Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/nnk04fBpNdl9nfBGrH_5QI1yeRQ.roa
File: nnk04fBpNdl9nfBGrH_5QI1yeRQ.roa (raw, json)
Hash identifier: Q+/wMQtDVE+HrKwHBJZfyxSwV0cTClKLZN+cf1CLhVc=
Subject key identifier: 9E:79:34:E1:F0:69:35:D9:7D:9D:F0:46:AC:7F:F9:40:8D:72:79:14
Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0
Certificate serial: 01856CB87197183D88E7089AA437EBD625AE
Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/nnk04fBpNdl9nfBGrH_5QI1yeRQ.roa
Signing time: Sun 01 Jan 2023 09:45:05 +0000
ROA not before: Sun 01 Jan 2023 09:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204080
IP address blocks: 185.115.104.0/22 maxlen: 24
185.115.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:71:97:18:3d:88:e7:08:9a:a4:37:eb:d6:25:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0
Validity
Not Before: Jan 1 09:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e7934e1f06935d97d9df046ac7ff9408d727914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:4b:a7:0a:d1:74:97:ea:d4:00:9f:60:20:
b8:3a:2c:59:1f:f9:04:e1:1c:2d:ee:54:e2:a7:44:
f2:af:33:25:01:c4:d6:27:a2:4f:d0:8e:a4:48:a4:
09:a2:f1:9c:cd:fa:c8:23:b4:50:3b:74:db:ec:c7:
af:9f:fe:cd:fd:b3:87:02:27:d9:b9:87:1b:d8:45:
57:37:e5:bc:dd:81:a8:2f:b3:c1:a4:af:e8:c2:2b:
30:1c:f5:a9:5d:06:f6:89:ba:54:0b:de:86:d9:42:
9d:8b:20:64:9e:9f:e6:dd:4c:66:d0:32:1c:fc:80:
06:00:7f:f9:33:14:cc:eb:35:ae:59:58:9d:a4:29:
d6:44:7b:b7:f6:0e:07:41:7e:95:69:00:87:73:33:
5f:43:b5:e8:80:fb:71:b0:46:14:fd:a2:0f:0a:6b:
9a:a1:40:8a:f9:fd:a7:aa:99:30:ea:25:59:b4:43:
01:82:f1:83:7f:81:14:5f:49:6a:de:f1:c1:0b:4e:
4f:ef:ff:9c:94:0d:aa:70:9a:aa:c6:ee:a6:56:b5:
3e:ce:0f:d4:67:0b:c0:dd:0f:f3:23:f0:cc:4c:42:
20:0a:d9:c3:2c:6e:e4:c4:51:dc:3e:62:01:02:f2:
60:81:3b:8a:0d:36:b5:73:34:95:f2:48:55:e1:de:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:34:E1:F0:69:35:D9:7D:9D:F0:46:AC:7F:F9:40:8D:72:79:14
X509v3 Authority Key Identifier:
keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/nnk04fBpNdl9nfBGrH_5QI1yeRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:b9:b6:7a:c0:83:b8:75:b1:ac:fc:9d:05:94:b8:d4:7a:08:
28:03:3f:79:d3:3e:59:48:46:39:6b:3a:e2:d9:7c:8c:da:53:
ff:d5:c7:ea:c7:fe:5a:5b:97:b8:e3:ba:0c:dc:eb:0c:ce:95:
f7:b2:40:46:03:57:c2:be:e8:58:54:3d:27:d7:45:47:d1:54:
a2:a4:65:63:ed:5c:46:0e:38:18:44:b6:3d:36:ae:69:ff:06:
f2:7f:18:1f:20:a7:22:37:c5:9f:98:96:6a:b3:a7:59:d9:62:
09:8a:c3:e1:fa:69:1f:c4:e9:31:60:34:d4:8a:74:38:23:d5:
fd:e6:48:a3:57:c2:cb:85:28:43:c4:57:77:5f:24:d9:45:d4:
0e:bd:8d:3b:c7:e5:d0:db:79:d3:d8:b3:36:fa:87:dc:8f:ff:
91:e6:1f:a8:33:9e:3e:71:13:79:2a:2b:e1:cc:b2:9b:6f:38:
91:aa:fd:44:e7:63:33:d3:ab:eb:3c:3d:60:68:3d:72:65:dd:
18:5e:98:38:f3:8f:dc:54:2d:cb:49:d1:a3:1d:5b:08:4f:47:
a5:f0:fb:ba:b8:d0:2e:c3:b6:99:bf:e5:21:f6:20:f7:d2:70:
3f:5e:9e:9d:b5:ba:bf:5f:8d:62:b9:b7:a1:9c:f3:7c:3d:92:
e0:77:ab:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:24 2024 by rpki-client on console-ams.rpki-client.org