Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NQovPKtqY8qq6b0MhhYrLcpSNKg.roa
File: NQovPKtqY8qq6b0MhhYrLcpSNKg.roa (raw, json)
Hash identifier: OIfMq492UfsV3ABw4EVWabEpuI6yE5dxk7pD2+5qnVg=
Subject key identifier: 35:0A:2F:3C:AB:6A:63:CA:AA:E9:BD:0C:86:16:2B:2D:CA:52:34:A8
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018B4744652D44DDC8DA7203C547E44E2318
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NQovPKtqY8qq6b0MhhYrLcpSNKg.roa
Signing time: Thu 19 Oct 2023 09:29:06 +0000
ROA not before: Thu 19 Oct 2023 09:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 85.122.246.0/24 maxlen: 24
85.122.244.0/24 maxlen: 24
85.122.242.0/24 maxlen: 24
85.122.245.0/24 maxlen: 24
85.122.243.0/24 maxlen: 24
85.122.241.0/24 maxlen: 24
85.122.252.0/24 maxlen: 24
85.122.250.0/24 maxlen: 24
85.122.248.0/24 maxlen: 24
85.122.253.0/24 maxlen: 24
85.122.251.0/24 maxlen: 24
85.122.249.0/24 maxlen: 24
85.122.247.0/24 maxlen: 24
85.122.255.0/24 maxlen: 24
85.122.254.0/24 maxlen: 24
85.122.232.0/24 maxlen: 24
85.122.233.0/24 maxlen: 24
85.122.238.0/24 maxlen: 24
85.122.236.0/24 maxlen: 24
85.122.234.0/24 maxlen: 24
85.122.240.0/24 maxlen: 24
85.122.239.0/24 maxlen: 24
85.122.237.0/24 maxlen: 24
85.122.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:44:65:2d:44:dd:c8:da:72:03:c5:47:e4:4e:23:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 19 09:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=350a2f3cab6a63caaae9bd0c86162b2dca5234a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:3d:cf:08:bc:51:4a:b9:40:93:63:25:8f:
de:3f:fc:c1:51:34:85:3c:07:82:a3:d2:0d:c2:c9:
4f:a4:55:df:fc:f3:16:10:68:c2:c9:4f:69:23:3c:
55:a0:f4:a8:8f:24:5e:da:32:00:48:f5:7b:67:d9:
fe:97:8f:6b:ed:db:4a:4e:0d:3d:2e:0f:8a:8b:1a:
ec:5f:8f:0d:51:b0:f7:d8:bc:27:33:72:a1:54:56:
cb:5c:43:7e:50:fd:63:b7:3c:e6:f7:5e:40:ea:93:
de:f2:2b:a6:41:2d:73:41:fb:49:bb:2a:e9:26:36:
3b:32:dc:a3:43:5d:d4:59:21:8a:a1:4b:c1:9e:3e:
0e:f8:c3:1e:77:d1:91:9f:3d:ec:3b:a7:66:90:e5:
1c:ee:45:10:56:79:d5:c4:df:44:63:18:5c:87:7f:
27:e7:7a:07:b1:c5:d2:2c:9d:b1:70:86:d9:ff:ab:
96:61:70:33:5d:5f:47:f5:ce:f9:38:dd:bb:27:5e:
01:5a:72:1b:7d:4b:48:1a:e6:03:cd:b8:21:ea:9c:
99:95:3a:5d:a6:0b:c8:45:fb:0a:fe:5a:92:49:6b:
a5:79:51:74:e1:94:dd:19:f0:5b:bc:fa:0a:5f:b9:
9a:c2:e5:99:14:ba:a2:89:69:e7:80:3c:50:0a:cc:
41:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0A:2F:3C:AB:6A:63:CA:AA:E9:BD:0C:86:16:2B:2D:CA:52:34:A8
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/NQovPKtqY8qq6b0MhhYrLcpSNKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.232.0-85.122.255.255
Signature Algorithm: sha256WithRSAEncryption
0d:3f:3a:53:89:50:a1:ac:77:72:c4:a2:51:8f:c3:00:f3:90:
2e:ad:e9:ae:b7:8d:62:f5:5d:00:1b:03:d7:a6:ef:39:0f:03:
25:26:b8:ce:b4:d6:1d:d4:66:fb:11:95:5e:f5:a9:73:74:73:
ba:49:a5:35:6a:3a:c9:da:79:78:4f:b2:6f:6a:ba:b1:7c:70:
b3:b9:58:b7:65:af:7e:1c:8e:89:10:6e:0a:ce:8c:45:35:d5:
dd:a2:32:a1:41:f4:43:4e:05:eb:fb:05:36:80:8e:58:c2:c5:
0e:df:15:11:1d:41:42:b2:ca:e5:98:b9:0c:a3:5a:4f:2c:1d:
21:fc:5a:9e:ac:f6:e5:9b:df:8c:7d:58:af:ed:72:ea:73:3e:
12:32:c9:a8:34:cc:08:08:ba:b4:ee:b3:21:bf:84:80:2d:fe:
34:e1:e4:5c:a9:6e:da:fa:57:0a:c1:18:d4:3f:6c:6b:6e:4b:
c2:b5:75:16:ac:1c:57:e4:21:b8:a9:d3:10:87:53:6f:83:ab:
b2:58:a9:71:27:2e:74:6a:85:70:af:19:39:c8:fe:7b:e3:09:
cf:c3:7b:36:c4:c0:2d:f5:83:9b:36:e4:de:23:fc:26:04:9c:
ce:ac:18:9e:d1:ff:2f:18:17:96:ad:e5:6a:ef:49:30:d8:5f:
18:25:38:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org