Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/npNCND4du6Xfvall7VkgeXT-C3A.roa
File: npNCND4du6Xfvall7VkgeXT-C3A.roa (raw, json)
Hash identifier: OihprpyU1lU9E/GfviHD7uY74tK3BrLiaf9zJryOSq4=
Subject key identifier: 9E:93:42:34:3E:1D:BB:A5:DF:BD:A9:65:ED:59:20:79:74:FE:0B:70
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0187463BC492A382F77FB5CD771086A188FD
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/npNCND4du6Xfvall7VkgeXT-C3A.roa
Signing time: Mon 03 Apr 2023 08:28:54 +0000
ROA not before: Mon 03 Apr 2023 08:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203363
IP address blocks: 45.134.36.0/24 maxlen: 24
2.58.203.0/24 maxlen: 24
45.67.84.0/24 maxlen: 24
45.67.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:3b:c4:92:a3:82:f7:7f:b5:cd:77:10:86:a1:88:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Apr 3 08:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e9342343e1dbba5dfbda965ed59207974fe0b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:6f:63:8e:0a:f2:bf:56:ab:7d:59:29:e4:
83:d5:e0:3d:2c:0a:3d:33:8a:fa:72:91:f6:3b:83:
29:61:35:97:02:71:e9:e7:c4:1f:2a:1d:25:4a:26:
8b:d9:c4:8a:c9:16:4a:cc:96:b1:0e:f1:d3:a6:21:
73:13:38:66:34:cb:4a:18:a1:e4:5a:59:f2:39:b5:
3f:87:2a:0e:f1:d1:7b:35:ce:0b:3f:2b:74:b4:ff:
bc:19:99:33:c9:79:62:75:e1:19:b3:3f:4b:35:bb:
62:e1:05:45:ab:9e:aa:14:95:da:92:72:ca:b9:bd:
15:6b:9c:de:a3:d7:8a:e0:25:ec:79:14:a3:76:93:
92:af:13:57:85:5e:21:e9:1c:7b:7d:01:62:96:53:
43:e6:aa:23:65:04:bb:9e:be:6e:a6:5b:e5:38:25:
b0:01:72:f6:96:d4:b5:9e:7e:da:86:27:da:a7:c2:
94:8b:53:4b:60:c2:80:2d:ca:f5:0f:b1:00:31:98:
df:a7:b0:b4:0d:13:21:82:49:39:84:95:98:6c:1a:
76:03:9a:a7:d7:58:d7:be:0e:df:98:20:2a:03:5c:
a0:fd:03:7d:27:97:31:5b:03:56:9b:da:c5:71:17:
69:27:f3:e6:9f:a3:62:aa:75:d6:27:54:9a:23:b8:
89:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:93:42:34:3E:1D:BB:A5:DF:BD:A9:65:ED:59:20:79:74:FE:0B:70
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/npNCND4du6Xfvall7VkgeXT-C3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.203.0/24
45.67.84.0/23
45.134.36.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7a:dd:26:d5:d6:30:40:59:8d:72:1b:ea:de:97:93:ff:ad:
12:e7:34:18:1d:c9:24:f6:b3:a7:a3:6e:8d:11:b1:08:1b:ad:
20:a9:f3:6d:1e:e4:9b:76:b8:43:06:63:3d:ba:9e:8a:8c:2f:
5b:2a:90:ed:19:6c:a7:06:2f:b7:fb:05:90:df:02:99:31:9f:
4a:d0:56:96:b1:b2:00:36:0a:28:74:2f:78:57:2f:f5:8b:dc:
f2:44:46:5e:d8:07:19:f4:98:76:36:56:3e:d7:e2:e8:23:30:
08:88:61:96:e4:b3:f2:d2:18:7c:a6:c5:d7:7c:78:c6:b4:a7:
4b:e7:b5:8e:35:6f:32:ff:e4:e4:f1:3f:90:a2:b8:4e:13:1d:
68:44:1e:e0:7f:4b:5b:10:fc:26:ea:64:b9:a4:c6:10:8e:ee:
89:7e:6c:15:9a:f5:af:60:6b:11:c6:43:05:78:e4:d3:24:12:
76:7d:fb:26:bb:65:88:40:a0:28:b1:db:75:bf:64:da:85:c1:
93:58:f9:1d:13:01:ce:9e:ec:41:fa:75:2e:db:01:52:46:7f:
f6:96:fd:d3:a2:20:cd:3d:17:90:de:13:4d:53:cb:c9:46:14:
53:d8:1f:9f:c6:82:22:e9:a3:64:de:12:d1:2a:78:b7:ad:95:
b6:45:4b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org