Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2nOic591-2TsemeVcFEGsny8sNA.roa
File: 2nOic591-2TsemeVcFEGsny8sNA.roa (raw, json)
Hash identifier: Zhx9dhTBchrYz8xRuO8xePZICSnyfu1YmZagb+qOVWI=
Subject key identifier: DA:73:A2:73:9F:75:FB:64:EC:7A:67:95:70:51:06:B2:7C:BC:B0:D0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F1502E90A87AFEE1158356AF8ED402F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2nOic591-2TsemeVcFEGsny8sNA.roa
Signing time: Sun 01 Jan 2023 20:45:25 +0000
ROA not before: Sun 01 Jan 2023 20:45:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56951
IP address blocks: 85.120.31.0/24 maxlen: 24
85.120.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:02:e9:0a:87:af:ee:11:58:35:6a:f8:ed:40:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da73a2739f75fb64ec7a6795705106b27cbcb0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:9f:fc:62:80:d3:5b:9e:c1:e1:79:fe:ad:
70:6d:42:5c:a1:be:13:03:7d:2d:9c:77:4e:89:e0:
a4:a6:99:30:8e:a6:ee:de:75:70:85:a6:2d:58:04:
a7:19:69:13:03:34:b9:03:01:a4:77:e2:94:bd:d7:
59:4b:d7:4d:25:5c:09:79:98:58:dd:ca:2e:da:c8:
9f:79:7d:cd:56:9a:f7:a5:51:47:5d:3e:66:4b:08:
ad:20:38:bc:36:d2:0e:16:9f:77:63:99:fa:17:70:
71:6f:ff:09:cd:bb:39:5f:f9:01:04:7e:5f:4e:fc:
61:ee:4e:85:39:3d:d2:4e:d0:b2:f2:19:8b:42:b3:
57:aa:d8:97:58:88:8f:cd:f2:04:34:81:88:a4:66:
1a:1b:34:c7:cd:5d:53:d0:a6:4c:01:28:59:86:58:
04:38:7c:35:2c:a6:5d:70:58:57:5d:6a:61:d9:d2:
cd:8d:9d:93:9a:dd:a1:2a:2c:37:f1:ab:7c:19:5c:
d9:cc:1c:76:4b:12:fe:1d:aa:1b:0f:67:bb:58:0e:
65:05:bf:fc:53:33:a9:46:38:65:74:89:5f:74:fa:
0a:0e:b2:0f:3a:0d:1a:39:b2:0c:ea:a7:cf:d7:28:
c7:87:7f:4c:38:d4:ac:ee:66:ea:8f:a8:6c:47:ae:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:73:A2:73:9F:75:FB:64:EC:7A:67:95:70:51:06:B2:7C:BC:B0:D0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/2nOic591-2TsemeVcFEGsny8sNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.31.0-85.120.32.255
Signature Algorithm: sha256WithRSAEncryption
b5:d6:8b:2a:3d:aa:fe:8a:30:93:04:6c:3c:41:81:8e:ca:78:
19:b3:6f:9c:a5:50:84:e3:11:8a:c3:94:96:a6:1b:75:ad:c1:
0a:a0:83:7c:02:95:e3:02:04:19:5d:28:08:68:b2:64:ee:62:
8d:c8:63:ae:1f:b3:83:9f:42:2a:3b:3d:67:e8:09:c7:08:63:
fd:ae:01:a8:36:71:1b:e6:af:72:e2:7b:69:3d:bb:b7:0f:13:
9f:62:db:f6:63:4e:06:86:1c:fa:da:35:cf:8d:5d:12:5c:e7:
56:15:b6:62:40:17:6b:c5:35:72:15:b1:49:20:e5:d6:19:7f:
d9:35:aa:0d:be:ee:a0:b6:53:e9:58:ad:2e:40:a1:3a:d6:b9:
f0:38:0d:67:10:72:5d:82:65:85:a0:4d:36:6f:b6:79:0e:fe:
b4:3a:56:fd:c1:b2:c6:83:fd:8f:1a:b3:0d:dc:f2:25:e6:94:
58:f1:61:a8:93:d3:a1:e9:fb:5a:18:a3:bd:4b:8a:0a:70:dc:
2f:f1:16:75:e1:e3:65:aa:50:63:35:7b:d4:75:44:74:d8:74:
71:d3:9d:c9:11:0d:65:ae:1e:f8:2c:53:fb:4f:b6:b4:eb:a1:
55:93:5f:d4:4e:63:1b:a5:6b:64:f9:60:f8:bf:0b:21:f0:45:
e5:d6:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org