Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/Nt0HeAXiabxPgs4vLownqRPQHiM.roa
File: Nt0HeAXiabxPgs4vLownqRPQHiM.roa (raw, json)
Hash identifier: xWU0DIBAb0QdzIPKPre+UmtsnBBBSV5pbnUmrXZqAmU=
Subject key identifier: 36:DD:07:78:05:E2:69:BC:4F:82:CE:2F:2E:8C:27:A9:13:D0:1E:23
Certificate issuer: /CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Certificate serial: 018A40D8CDAC7520B2E28F50820DB94D76AD
Authority key identifier: D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/Nt0HeAXiabxPgs4vLownqRPQHiM.roa
Signing time: Tue 29 Aug 2023 10:31:04 +0000
ROA not before: Tue 29 Aug 2023 10:31:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201916
IP address blocks: 185.59.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:d8:cd:ac:75:20:b2:e2:8f:50:82:0d:b9:4d:76:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d1cd47a53ef57ebb567bc882ad2986faac5f0d
Validity
Not Before: Aug 29 10:31:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36dd077805e269bc4f82ce2f2e8c27a913d01e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:99:44:c0:1b:9a:d6:60:4c:26:cd:72:8f:b4:
ab:f4:91:23:f1:b6:fe:ea:d7:c7:d9:ba:31:1b:86:
d1:97:ae:7e:94:8b:01:4b:1a:fd:15:d1:0e:a6:45:
23:ef:22:2a:e8:39:55:60:3c:7b:05:3e:8c:4f:48:
dc:2c:e9:e6:ba:a8:ec:27:7a:46:06:df:ed:52:3d:
79:4c:63:65:8c:fa:54:34:d1:30:5f:07:ea:3e:0e:
7b:cd:f1:3a:ce:9b:4a:9d:ac:50:41:04:ad:d3:08:
b8:d6:7b:2c:6a:9b:26:0b:4f:d6:e9:db:fd:07:c7:
94:cd:b5:0c:62:ca:6b:df:4e:8b:89:e3:c3:3d:be:
d4:8f:dd:7f:a5:74:79:bb:29:49:ec:cc:2f:33:3f:
3e:02:c2:06:87:75:9c:5d:15:26:af:c1:97:b5:4e:
35:91:03:3c:9e:49:1e:33:35:6c:f7:c8:04:5b:d3:
db:65:e6:0c:84:72:33:f8:30:2d:6c:dc:98:f3:6f:
d0:91:12:82:c1:43:39:58:52:a3:7e:cd:cd:cb:5a:
83:8c:c1:b0:7f:ca:e7:55:5a:4b:91:f4:14:de:83:
1f:0e:ae:08:d7:64:6f:97:aa:30:db:67:bd:46:3e:
7f:19:f7:75:d2:c3:ed:c4:3a:7a:1f:a7:98:c5:c7:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DD:07:78:05:E2:69:BC:4F:82:CE:2F:2E:8C:27:A9:13:D0:1E:23
X509v3 Authority Key Identifier:
keyid:D5:D1:CD:47:A5:3E:F5:7E:BB:56:7B:C8:82:AD:29:86:FA:AC:5F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dHNR6U-9X67VnvIgq0phvqsXw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/Nt0HeAXiabxPgs4vLownqRPQHiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/861953-5f65-4465-9046-f4d071f50f1d/1/1dHNR6U-9X67VnvIgq0phvqsXw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.216.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:4b:5b:5a:95:ed:a8:6b:0a:d1:7f:31:de:2d:d5:e8:01:e8:
49:ca:5f:ba:71:ba:de:c4:0a:12:b1:dd:d6:e1:62:c8:77:05:
a0:6e:29:d8:95:50:26:e2:78:40:43:55:95:f7:71:c7:26:1e:
29:d0:79:0f:8c:a3:87:e4:1b:69:bb:5d:86:d4:db:6e:41:bd:
08:74:13:fd:37:d5:32:ab:cc:93:4d:e8:58:d3:db:3c:54:f3:
50:62:c3:cb:46:4e:c2:15:39:54:bb:8a:c9:03:e7:00:d2:ba:
30:64:42:4a:d3:16:30:3a:35:64:e8:1a:78:67:7d:c2:3f:0e:
86:4e:53:e8:79:88:bb:f4:be:48:69:8a:40:ef:21:7e:06:3a:
bd:e0:da:2c:d7:83:0f:9b:59:41:b2:47:61:98:26:6b:b8:c4:
e1:ae:63:f1:22:c0:aa:92:92:0c:fd:70:89:a1:ee:fa:65:87:
80:de:63:a9:a3:a4:3c:a6:7a:9c:ab:05:23:ed:6f:ab:75:d6:
5c:47:fe:96:1f:ea:a6:2e:f1:be:6a:bf:80:7f:6d:c5:51:8f:
97:45:7f:9e:58:fe:5e:2d:a6:47:07:5c:48:7c:77:5d:a2:8f:
24:b9:65:0c:2f:a8:71:6f:0c:66:ee:d8:31:80:56:0f:4c:eb:
da:f4:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:20 2024 by rpki-client on console-fra.rpki-client.org