Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/NXio3-m-oA_nuLvVHBlk206BLwo.roa
File: NXio3-m-oA_nuLvVHBlk206BLwo.roa (raw, json)
Hash identifier: nIYLPGmDGxGvyAlxWYQMnKKj/1DZ4rEmII+rr+gLsiY=
Subject key identifier: 35:78:A8:DF:E9:BE:A0:0F:E7:B8:BB:D5:1C:19:64:DB:4E:81:2F:0A
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 018570427EDF1A98244C7BCE2F7DBC213244
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/NXio3-m-oA_nuLvVHBlk206BLwo.roa
Signing time: Mon 02 Jan 2023 02:14:44 +0000
ROA not before: Mon 02 Jan 2023 02:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 95.142.116.0/24 maxlen: 24
95.142.113.0/24 maxlen: 24
95.142.119.0/24 maxlen: 24
95.142.123.0/24 maxlen: 24
95.142.122.0/24 maxlen: 24
185.54.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:7e:df:1a:98:24:4c:7b:ce:2f:7d:bc:21:32:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 2 02:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3578a8dfe9bea00fe7b8bbd51c1964db4e812f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:88:20:37:f7:b7:d3:91:88:9e:8e:dc:41:
69:60:ba:40:db:36:2d:37:cf:b9:85:81:1d:bb:bf:
21:87:55:94:60:98:f3:44:03:69:bc:e5:7d:ef:ce:
1c:e3:05:d2:de:26:1a:4a:2a:77:84:8d:35:5b:5d:
ea:ff:aa:b7:39:02:fd:0f:ed:76:05:cb:8e:87:73:
a7:ed:ef:9a:11:dc:cd:af:92:bc:2a:d5:ce:17:26:
99:41:0e:6c:11:f4:7a:e7:00:4f:47:c4:ed:1d:b9:
91:3a:5c:a1:4d:8e:7b:7d:56:e1:87:bd:71:b7:21:
d2:a6:33:0e:a9:f8:ef:9c:6b:4f:72:39:31:bd:cd:
eb:b9:ce:33:85:db:84:56:4d:3c:f4:af:f2:e1:21:
32:15:3e:55:24:5f:77:c9:14:cd:18:bc:dc:3e:98:
de:ec:02:bb:87:6e:79:87:f6:ab:04:84:1b:6a:30:
3b:ab:d7:94:47:26:88:e5:cf:bb:c3:75:0f:6c:90:
17:bf:00:ec:9c:27:da:45:cd:9d:c4:9f:39:78:ad:
4e:ef:bf:8c:e2:ca:34:e4:92:2a:64:df:82:73:08:
57:ca:df:23:a1:45:d3:fa:2f:c3:88:4d:50:e5:63:
c0:d9:28:25:27:47:2c:e1:97:ef:ea:e9:08:48:1e:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:78:A8:DF:E9:BE:A0:0F:E7:B8:BB:D5:1C:19:64:DB:4E:81:2F:0A
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/NXio3-m-oA_nuLvVHBlk206BLwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.113.0/24
95.142.116.0/24
95.142.119.0/24
95.142.122.0/23
185.54.230.0/24
Signature Algorithm: sha256WithRSAEncryption
09:d6:2b:9e:a9:f0:6c:b5:e9:f4:42:64:2c:f3:d6:15:1d:8b:
09:18:d8:32:14:64:37:66:45:b3:25:71:17:0f:4f:b6:33:4b:
22:22:3c:aa:ab:19:35:22:1a:64:d5:39:4e:3d:e4:7d:5c:b2:
20:b4:7d:87:ab:cd:86:f4:85:b7:f4:f3:5a:7a:b8:bb:74:a5:
78:ba:39:72:72:9b:27:f8:18:b0:59:07:31:78:d4:25:12:69:
00:d9:68:67:fe:23:a0:4f:d2:7c:24:96:6d:24:05:dd:4e:c1:
00:d4:4a:0b:4c:b3:7a:b2:51:8b:b8:c0:28:ff:5c:80:ee:62:
47:51:1e:f4:85:f0:25:de:42:51:3e:5a:d6:f7:96:2b:26:fc:
1a:9a:f4:c2:5c:95:68:e3:37:1a:ec:81:49:fb:f5:e8:55:d5:
4c:84:3c:a7:40:4c:b5:96:7c:11:4d:fd:2f:99:be:2d:d1:be:
29:19:79:ca:8b:de:84:14:e8:56:5c:5b:fb:80:97:f8:d7:8f:
f5:30:0d:f6:14:2d:f1:ba:a5:ad:84:f0:30:4f:9a:a5:9e:6f:
76:61:49:0e:c6:a2:29:41:16:fd:d1:b5:ae:5c:fe:48:8a:97:
0e:70:70:a7:68:26:d2:ce:47:e6:ed:fc:99:eb:5f:e6:57:fa:
11:5b:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:33 2024 by rpki-client on console-ams.rpki-client.org