Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NEXVqvfnS3dSJmHq8mMWOCcDg0s.roa
File: NEXVqvfnS3dSJmHq8mMWOCcDg0s.roa (raw, json)
Hash identifier: u40+z7FLfWfGPWuEAhO84AuP8+4v6L8uVizp3qzZ8A0=
Subject key identifier: 34:45:D5:AA:F7:E7:4B:77:52:26:61:EA:F2:63:16:38:27:03:83:4B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018894C534C7F201D3E8E31CDF91A11460F7
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NEXVqvfnS3dSJmHq8mMWOCcDg0s.roa
Signing time: Wed 07 Jun 2023 07:32:11 +0000
ROA not before: Wed 07 Jun 2023 07:32:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53850
IP address blocks: 185.72.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:c5:34:c7:f2:01:d3:e8:e3:1c:df:91:a1:14:60:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 7 07:32:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3445d5aaf7e74b77522661eaf26316382703834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:28:f0:78:7d:71:2e:30:c8:77:34:d4:98:
23:08:39:1e:5e:cb:59:af:0e:2e:26:74:7b:e5:42:
8e:44:19:a4:10:45:6a:ed:cb:d4:9a:9c:db:c0:bb:
89:e3:57:1e:0c:67:29:42:f3:f5:6e:7e:df:d5:45:
73:39:71:a6:e5:e1:43:18:31:e9:34:96:fa:8b:5e:
64:27:f9:3d:56:d3:77:73:7c:91:6a:41:ee:25:95:
b1:a3:e7:18:80:0d:67:be:8a:c9:7f:38:d1:91:83:
bf:d4:dc:db:c9:cf:84:9c:ad:1c:38:e4:b1:a0:98:
60:49:16:ef:fd:1e:b7:56:9a:42:d0:3b:8e:e1:8d:
da:0f:97:0f:26:1a:ad:06:be:83:fb:16:96:8e:25:
61:b1:62:4c:72:46:19:3d:24:4e:7d:76:57:0d:ff:
bd:2e:65:58:70:b4:4f:86:66:8d:00:d7:67:ec:58:
df:ce:fa:c3:75:03:4a:49:96:55:14:2a:19:3b:23:
a5:ff:0b:d7:24:c4:29:f1:be:2b:ae:41:b8:c3:13:
b2:04:f5:f1:63:d2:5b:6c:76:ea:f3:d1:4d:9a:87:
75:ea:99:c4:d2:9e:c3:58:8d:ad:d4:de:ce:93:13:
3e:08:84:6e:0c:37:6c:de:99:b8:23:c3:d4:13:28:
fa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:45:D5:AA:F7:E7:4B:77:52:26:61:EA:F2:63:16:38:27:03:83:4B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NEXVqvfnS3dSJmHq8mMWOCcDg0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.11.0/24
Signature Algorithm: sha256WithRSAEncryption
28:79:6d:39:61:b0:49:78:1e:88:3b:b6:11:a5:c4:16:56:03:
dc:3a:ca:e7:c8:6c:6c:1e:0d:18:f3:c2:77:e5:92:70:00:25:
d8:67:86:d4:ea:39:b4:67:3d:6a:1b:c0:b5:ad:36:06:95:4a:
99:c0:9c:e9:6c:85:32:27:8f:41:71:6c:23:a6:ba:54:68:af:
26:12:43:fe:10:85:e1:37:ba:5c:2f:9f:fc:0d:27:d3:18:a5:
14:73:3e:ec:90:dd:36:36:44:32:72:0c:65:75:a9:8e:10:b2:
a8:8e:10:c4:37:24:39:00:fa:67:99:82:90:05:c5:19:e0:89:
32:e9:6f:c5:81:8c:9d:2e:a7:7e:80:a8:f0:9a:2e:2d:36:53:
23:be:ba:b3:e1:3c:56:23:36:26:9b:f7:15:89:c4:70:c9:60:
f2:17:b1:60:2d:b0:47:68:03:1b:ae:19:c7:ce:65:74:96:d3:
a9:99:1e:0f:0f:7b:ec:b1:70:68:5e:e0:55:9e:17:26:14:3e:
2d:39:4f:03:5b:f9:48:1a:40:d2:5a:78:1f:3f:a7:11:5e:70:
64:ab:79:25:52:ff:2a:f2:48:03:7b:a3:e3:a8:61:7a:12:82:
f4:1d:29:20:45:56:ba:0e:8e:74:07:e9:17:13:ab:2c:69:68:
7d:39:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-ams.rpki-client.org