Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/nOMVRoqYTSLZZngAml1Y8cOj0TI.roa
File: nOMVRoqYTSLZZngAml1Y8cOj0TI.roa (raw, json)
Hash identifier: WLblVQgmG9W5utJQtkvtRgyLqBpwmOCBST/UKUIOvIc=
Subject key identifier: 9C:E3:15:46:8A:98:4D:22:D9:66:78:00:9A:5D:58:F1:C3:A3:D1:32
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01856EF422D3D954BAEB64F86AB19C950452
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/nOMVRoqYTSLZZngAml1Y8cOj0TI.roa
Signing time: Sun 01 Jan 2023 20:09:31 +0000
ROA not before: Sun 01 Jan 2023 20:09:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12708
IP address blocks: 87.242.128.0/17 maxlen: 24
217.8.0.0/19 maxlen: 24
212.67.96.0/19 maxlen: 24
185.175.48.0/22 maxlen: 24
84.43.0.0/17 maxlen: 24
213.78.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:22:d3:d9:54:ba:eb:64:f8:6a:b1:9c:95:04:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Jan 1 20:09:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce315468a984d22d96678009a5d58f1c3a3d132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:bb:c1:50:6d:cc:25:86:c2:d3:42:ca:ea:
e3:3b:f9:11:00:bc:03:b0:7d:79:7f:50:b6:a9:93:
4e:89:05:88:1f:43:88:20:63:84:8d:db:71:46:26:
24:4c:2e:32:95:7e:65:2f:5c:66:0f:2c:01:8a:78:
7a:bd:b9:eb:56:97:44:53:57:ed:94:28:47:21:90:
90:d6:f8:fc:ba:59:df:b8:c2:cf:7b:9b:6c:e5:06:
1c:b2:79:e3:32:12:78:e6:89:fa:1a:ed:f4:7b:40:
06:af:4d:85:83:32:2e:fc:4f:b4:e3:48:cd:1f:a7:
88:50:d2:a5:5e:22:a4:e2:52:a7:a9:ea:31:27:8b:
b4:32:5f:ed:d1:d5:ce:80:a3:5d:ff:3a:99:91:5a:
66:ac:f1:7c:d9:34:44:7f:94:42:3f:fe:08:b8:fc:
be:59:5e:8d:fe:fb:94:cb:fd:7a:94:03:83:7a:5e:
02:bd:94:ef:73:34:c1:87:7d:89:4d:05:b9:80:a1:
ad:90:7b:aa:ae:0e:de:9d:16:71:cc:00:5f:29:2a:
cd:a5:84:80:28:31:76:67:90:48:15:a0:f0:1d:df:
2a:cc:60:22:17:b2:f4:d4:2a:fa:28:a0:ce:10:8f:
36:f3:9f:43:e5:c6:66:81:0d:a5:77:9c:75:dd:79:
2b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E3:15:46:8A:98:4D:22:D9:66:78:00:9A:5D:58:F1:C3:A3:D1:32
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/nOMVRoqYTSLZZngAml1Y8cOj0TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.43.0.0/17
87.242.128.0/17
185.175.48.0/22
212.67.96.0/19
213.78.0.0/16
217.8.0.0/19
Signature Algorithm: sha256WithRSAEncryption
00:e1:a9:c1:29:6d:6b:10:cc:9f:95:5d:46:70:dc:b6:9d:d4:
08:47:ad:af:67:01:da:50:5a:3c:ce:ba:1e:4f:a0:ce:cb:41:
26:56:7f:87:21:bf:a7:77:c8:db:ec:2a:da:06:47:79:02:f4:
b6:60:d3:fa:ff:34:62:8c:fb:8b:49:80:8d:36:89:88:30:bc:
ad:cb:3e:07:7c:69:5a:21:7e:db:30:48:90:a9:88:30:e4:22:
8e:56:34:6b:62:77:8e:30:68:98:d3:7e:b7:f6:4f:b2:76:5b:
52:fb:46:09:64:d1:8b:83:44:a8:f9:41:05:5a:f2:1b:8f:f1:
3b:48:7b:08:cd:dc:85:df:08:2f:e5:a4:ed:2e:26:83:1b:7e:
c7:f8:60:44:76:98:f1:d8:7d:2f:56:14:54:0e:61:e3:a6:fa:
b6:23:72:dc:ae:3a:44:3a:ec:2c:b9:83:bf:18:a8:08:3a:95:
07:d6:01:3e:10:0e:7f:f2:d7:c9:6c:69:4d:df:0b:2f:31:bf:
4a:56:cd:9d:51:1f:91:ba:c7:0b:ff:f2:c9:90:ce:2b:c2:ad:
0e:5b:32:47:b0:43:6e:c0:12:5e:d1:22:a8:d0:ed:7e:08:e0:
22:6f:e6:7f:49:80:06:eb:9e:60:2f:3c:00:17:05:ae:9c:6f:
41:6a:5c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 10 12:13:00 2023 by rpki-client on console-ams.rpki-client.org