Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/NK-CNVqyWzAa0PbvrwUyxyx3gtQ.roa
File: NK-CNVqyWzAa0PbvrwUyxyx3gtQ.roa (raw, json)
Hash identifier: uLiRx8bt4aoAlsSsZiK4ke6NT0m5X+9sBhD4kDDZlWQ=
Subject key identifier: 34:AF:82:35:5A:B2:5B:30:1A:D0:F6:EF:AF:05:32:C7:2C:77:82:D4
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01896DC5CD31CBDEF2BB03AC5DEAE87591AA
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/NK-CNVqyWzAa0PbvrwUyxyx3gtQ.roa
Signing time: Wed 19 Jul 2023 10:50:26 +0000
ROA not before: Wed 19 Jul 2023 10:50:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 88.218.105.0/24 maxlen: 24
88.218.104.0/24 maxlen: 24
45.135.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:c5:cd:31:cb:de:f2:bb:03:ac:5d:ea:e8:75:91:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jul 19 10:50:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34af82355ab25b301ad0f6efaf0532c72c7782d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:4e:47:46:b2:02:7c:19:a5:4d:45:6f:4d:
8a:50:a4:e3:73:6b:20:b4:ca:26:23:67:a9:7b:ae:
89:f5:e8:40:0c:86:14:5c:2b:2c:a9:c1:3f:35:9c:
a4:81:7a:bb:85:8e:5b:bb:87:cd:f9:b8:77:a2:33:
f6:a4:3e:66:f8:5c:06:f1:1a:52:41:66:78:a6:f4:
22:cf:86:ec:74:78:c7:f1:81:82:d4:a0:81:1c:52:
8f:ef:42:dc:4a:0a:9b:36:48:4b:b7:3f:ba:e5:ca:
03:62:c9:36:bb:15:00:c6:f8:a3:dd:d1:c2:be:3f:
e2:a1:10:d2:5f:46:13:a8:60:df:56:8c:cc:90:31:
29:e5:53:37:f6:84:63:6b:a9:4b:ea:18:80:1e:6f:
93:a1:01:5c:67:5f:f0:87:d5:96:c7:7f:0c:1c:cc:
ce:c7:9e:14:8e:41:00:c5:cf:90:d6:d7:cf:2f:b0:
0c:35:82:b8:7f:44:ed:ac:38:58:d2:bc:0f:9d:1a:
09:04:e8:f8:ff:17:d6:4b:6a:db:9e:06:e6:61:5d:
02:cc:b8:74:a0:86:b8:84:4d:ce:33:bf:8e:b9:6a:
c7:a0:f7:4c:77:e6:a0:77:61:b3:72:75:80:66:e7:
bc:eb:55:a0:81:3e:dc:8e:38:90:2a:20:54:4f:4a:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:82:35:5A:B2:5B:30:1A:D0:F6:EF:AF:05:32:C7:2C:77:82:D4
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/NK-CNVqyWzAa0PbvrwUyxyx3gtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.136.0/24
88.218.104.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:6f:01:ef:f4:d7:ef:49:05:1a:41:c3:86:27:12:e6:5a:38:
1d:e2:a6:c7:09:51:71:4d:bb:c5:af:f4:35:75:96:da:e2:b2:
41:42:9a:a7:9e:79:9e:be:e8:0d:db:1e:4e:f4:1f:c2:11:2d:
b3:d7:50:c4:60:33:b7:4f:56:e1:c4:8d:6a:c6:d4:4e:8c:df:
9f:fa:54:c4:61:8b:6a:2c:3a:3f:f7:4d:4a:c4:1b:2a:a5:15:
96:94:ab:78:25:15:27:95:76:55:62:69:36:7e:f3:06:9a:d4:
e4:da:86:91:a7:3a:09:2c:09:80:cd:3e:e2:4f:e6:45:0d:9d:
70:d8:6c:31:86:66:e8:50:51:c7:a4:17:61:f9:07:a9:75:21:
46:76:17:8a:a0:a0:60:93:d3:bc:a0:c6:13:58:e2:33:35:86:
1d:a2:01:dc:8d:77:1b:3b:10:75:3d:ac:8d:6a:45:d2:0a:82:
29:3c:62:a7:d1:7a:67:09:02:2b:23:55:06:fe:15:ad:23:f2:
01:39:42:da:2a:fe:81:4e:e7:cb:37:ca:87:23:bd:3e:06:77:
5a:f3:15:a0:87:98:67:57:c5:d2:70:21:90:da:ac:fb:60:41:
dd:70:9a:f5:8f:1e:27:dc:12:66:97:4e:fa:b2:67:2b:bd:fe:
67:46:e4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 17:42:31 2023 by rpki-client on console-fra.rpki-client.org