Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/n0DC_ERcgJE1q7FruznBB0pmlos.roa
File: n0DC_ERcgJE1q7FruznBB0pmlos.roa (raw, json)
Hash identifier: eemQXm7d79jyuvOvps0RCbjEReqgKDq/OE0vsXlbUbs=
Subject key identifier: 9F:40:C2:FC:44:5C:80:91:35:AB:B1:6B:BB:39:C1:07:4A:66:96:8B
Certificate issuer: /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial: 01862165DE11A20A4EE6F035954B4E40BC45
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/n0DC_ERcgJE1q7FruznBB0pmlos.roa
Signing time: Sun 05 Feb 2023 11:46:09 +0000
ROA not before: Sun 05 Feb 2023 11:46:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48551
IP address blocks: 185.83.182.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:21:65:de:11:a2:0a:4e:e6:f0:35:95:4b:4e:40:bc:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
Validity
Not Before: Feb 5 11:46:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f40c2fc445c809135abb16bbb39c1074a66968b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:dd:1e:1d:06:86:07:d5:4a:c2:74:9c:54:6d:
7c:c5:6f:3f:90:71:29:b7:96:8e:24:ec:f8:e4:9e:
8f:c4:ba:ba:40:a0:3f:84:11:38:0e:a8:10:53:24:
63:b7:b0:12:d4:7c:d7:3b:cd:c1:75:5a:fe:0d:80:
c9:e9:29:4e:e4:c9:5e:a0:7e:1e:46:70:0e:41:7b:
2c:01:5e:98:d4:4d:08:02:20:4b:b4:8b:54:0f:d2:
0a:f8:66:06:74:48:d9:a2:fd:61:39:54:51:d7:6b:
c7:2c:93:79:4a:42:25:95:ee:88:47:74:5e:f7:f2:
30:0e:7c:12:7a:db:c8:b9:cb:b9:e3:1b:3d:7e:d4:
04:a6:16:e6:74:da:e9:ed:e9:c1:f7:6c:64:6c:cf:
b5:f5:31:66:1e:f7:ba:f9:00:96:4e:56:6c:63:38:
51:02:da:a1:79:ad:ad:4a:a7:2a:50:db:83:1d:d5:
30:98:1d:60:8d:cd:db:6c:14:8a:70:c2:6b:9c:2a:
64:e5:2e:e6:cb:a0:e5:9c:02:9a:3a:88:bf:53:04:
0b:dd:a7:c1:1a:1b:f1:6d:b1:cb:b3:60:b4:28:f2:
89:5c:a0:6a:c3:96:5f:30:91:a5:7e:16:8a:9c:4f:
f3:44:46:eb:0b:7a:b4:b3:9e:73:b3:b6:ba:4d:8f:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:40:C2:FC:44:5C:80:91:35:AB:B1:6B:BB:39:C1:07:4A:66:96:8B
X509v3 Authority Key Identifier:
keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/n0DC_ERcgJE1q7FruznBB0pmlos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.182.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:91:ff:b6:a3:19:16:83:26:8e:6f:c7:5a:52:db:65:3d:fc:
60:5c:07:1d:0e:e4:b2:29:e3:bb:12:46:f0:f3:a6:e4:bf:2f:
ee:52:08:32:79:03:2a:f1:36:bf:c0:db:e2:f0:2f:e6:9a:26:
66:41:00:d1:52:df:43:6c:1b:c4:ce:b8:3c:15:a2:9a:a5:75:
35:b2:e6:c1:8c:56:3f:79:fa:d6:e7:6b:eb:30:c4:bf:1f:09:
b1:87:04:5a:22:d1:04:50:83:13:13:8a:f8:1c:47:39:23:3d:
b3:64:1d:e1:94:da:ec:f0:66:95:32:45:af:49:b7:75:9b:2d:
87:f3:d0:ea:08:1e:87:b7:d5:02:c7:8a:7b:de:e3:f1:60:b1:
6a:4a:0e:15:e8:54:59:5d:e1:46:da:66:54:85:3b:24:0d:c9:
dd:36:8e:b1:1c:5b:00:e1:c5:03:c3:b9:38:d3:b4:4f:ba:58:
09:66:12:1e:52:06:8c:5b:d5:e3:36:82:f0:03:fc:d8:f3:d3:
e8:6e:eb:8e:d9:25:c5:a2:71:f9:db:5b:8b:1d:a3:69:05:ca:
44:a4:b5:1c:ef:e5:d6:47:ac:53:c0:fe:f7:87:d6:1c:0e:85:
4b:e5:a2:7f:18:37:bf:09:f5:dd:f6:e8:20:a9:8f:8b:e1:4b:
3f:02:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org