Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/9nhV0c08HJPbMewj6EqfX80vMmo.roa
File: 9nhV0c08HJPbMewj6EqfX80vMmo.roa (raw, json)
Hash identifier: kczwYi6cT/lKLz5Ld+uPFh0MfQJzvNJhi3YLPbfnI+M=
Subject key identifier: F6:78:55:D1:CD:3C:1C:93:DB:31:EC:23:E8:4A:9F:5F:CD:2F:32:6A
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 018A955E271DB443134AEEF31564D7A5612F
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/9nhV0c08HJPbMewj6EqfX80vMmo.roa
Signing time: Thu 14 Sep 2023 20:24:50 +0000
ROA not before: Thu 14 Sep 2023 20:24:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39409
IP address blocks: 37.153.156.0/24 maxlen: 24
185.216.8.0/24 maxlen: 24
2001:678:d58::/48 maxlen: 48
2001:678:20c::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:95:5e:27:1d:b4:43:13:4a:ee:f3:15:64:d7:a5:61:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Sep 14 20:24:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f67855d1cd3c1c93db31ec23e84a9f5fcd2f326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:91:3d:a0:22:1d:a8:3e:8d:37:c7:1d:92:
80:bb:a7:bc:3b:0e:a7:98:fe:1c:d0:d5:b1:cc:5b:
75:e1:0b:fe:e4:10:f0:36:74:ac:c1:26:83:b2:8b:
af:fc:66:48:1f:4e:ea:f9:c7:ba:0c:81:dc:22:e7:
44:00:17:ae:42:42:b5:84:ab:02:04:42:21:ba:89:
ef:7b:5b:52:0a:9d:61:34:0f:e9:8d:8c:e3:b5:19:
e0:75:bb:b6:8c:53:63:c0:2f:d7:58:93:40:81:76:
0e:1b:53:1f:22:ee:f0:43:31:03:9f:4f:d3:6d:ed:
b1:a0:c9:9e:82:ae:3b:69:09:91:5d:31:28:83:39:
d4:f1:e0:9a:bf:b9:24:47:a9:8e:d3:18:f2:ff:fe:
19:4c:32:78:00:b1:12:0d:f1:8f:bc:7d:e8:4b:8a:
ce:4b:c5:f3:74:0b:c5:30:2d:77:23:f3:cd:92:cd:
52:8a:49:50:2c:c3:a2:40:7b:e9:18:ce:06:1b:1e:
73:c9:77:09:5f:f1:f5:b2:30:f7:6b:fd:f7:ce:f1:
4e:72:6c:ea:3a:f6:84:23:3a:24:5d:61:35:c3:a6:
c4:03:ce:c2:1b:d2:3d:55:f3:20:5e:f4:fd:08:b9:
ff:db:bb:17:5a:53:40:e6:ac:f1:28:18:54:53:2d:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:78:55:D1:CD:3C:1C:93:DB:31:EC:23:E8:4A:9F:5F:CD:2F:32:6A
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/9nhV0c08HJPbMewj6EqfX80vMmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.153.156.0/24
185.216.8.0/24
IPv6:
2001:678:20c::/48
2001:678:d58::/48
Signature Algorithm: sha256WithRSAEncryption
69:7c:74:fd:a5:c9:bd:aa:db:be:b9:b4:43:4e:2a:1a:28:73:
cf:c0:a0:99:34:23:6e:c8:88:1d:b2:12:3d:e0:3b:ec:aa:03:
b0:28:66:2d:2d:1d:44:1b:39:30:62:7c:e7:6f:47:1e:d3:11:
8a:c2:7c:4c:03:db:3b:29:4a:59:44:d8:10:e2:f1:47:99:fc:
10:37:13:45:74:7c:8d:45:84:a3:bc:af:8b:94:69:61:fe:38:
49:a9:66:7e:a4:6e:e9:96:bc:1b:2f:65:c8:e7:e2:7d:c8:9b:
c9:13:0b:79:bb:3b:0b:98:f1:5b:9a:82:76:04:fe:00:05:5c:
73:d3:a7:17:82:99:91:94:1a:a7:32:06:f3:f0:44:5f:88:39:
65:41:f4:83:f0:e1:d0:e1:4e:31:38:26:77:c4:5b:df:8a:3b:
20:17:30:5e:de:d2:e7:3f:37:d6:4e:8f:12:41:71:24:47:12:
e9:fc:14:2a:73:de:3e:70:87:4d:9e:d7:4a:27:50:f3:5b:eb:
fb:0a:03:dc:7e:66:50:3f:0d:65:70:42:3b:61:e4:0e:2d:30:
e2:5f:37:57:69:18:01:c1:08:da:a0:e1:36:5f:c9:f5:23:71:
e8:e0:a8:44:76:c5:eb:29:97:19:cd:03:74:cf:af:b9:07:3a:
81:6e:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 5 17:08:48 2023 by rpki-client on console-fra.rpki-client.org