Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/nuue6dpLrgIYFxJ3wWzolIO1riY.roa
File: nuue6dpLrgIYFxJ3wWzolIO1riY.roa (raw, json)
Hash identifier: ahVa6imr/dX1Skjcmm/bRJ3MqNujNeZLphnKgRIRalI=
Subject key identifier: 9E:EB:9E:E9:DA:4B:AE:02:18:17:12:77:C1:6C:E8:94:83:B5:AE:26
Certificate issuer: /CN=2d43689a7638ff737591ff3b251918862349695c
Certificate serial: 01856D81CB869CC880750DE8AF9AC1B56C76
Authority key identifier: 2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/nuue6dpLrgIYFxJ3wWzolIO1riY.roa
Signing time: Sun 01 Jan 2023 13:25:00 +0000
ROA not before: Sun 01 Jan 2023 13:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 185.152.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:cb:86:9c:c8:80:75:0d:e8:af:9a:c1:b5:6c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d43689a7638ff737591ff3b251918862349695c
Validity
Not Before: Jan 1 13:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eeb9ee9da4bae0218171277c16ce89483b5ae26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f3:83:02:7e:20:b5:1f:4c:f4:68:27:62:84:
f9:cf:3e:02:1e:17:10:d2:b4:d3:ff:27:e9:04:25:
2d:74:87:1c:e9:85:fe:c4:2c:af:08:18:67:1c:fe:
70:a9:05:ad:ba:8f:a2:29:ff:bb:71:ce:d8:17:e6:
14:32:8b:71:d6:71:14:d5:ef:9c:66:21:f1:b9:90:
c4:4a:dd:6e:c0:bb:e0:dc:3b:69:65:88:79:a1:95:
6b:a0:b1:b3:22:a5:81:f6:43:2b:a7:fe:12:57:b2:
d8:c1:48:20:a9:f8:db:ae:28:bf:ad:fd:a7:68:b9:
5b:a1:20:98:87:ea:ee:47:ab:aa:89:c7:40:e0:6c:
7b:ca:99:15:97:f2:c8:86:1c:43:cb:e7:23:15:93:
5e:f0:74:97:94:eb:26:de:fa:99:2a:ce:a3:15:c1:
70:60:4b:f9:19:11:27:ca:01:b1:69:0a:c4:1f:3e:
c0:75:81:2d:52:30:e3:a0:b3:f5:1c:f4:0c:86:7d:
41:65:75:72:23:94:55:7c:fb:07:1d:7f:db:a9:78:
55:be:ff:60:54:a3:09:33:4d:27:42:fa:49:38:49:
0a:50:57:a4:54:dd:b5:4a:64:f5:79:8c:5c:f3:d5:
f0:fc:ef:6c:6f:c8:22:ff:7e:0c:53:47:ab:3d:9b:
10:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EB:9E:E9:DA:4B:AE:02:18:17:12:77:C1:6C:E8:94:83:B5:AE:26
X509v3 Authority Key Identifier:
keyid:2D:43:68:9A:76:38:FF:73:75:91:FF:3B:25:19:18:86:23:49:69:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LUNomnY4_3N1kf87JRkYhiNJaVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/nuue6dpLrgIYFxJ3wWzolIO1riY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7db3b3-2f8a-47c7-bb8c-3a3034a39ea5/1/LUNomnY4_3N1kf87JRkYhiNJaVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.215.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:81:85:be:40:39:47:5b:ca:55:0a:5b:83:e9:69:eb:1b:33:
7b:9c:b6:f7:50:5f:95:1a:d8:05:0a:1b:c6:c7:72:d2:72:22:
5b:11:89:1d:d9:40:e4:86:ec:03:36:e5:7b:cc:9a:8c:f9:8f:
1d:30:21:44:77:f6:85:8f:94:db:a3:2b:4a:2f:49:6a:63:5f:
93:cb:c9:a8:59:f8:75:fc:cb:59:34:7b:73:26:1c:ea:25:13:
da:95:7f:0f:c6:5b:d9:42:59:d3:e2:3b:41:e4:d7:b8:85:33:
12:a6:bd:d6:8e:2a:43:e8:8b:1a:36:bc:1b:77:2f:4c:99:cc:
e4:e5:3c:1b:a5:1f:74:98:09:62:e5:03:5e:df:e4:66:1d:2c:
ec:08:e1:fb:af:62:78:15:c0:f1:f1:76:93:71:39:93:96:47:
99:e5:4f:f1:4c:70:9b:c4:c4:17:6e:8d:c6:b8:76:5f:1d:67:
6d:e4:ff:05:74:20:f8:c3:51:96:ff:48:68:4c:c3:92:a1:70:
b4:c4:7e:49:79:c0:f3:c5:80:e0:c9:5f:65:f3:a9:a3:74:10:
dc:ec:27:3e:37:af:84:96:3c:4a:82:4e:78:3f:22:f4:68:7b:
24:33:6b:b1:f9:6f:e1:e4:b7:75:c6:7f:8c:db:3e:46:02:03:
a8:a9:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:41 2024 by rpki-client on console-ams.rpki-client.org