Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NPVrn9NMCDDHXrqstJPFcvF4xN0.roa
File: NPVrn9NMCDDHXrqstJPFcvF4xN0.roa (raw, json)
Hash identifier: 5n9BGQwOMO7UeXbauxLOSnNdsuEIGwjpQIv0K5n7XBA=
Subject key identifier: 34:F5:6B:9F:D3:4C:08:30:C7:5E:BA:AC:B4:93:C5:72:F1:78:C4:DD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670B31A459C8ADEAFF6E651D9DC110
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NPVrn9NMCDDHXrqstJPFcvF4xN0.roa
Signing time: Sun 01 Jan 2023 22:15:02 +0000
ROA not before: Sun 01 Jan 2023 22:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207633
IP address blocks: 62.76.235.0/24 maxlen: 24
194.87.17.0/24 maxlen: 24
194.87.188.0/24 maxlen: 24
194.87.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:0b:31:a4:59:c8:ad:ea:ff:6e:65:1d:9d:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34f56b9fd34c0830c75ebaacb493c572f178c4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:0f:ca:60:00:68:b7:01:d8:33:39:b1:18:
0a:08:4f:01:01:43:f3:85:23:ad:f9:6f:50:9e:61:
de:af:78:f1:4f:67:e6:f5:87:30:e5:9d:b8:56:12:
c3:76:c0:9a:f7:b8:41:4c:65:37:f7:e2:0c:9f:6a:
9e:9c:8f:4e:32:54:3a:e6:26:cf:f7:9c:22:f9:49:
63:a7:40:8b:59:4b:84:2c:64:d7:5d:05:9b:a6:c7:
13:df:30:8f:e8:aa:49:df:7d:ce:2f:d6:9d:36:36:
7c:f7:23:4a:eb:06:22:65:2d:74:7e:4d:1e:73:09:
b1:16:58:67:45:f8:0c:e8:06:a2:de:09:dd:86:22:
2a:24:3d:b4:44:c9:c5:53:cc:aa:43:67:df:73:db:
6a:d9:7b:e2:3e:7c:ee:d0:47:18:34:a4:ea:e0:a9:
f4:41:43:42:e8:cc:4e:4f:a7:6b:20:b9:3f:32:61:
c2:9f:84:9f:0e:2d:6a:2f:d5:fc:cb:b8:0c:e2:64:
f3:16:ca:10:09:3e:0d:3f:29:a8:63:f0:d2:7f:0b:
d5:3b:f9:eb:2c:0f:b6:30:ff:78:bf:4b:e3:e1:e7:
4a:9d:e8:24:ba:bd:48:96:7c:36:79:8d:27:55:1c:
33:38:5c:f3:db:df:36:3d:a2:29:13:fc:76:41:8e:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F5:6B:9F:D3:4C:08:30:C7:5E:BA:AC:B4:93:C5:72:F1:78:C4:DD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NPVrn9NMCDDHXrqstJPFcvF4xN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.235.0/24
194.87.17.0/24
194.87.91.0/24
194.87.188.0/24
Signature Algorithm: sha256WithRSAEncryption
91:88:99:96:ee:e9:f4:53:ec:f4:67:21:f4:4f:c8:bc:72:d6:
eb:97:db:7e:18:29:e5:63:0c:32:3f:16:ce:95:ca:54:75:94:
f6:b2:51:38:85:9e:fd:3f:0c:c9:2f:ca:0f:2a:3d:f8:bf:77:
6b:63:e8:e2:b7:45:82:a8:f2:52:f0:2d:93:cc:5c:ab:2f:68:
3f:ad:c6:a9:e5:99:16:4d:94:d3:a1:fc:f9:6a:6a:ff:f7:25:
6c:18:80:2f:b4:db:e8:85:3e:ff:ac:9d:22:b7:c9:a6:7c:89:
f2:12:ac:87:2a:d9:50:54:f2:fa:aa:e3:50:bf:e1:cf:0e:5d:
d3:c3:ca:ca:d5:1e:6c:30:a5:da:a1:b4:d8:1f:f3:71:53:67:
5e:12:68:37:62:19:96:09:43:84:4f:71:31:29:83:77:1f:65:
89:29:0e:42:06:0f:61:52:84:7e:78:26:76:f0:94:a4:61:f6:
45:aa:dd:64:2f:89:a4:df:09:1e:a8:cf:5e:6b:2b:77:5b:5f:
e0:bc:16:f5:80:85:c4:8b:c7:f5:33:7a:0f:8a:19:19:fe:12:
a4:14:c8:30:b3:fd:5d:03:7f:2e:a8:97:2e:c7:0a:37:0f:0d:
b6:10:a4:ff:bf:46:9d:b7:f0:14:c5:77:28:95:c2:96:25:94:
af:48:9e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:56 2023 by rpki-client on console-ams.rpki-client.org