 37:F4:2C:59:85:55:2C:F2:3E:B0:E5:63:C4:08:A6:61:D2:BF:0E:97
Certificate issuer: /CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Certificate serial: 018A9CF3FC09A7972ABA4E1B978045C471FF
Authority key identifier: AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/N_QsWYVVLPI-sOVjxAimYdK_Dpc.roa
Signing time: Sat 16 Sep 2023 07:45:50 +0000
ROA not before: Sat 16 Sep 2023 07:45:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24763
IP address blocks: 193.56.124.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:f3:fc:09:a7:97:2a:ba:4e:1b:97:80:45:c4:71:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9e2efcdc213ac5b1b0879d922a178b850f451f
Validity
Not Before: Sep 16 07:45:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37f42c5985552cf23eb0e563c408a661d2bf0e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:c4:68:ef:2e:ce:1b:ce:40:60:7d:a6:03:
8e:e7:4c:55:65:f3:de:41:6c:d9:a6:e8:fe:9c:bb:
08:39:6d:e8:ef:e5:2c:6c:ce:a8:44:e0:22:13:28:
ef:b1:18:89:e9:19:7d:a4:a1:2a:d7:aa:73:3a:39:
52:bf:3c:aa:04:37:c9:20:81:8a:64:5e:9a:9a:c8:
5c:d4:3e:da:ea:e6:13:1c:26:9b:d3:4a:79:35:0a:
65:a7:c0:d5:0e:a8:28:cc:3d:a9:4d:35:d9:5a:8a:
e0:e6:cd:93:e2:4b:d6:18:a4:cb:b1:ce:09:e4:be:
a1:54:ec:af:5f:f0:fa:b6:a7:f6:f9:56:14:dd:fb:
ae:67:ce:b3:d5:cb:a5:60:d3:f4:03:8b:f3:eb:d2:
cd:19:83:c7:a1:51:dc:1f:74:1e:f2:93:7d:52:a8:
e7:fd:f6:49:9e:55:d4:cb:e1:90:78:34:46:22:e0:
43:66:16:28:66:b6:c6:7f:81:28:e7:a9:4e:21:33:
a8:ae:b1:10:3c:dd:5b:56:f9:2d:40:6d:be:cf:f2:
c7:0d:2f:a5:3f:88:d6:2b:f1:99:49:7e:bf:67:d8:
21:e0:d1:9f:bb:eb:74:7c:84:e6:24:22:a2:81:c4:
2f:ee:ea:6b:02:d9:1c:e3:29:42:79:fa:e5:16:b9:
cb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F4:2C:59:85:55:2C:F2:3E:B0:E5:63:C4:08:A6:61:D2:BF:0E:97
X509v3 Authority Key Identifier:
keyid:AC:9E:2E:FC:DC:21:3A:C5:B1:B0:87:9D:92:2A:17:8B:85:0F:45:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ4u_NwhOsWxsIedkioXi4UPRR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/N_QsWYVVLPI-sOVjxAimYdK_Dpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d1faa9-b5a3-4d49-868a-7c7bf27175c5/1/rJ4u_NwhOsWxsIedkioXi4UPRR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.124.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a6:25:52:0c:38:ed:00:33:ec:3c:af:f3:64:ee:08:a5:43:
28:da:a4:e7:89:48:e8:c5:b4:8d:69:28:ed:19:84:b7:d6:aa:
cf:de:12:b9:86:a1:47:39:e3:8f:25:a2:7b:02:68:59:31:0c:
9d:19:6d:66:ba:f0:1a:2b:56:c0:68:d2:f2:11:06:2f:e9:57:
a3:37:76:7d:a9:ca:11:17:c7:0d:0a:96:b9:ce:10:08:14:1e:
a3:55:33:33:42:48:f5:f5:7a:83:3f:ac:1d:3f:65:5f:5e:fb:
80:86:f9:d0:2c:7a:22:b6:de:9c:08:92:e1:37:d5:69:1d:4c:
a7:d6:e8:49:b6:50:fa:2d:7d:a0:37:69:e0:09:00:98:aa:2e:
8d:1a:25:7c:ad:53:56:51:38:06:a3:59:4a:3d:df:c0:3b:4c:
4f:12:42:13:a3:8a:45:dd:25:89:48:4b:93:c0:eb:e6:c3:14:
22:5e:c1:77:c7:25:12:b6:66:40:65:39:d1:67:d8:53:fa:b4:
4a:a5:f7:b0:75:7b:d3:f0:13:8a:9a:c5:04:9f:c0:d5:82:c1:
1f:87:2a:96:ea:a1:bc:93:55:ca:a9:b6:c5:82:14:08:36:95:
77:5d:e5:f6:ed:c9:de:c7:99:2a:12:36:9d:a5:0f:97:a8:02:
14:2e:1f:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqc8/wJp5cquk4bl4BFxHH/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWUyZWZjZGMyMTNhYzViMWIwODc5ZDkyMmExNzhiODUw
ZjQ1MWYwHhcNMjMwOTE2MDc0NTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2Y0MmM1OTg1NTUyY2YyM2ViMGU1NjNjNDA4YTY2MWQyYmYwZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVLEaO8uzhvOQGB9pgOO50xVZfPe
QWzZpuj+nLsIOW3o7+UsbM6oROAiEyjvsRiJ6Rl9pKEq16pzOjlSvzyqBDfJIIGK
ZF6amshc1D7a6uYTHCab00p5NQplp8DVDqgozD2pTTXZWorg5s2T4kvWGKTLsc4J
5L6hVOyvX/D6tqf2+VYU3fuuZ86z1culYNP0A4vz69LNGYPHoVHcH3Qe8pN9Uqjn
/fZJnlXUy+GQeDRGIuBDZhYoZrbGf4Eo56lOITOorrEQPN1bVvktQG2+z/LHDS+l
P4jWK/GZSX6/Z9gh4NGfu+t0fITmJCKigcQv7uprAtkc4ylCefrlFrnLowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDf0LFmFVSzyPrDlY8QIpmHSvw6XMB8GA1UdIwQY
MBaAFKyeLvzcITrFsbCHnZIqF4uFD0UfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEt
N2M3YmYyNzE3NWM1LzEvTl9Rc1dZVlZMUEktc09WanhBaW1ZZEtfRHBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9kMWZhYTktYjVhMy00ZDQ5LTg2OGEtN2M3YmYyNzE3NWM1
LzEvcko0dV9Od2hPc1d4c0llZGtpb1hpNFVQUlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTh8MA0G
CSqGSIb3DQEBCwUAA4IBAQCQpiVSDDjtADPsPK/zZO4IpUMo2qTniUjoxbSNaSjt
GYS31qrP3hK5hqFHOeOPJaJ7AmhZMQydGW1muvAaK1bAaNLyEQYv6VejN3Z9qcoR
F8cNCpa5zhAIFB6jVTMzQkj19XqDP6wdP2VfXvuAhvnQLHoitt6cCJLhN9VpHUyn
1uhJtlD6LX2gN2ngCQCYqi6NGiV8rVNWUTgGo1lKPd/AO0xPEkITo4pF3SWJSEuT
wOvmwxQiXsF3xyUStmZAZTnRZ9hT+rRKpfewdXvT8BOKmsUEn8DVgsEfhyqW6qG8
k1XKqbbFghQINpV3XeX27cnex5kqEjadpQ+XqAIULh8U
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:14:28 2024 by rpki-client on console.sobornost.net