Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/NtHcx1VWXijkKMiM2OifNdzAlKE.roa
File: NtHcx1VWXijkKMiM2OifNdzAlKE.roa (raw, json)
Hash identifier: aNeWnGBsNgaTvl6qS1Xf7qTAdHe1js40L98wJdo3MDA=
Subject key identifier: 36:D1:DC:C7:55:56:5E:28:E4:28:C8:8C:D8:E8:9F:35:DC:C0:94:A1
Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial: 0185707063A0D13D27A0A87EBF1D0E2B576F
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/NtHcx1VWXijkKMiM2OifNdzAlKE.roa
Signing time: Mon 02 Jan 2023 03:04:51 +0000
ROA not before: Mon 02 Jan 2023 03:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207291
IP address blocks: 195.191.140.0/24 maxlen: 24
195.191.176.0/24 maxlen: 24
141.136.38.0/24 maxlen: 24
141.136.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:63:a0:d1:3d:27:a0:a8:7e:bf:1d:0e:2b:57:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
Validity
Not Before: Jan 2 03:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36d1dcc755565e28e428c88cd8e89f35dcc094a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:0f:f2:32:4f:d2:27:19:93:6d:bc:aa:ab:
22:e0:c6:1d:0b:7b:16:47:00:91:22:e0:53:2f:14:
3a:55:70:d0:19:1c:cd:2d:40:66:5e:67:24:d2:74:
83:11:bb:52:b1:9b:22:a5:9a:7f:2d:0b:c3:4c:43:
e0:9f:f5:5b:9b:e5:db:46:8a:63:e8:79:0a:b3:19:
28:59:e4:86:39:47:32:7f:11:b8:32:95:ce:24:49:
e7:8b:34:3b:b5:7e:90:2a:91:b3:d5:72:b6:c5:34:
43:49:2d:5c:f9:03:a1:a0:6e:b7:73:26:be:b1:f2:
03:cc:dc:bc:e9:bd:a1:af:97:ef:72:1a:15:d9:a3:
71:40:3e:3e:89:4f:59:ec:5f:03:63:36:3e:91:f2:
51:32:0f:61:41:d5:e4:75:5f:a3:f4:6a:42:40:14:
0b:e8:30:8e:6b:57:5d:c0:7a:20:23:df:86:ef:20:
6d:7d:91:d4:fc:99:d0:be:42:ac:8e:e7:db:08:ab:
95:ea:29:a3:8e:58:20:88:2b:e5:42:09:94:48:98:
d2:f8:56:0c:f6:d8:5c:28:3d:dd:9d:77:43:d3:87:
55:5d:4c:2b:b8:cf:7e:ce:ca:af:8b:58:53:57:5a:
91:31:c7:7f:93:3a:19:ee:3e:9b:0a:4e:f2:7e:41:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:DC:C7:55:56:5E:28:E4:28:C8:8C:D8:E8:9F:35:DC:C0:94:A1
X509v3 Authority Key Identifier:
keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/NtHcx1VWXijkKMiM2OifNdzAlKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.136.38.0/24
141.136.40.0/24
195.191.140.0/24
195.191.176.0/24
Signature Algorithm: sha256WithRSAEncryption
14:09:61:93:65:de:cb:ba:e0:1c:dc:dc:60:8a:df:82:df:8b:
b0:e0:5c:f7:9c:0f:2b:f9:67:7c:d5:d0:ce:07:48:41:48:a2:
57:41:52:27:55:aa:f3:4e:f2:a2:f4:c4:46:61:69:55:60:a0:
11:c7:95:dd:b5:02:fd:38:62:05:cb:b2:65:eb:8e:3f:fc:77:
8b:c3:dd:3e:ea:83:56:53:6c:b5:2b:d8:01:56:e3:3a:24:a7:
f7:10:eb:01:12:61:79:f1:79:02:54:a0:3f:8c:d2:51:f6:a8:
a7:9c:64:30:f4:5d:cc:b6:f0:24:5f:b6:14:ec:0c:0c:11:8f:
bd:0e:07:3a:ff:7b:59:bb:42:17:04:b5:b7:f9:19:58:4c:1a:
8f:c4:89:1b:5a:30:4c:0d:fe:8b:40:fe:82:36:d6:dd:2c:fc:
08:9a:08:ca:8f:33:9f:b0:27:46:d9:28:76:b6:32:8f:4d:8b:
c6:b4:51:e1:ee:e1:bd:7b:c1:fb:80:50:c6:a0:ab:ab:07:f9:
2b:be:6c:99:30:9c:ca:2f:7c:95:c9:94:18:af:30:dc:c6:34:
d1:ce:ec:d8:0d:53:5f:75:22:83:a7:9f:fc:6f:d3:b2:91:6d:
09:5c:a9:27:59:e3:cc:8d:8b:b1:51:9f:10:b4:8b:39:3c:7f:
9e:55:2f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:16 2024 by rpki-client on console-ams.rpki-client.org