Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/n7MjrQTq4dZGVFV2tkV6nhkykFc.roa
File: n7MjrQTq4dZGVFV2tkV6nhkykFc.roa (raw, json)
Hash identifier: o6sUbrLPSQ1QLoA+48DqqE468TT9sCtP5py6Gq2F214=
Subject key identifier: 9F:B3:23:AD:04:EA:E1:D6:46:54:55:76:B6:45:7A:9E:19:32:90:57
Certificate issuer: /CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Certificate serial: 018697A08798756A844CAF19212477B61918
Authority key identifier: 9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/n7MjrQTq4dZGVFV2tkV6nhkykFc.roa
Signing time: Tue 28 Feb 2023 10:45:25 +0000
ROA not before: Tue 28 Feb 2023 10:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213245
IP address blocks: 185.19.82.0/24 maxlen: 24
185.215.44.0/24 maxlen: 24
185.215.46.0/24 maxlen: 24
185.215.45.0/24 maxlen: 24
185.215.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:97:a0:87:98:75:6a:84:4c:af:19:21:24:77:b6:19:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da4e95d2f4cc34a7376b73c0f039b3e158f5152
Validity
Not Before: Feb 28 10:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb323ad04eae1d646545576b6457a9e19329057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:3f:cb:c2:1a:9d:80:cf:78:f7:74:ca:15:
d0:00:20:af:7d:13:d6:13:b3:a7:a4:63:29:a7:36:
6b:6e:86:ed:9e:79:9e:47:4b:5e:57:9c:30:f2:e0:
55:70:43:70:e1:2b:7b:49:96:58:4a:e0:b5:b0:9a:
73:48:b9:76:6a:fd:6d:38:8b:5a:18:0c:3d:3a:31:
26:dd:a0:d0:3a:37:e3:a4:08:59:43:6a:b0:74:6a:
46:f0:46:e3:01:07:ed:20:f2:ad:84:cd:04:5f:00:
0a:6d:34:4c:95:d7:19:e9:e5:8c:38:44:b1:24:ca:
e1:ef:45:a7:db:72:3c:6c:84:82:e2:4e:fc:4a:7f:
13:6e:3c:0d:9c:2c:ca:6a:b7:28:28:da:09:5b:64:
d9:65:9a:a8:10:c5:15:01:ba:6d:5e:db:ae:88:00:
0d:55:ee:ae:d1:f1:84:7c:49:43:6e:9e:04:1f:33:
92:8b:2d:f7:a6:50:78:45:1c:b8:9d:61:f7:d1:7a:
cb:e9:7b:31:c1:3c:3c:0b:83:d3:6b:ed:14:a0:e0:
f8:4b:bf:03:31:a9:1c:8f:ab:cb:ae:e1:0f:39:f9:
78:1b:af:e1:6d:7f:a5:24:c6:5e:b5:36:c2:77:b2:
3b:b6:68:86:a3:ec:ef:b2:97:fa:a5:7c:d0:b6:6c:
27:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B3:23:AD:04:EA:E1:D6:46:54:55:76:B6:45:7A:9E:19:32:90:57
X509v3 Authority Key Identifier:
keyid:9D:A4:E9:5D:2F:4C:C3:4A:73:76:B7:3C:0F:03:9B:3E:15:8F:51:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naTpXS9Mw0pzdrc8DwObPhWPUVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/n7MjrQTq4dZGVFV2tkV6nhkykFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/acf2a2-4d52-40cd-a5f8-59591389e242/1/naTpXS9Mw0pzdrc8DwObPhWPUVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.82.0/24
185.215.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:04:2e:e3:47:13:ce:ae:5c:63:be:c1:87:29:8e:1a:c6:c9:
5a:d6:1e:de:58:2c:1e:e9:aa:17:f9:3f:38:8f:6b:7c:ce:72:
bb:7b:04:a8:0a:76:b9:66:93:4a:f1:68:2d:7e:43:41:6b:b3:
df:8c:44:9e:7f:d5:a4:71:5e:6c:fc:43:28:85:67:ab:f9:21:
6f:40:cc:d6:c2:f8:96:e4:fa:96:c5:b6:41:cc:8f:ea:05:a1:
ec:2d:87:2e:fa:3a:c8:87:67:98:0d:74:43:18:ca:4b:65:92:
ef:bc:7c:64:9a:9a:38:8e:01:20:1f:1b:48:17:55:80:51:89:
1a:74:98:44:3e:ec:b6:ff:2f:bd:98:01:e2:95:13:a6:9f:49:
d2:27:bd:cd:76:c9:c5:40:bb:6c:ed:79:38:61:51:30:7a:2a:
28:5a:b9:37:a2:16:25:21:8f:61:31:3a:73:3e:69:48:40:18:
50:fd:52:bb:19:d9:b6:86:e8:1c:e0:19:05:00:45:cd:17:4c:
92:bd:ba:6e:41:da:94:f8:47:3e:a4:fa:62:07:5b:37:ab:4a:
8e:01:dd:c1:77:ae:f2:76:15:31:f4:3e:f0:b0:e0:27:87:a2:
fb:d0:2e:9b:0f:31:d0:42:52:16:60:8f:a6:00:81:6f:71:d7:
7c:95:c6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:06 2024 by rpki-client on console-fra.rpki-client.org