Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ncuYpmjmeDqnFr-DbQhjkRw4-ok.roa
File: ncuYpmjmeDqnFr-DbQhjkRw4-ok.roa (raw, json)
Hash identifier: DVgfvG3RWRp/qFavmL3dwa2+YHJYZSnM86NWpghL5YA=
Subject key identifier: 9D:CB:98:A6:68:E6:78:3A:A7:16:BF:83:6D:08:63:91:1C:38:FA:89
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B1D95C32BC8357CE0E4F16662AFA59D26
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ncuYpmjmeDqnFr-DbQhjkRw4-ok.roa
Signing time: Wed 11 Oct 2023 07:13:55 +0000
ROA not before: Wed 11 Oct 2023 07:13:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 45.84.222.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
178.215.237.0/24 maxlen: 24
94.156.176.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1d:95:c3:2b:c8:35:7c:e0:e4:f1:66:62:af:a5:9d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 11 07:13:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dcb98a668e6783aa716bf836d0863911c38fa89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:6f:e3:48:7d:e5:50:a6:24:d3:fc:c1:f9:
47:8b:79:02:30:22:49:15:4b:43:c7:61:4b:5c:04:
d8:98:ee:23:e3:72:79:49:29:cf:b1:ca:77:38:b7:
2e:35:33:9f:e2:6a:18:5e:74:e3:d1:bd:28:48:c6:
b8:c3:f0:37:3e:f6:87:a1:6c:74:f5:15:f9:9c:eb:
0f:e7:53:c0:8a:27:26:e5:56:1b:f2:51:4c:67:6f:
22:96:8d:7f:76:0b:54:bc:65:e8:ba:2e:97:5a:7a:
80:94:36:cd:20:8a:ee:5c:3f:a4:24:f6:bf:f7:63:
65:64:aa:19:ec:10:64:1e:49:52:ea:d6:1a:cb:8b:
c2:78:1e:51:d8:a2:1c:a2:fe:3e:b9:3b:cd:e0:72:
a4:f9:9b:17:2b:43:e1:28:ad:81:35:29:94:df:b6:
8c:49:91:fe:b3:0f:e4:66:ae:e6:a1:ad:8d:7e:01:
bb:40:5c:f0:c6:2d:ba:5b:30:17:cf:db:97:c3:3e:
39:c6:48:14:8a:d2:55:01:27:00:f0:22:61:a7:bf:
43:d3:f2:92:d3:42:9f:09:5b:ab:3b:b2:73:ea:64:
7c:69:cb:ee:a4:f8:26:6d:80:23:65:ca:9d:ff:66:
47:ab:b2:6b:f6:76:64:d4:ee:78:e7:ad:93:61:99:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:98:A6:68:E6:78:3A:A7:16:BF:83:6D:08:63:91:1C:38:FA:89
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ncuYpmjmeDqnFr-DbQhjkRw4-ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
79.110.50.0/24
94.156.176.0/24
178.215.237.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ac:f0:2d:2c:b8:cb:53:19:20:26:09:84:11:4c:b6:ec:3a:
5c:8b:ad:54:70:bf:f0:9e:8a:78:7c:58:85:7e:16:0b:b8:5b:
0a:81:aa:be:ec:e2:7c:72:f7:92:89:78:be:8a:1d:e8:e3:5a:
52:33:db:24:43:ba:e3:8e:57:29:9d:cf:75:47:5e:54:33:e7:
1e:41:ed:e1:32:d8:5d:3a:29:6a:99:2a:00:d0:36:0d:f3:4b:
59:43:3f:f3:07:c0:e7:3d:f4:0a:25:b3:f0:09:7a:bb:0d:b9:
f7:12:17:7d:7a:90:e2:5f:2c:b1:d8:13:cb:87:3e:9d:23:bc:
64:43:2f:86:0a:3c:6d:61:32:25:64:73:7a:12:cb:16:d4:f8:
e9:c1:56:a5:aa:d4:04:02:41:f8:87:de:ac:c8:06:d0:a7:a3:
2e:ed:cd:8c:42:38:dc:87:23:de:3b:00:91:e3:b8:21:98:aa:
b5:24:05:76:7a:09:1b:be:27:5e:26:c2:af:e4:ae:08:89:a9:
83:b0:f8:42:2a:19:ba:68:a8:00:b9:ee:32:71:75:02:7e:ec:
8d:1f:32:f2:f9:e9:17:b0:4e:bd:cf:ad:4f:9d:0f:57:eb:9a:
2f:1d:56:85:68:30:27:7e:aa:79:57:66:a7:1f:2e:f6:58:bf:
3d:da:4a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 10:52:58 2023 by rpki-client on console-ams.rpki-client.org