Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NV395ENC7I2kHXjU8eZbRvKH2GE.roa
File: NV395ENC7I2kHXjU8eZbRvKH2GE.roa (raw, json)
Hash identifier: 61dXn91WQCKWZ5AZE7D2/D2xjvMbcdJx0ttpkKiu8cM=
Subject key identifier: 35:5D:FD:E4:43:42:EC:8D:A4:1D:78:D4:F1:E6:5B:46:F2:87:D8:61
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF98EB61B309C58B4A75F94658BA42F
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NV395ENC7I2kHXjU8eZbRvKH2GE.roa
Signing time: Mon 02 Jan 2023 00:55:04 +0000
ROA not before: Mon 02 Jan 2023 00:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210024
IP address blocks: 92.247.78.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:8e:b6:1b:30:9c:58:b4:a7:5f:94:65:8b:a4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=355dfde44342ec8da41d78d4f1e65b46f287d861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d7:e7:2f:d1:9d:ad:5b:6b:4b:92:92:61:91:
2d:11:69:fa:64:c3:16:06:d3:bc:13:81:1a:4f:4a:
2e:5d:2a:b0:09:e2:0b:67:72:45:54:ea:da:fe:1b:
5a:ef:e7:a0:c9:c4:c8:d8:70:38:24:fc:ff:cc:a9:
08:8b:94:40:18:22:49:6a:c2:ef:81:4d:94:df:58:
86:d0:aa:60:17:fd:e9:f6:ff:60:63:f9:8c:24:30:
77:72:ec:ae:43:23:48:8a:71:36:3b:eb:59:b0:7f:
e1:35:07:79:40:95:fd:dc:0e:85:8c:87:bf:4c:b9:
b8:9b:40:2f:e3:48:89:be:22:19:21:5f:36:93:c0:
f5:ed:62:c9:22:dd:55:9d:a0:b2:4f:05:74:78:ee:
31:8a:25:85:a5:11:49:71:65:a7:6a:96:bd:bc:a0:
db:e1:52:49:47:2f:0d:78:e4:4b:ae:b3:55:6a:c8:
a3:d2:10:41:a4:c8:a0:5a:b6:4b:c1:e0:ba:e3:0c:
2d:43:2e:d1:4d:e6:9d:a5:24:46:a3:1b:6e:4f:3d:
3c:57:0f:21:91:6a:97:00:ec:b6:c3:c3:ba:31:00:
77:bc:c9:f7:f9:e5:f4:b4:02:f9:61:71:bc:7b:22:
d0:d5:ab:93:3a:33:d2:30:9e:12:36:dc:33:c3:48:
39:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:5D:FD:E4:43:42:EC:8D:A4:1D:78:D4:F1:E6:5B:46:F2:87:D8:61
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/NV395ENC7I2kHXjU8eZbRvKH2GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.78.0/23
Signature Algorithm: sha256WithRSAEncryption
95:9b:e2:c5:51:4b:71:d4:47:fb:95:47:e9:76:a8:98:36:4e:
69:af:27:10:9f:5c:93:99:5d:3e:06:83:53:06:40:27:8a:91:
b0:e7:79:d5:cf:52:8d:1a:46:b8:86:ce:60:7c:e8:18:91:62:
66:34:8c:84:fd:7b:c6:e8:90:9f:f1:91:18:7b:63:1c:c1:3a:
ab:49:97:67:57:cb:69:cf:33:cc:e2:44:10:a7:16:de:bd:27:
08:d5:fc:95:a2:db:f6:d6:1b:3e:ae:90:6d:ae:c9:95:e8:f4:
ee:1a:6c:5c:7c:f5:7a:56:0d:d3:55:5d:91:fb:18:b5:31:2a:
30:f3:a2:4a:53:7c:f5:7e:98:b1:e3:a9:35:d9:97:05:0f:64:
4f:b5:ba:a5:24:c9:13:3a:67:3a:f5:97:0c:7a:53:6c:66:11:
cd:1e:89:40:16:e9:57:48:6f:7a:76:42:bb:29:c3:dd:57:09:
96:10:ce:e3:37:5e:3e:0c:29:d0:1c:23:a3:53:05:c2:7b:11:
14:77:aa:63:fc:e7:a9:cf:7b:11:be:61:6e:67:28:98:00:fa:
e4:2f:06:fc:62:ac:a5:81:b7:91:d2:02:64:b7:a3:99:27:94:
ff:67:9f:42:50:65:b7:77:d3:2d:b2:73:ef:a6:5d:63:67:2a:
35:72:53:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org