Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n_o-GqrO6QeKUQBJfJqnEbj-Krc.roa
File: n_o-GqrO6QeKUQBJfJqnEbj-Krc.roa (raw, json)
Hash identifier: Am2+pd1So6SycdMZHuujSlZfz4Flcoq4Pr8yNRAWF8Y=
Subject key identifier: 9F:FA:3E:1A:AA:CE:E9:07:8A:51:00:49:7C:9A:A7:11:B8:FE:2A:B7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B6C3A84853FBB1DD7EB9421434019EF0C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n_o-GqrO6QeKUQBJfJqnEbj-Krc.roa
Signing time: Thu 26 Oct 2023 13:44:16 +0000
ROA not before: Thu 26 Oct 2023 13:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 212.193.25.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:3a:84:85:3f:bb:1d:d7:eb:94:21:43:40:19:ef:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 26 13:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ffa3e1aaacee9078a5100497c9aa711b8fe2ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:d4:8d:02:51:69:b7:e4:a1:f7:8a:a5:12:
65:7e:bf:5c:6b:3b:68:f7:8a:49:4c:44:a9:a4:5c:
67:5a:7d:23:49:e5:a9:8e:ef:1d:59:ae:92:ea:8e:
e2:17:39:cf:63:f3:e3:65:30:87:42:8f:95:85:45:
ad:9b:87:d2:cf:3a:49:b1:c5:81:55:e1:2d:df:2c:
a0:c9:5c:fb:70:1d:d4:9a:19:99:dd:01:5b:be:c6:
db:1f:1d:28:b1:6a:56:47:3f:bb:2d:5c:73:f6:87:
82:71:73:39:33:22:d1:26:e1:83:b6:45:3d:9e:9f:
d5:10:73:a2:7f:da:d5:bd:aa:18:f3:e2:9b:83:bb:
d9:f5:9c:82:22:20:84:9c:ad:f6:8f:88:f1:22:76:
e8:e2:57:bd:91:10:35:73:e3:e9:cd:fc:79:a6:94:
4b:53:dc:f9:74:5e:16:38:ec:1c:ef:c7:55:89:71:
35:9e:59:f5:83:b3:20:17:49:6b:99:b5:e7:0d:8e:
69:f9:82:62:d7:f4:64:2a:16:ac:9d:75:a5:7a:8c:
cb:ce:cf:26:da:c6:0c:0a:84:bf:b7:85:3b:03:16:
82:68:83:b0:5c:9c:81:16:67:6d:b7:3d:ce:6e:b6:
11:eb:75:7a:fd:86:18:e6:0b:d6:d8:ce:9f:9b:56:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:FA:3E:1A:AA:CE:E9:07:8A:51:00:49:7C:9A:A7:11:B8:FE:2A:B7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/n_o-GqrO6QeKUQBJfJqnEbj-Krc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
194.87.233.0/24
212.193.25.0/24
Signature Algorithm: sha256WithRSAEncryption
60:32:1e:73:30:a5:b9:f1:a0:d6:86:a2:ec:79:5d:79:02:98:
58:8a:d4:97:80:b3:71:b8:3a:72:2a:d4:ae:4b:a5:fa:5a:ac:
a9:5f:c3:81:c7:3e:f6:7d:90:6e:3b:17:41:ad:c7:65:10:70:
e1:ab:5b:66:d0:38:2d:4b:70:9b:49:78:a7:72:6a:7b:67:c8:
08:86:83:64:7a:d1:2f:90:0a:6f:ac:3a:cc:5b:d3:38:d6:0a:
44:27:73:eb:2c:49:5d:a5:e6:94:05:43:6b:19:f9:61:66:79:
ec:c5:2b:a8:08:85:1f:c6:c3:89:62:36:f0:b0:69:38:77:38:
14:4c:53:40:68:8e:68:cd:77:4e:51:f6:e0:74:48:88:da:b6:
0e:7b:c2:e5:05:4c:97:ca:49:f0:91:27:0b:44:62:51:4d:85:
a4:0e:a9:0e:fb:77:d3:52:5f:46:15:bd:9f:df:5a:c2:29:df:
a2:47:47:c7:b4:bc:af:fa:6c:16:9a:e9:d5:d3:61:ac:a2:85:
9e:c0:20:30:66:a3:4e:9d:1b:75:82:79:f6:7e:9f:a6:73:54:
a5:73:60:88:8c:2a:ce:ea:6f:59:6a:7f:07:c6:c7:26:57:8b:
d4:e7:e1:b5:ff:11:f3:8e:40:68:4c:06:1f:ee:c9:d0:71:fd:
47:35:9d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 16:32:16 2023 by rpki-client on console-ams.rpki-client.org