Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/nXbp7JaKds6DahbpoLPkTs7EJQM.roa
File: nXbp7JaKds6DahbpoLPkTs7EJQM.roa (raw, json)
Hash identifier: aGcF0roYyfFjVqrbWFVkFY1C7SLRevNbVi0Kn9fm4LE=
Subject key identifier: 9D:76:E9:EC:96:8A:76:CE:83:6A:16:E9:A0:B3:E4:4E:CE:C4:25:03
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 01856B9360E00C3613734F31EFDE170B45B4
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/nXbp7JaKds6DahbpoLPkTs7EJQM.roa
Signing time: Sun 01 Jan 2023 04:24:58 +0000
ROA not before: Sun 01 Jan 2023 04:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35156
IP address blocks: 94.31.15.0/24 maxlen: 24
82.98.248.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:93:60:e0:0c:36:13:73:4f:31:ef:de:17:0b:45:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 1 04:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d76e9ec968a76ce836a16e9a0b3e44ecec42503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a2:78:3c:73:ef:5a:43:dd:dc:5d:b8:8c:31:
a6:57:f6:2b:fb:ed:8a:38:6d:e5:f5:28:58:d0:ef:
3e:12:01:c4:7c:9e:9e:d1:de:4b:d8:97:bb:1c:5a:
70:11:9b:d2:75:53:27:05:9e:6f:92:ee:ae:77:3a:
5b:f8:ec:4f:fe:c8:05:84:13:fb:0f:22:a7:07:38:
2a:81:ff:73:e1:3d:5c:f6:72:42:89:17:ed:9a:a4:
9d:b7:d4:8f:de:99:37:03:5e:7f:c1:28:f2:57:74:
8a:b3:fb:54:fa:75:14:da:44:42:16:f5:b8:89:ee:
8f:7e:cb:44:a8:4e:ba:2b:8f:d9:7f:97:55:4f:33:
82:be:b8:ab:29:ce:0f:49:6a:50:79:81:c3:94:78:
d7:5d:25:fc:dc:e1:ac:93:77:be:62:34:9a:ae:63:
59:c4:57:33:61:7c:4d:a3:cc:5a:40:dd:f4:40:61:
b8:05:2e:95:e9:8a:7a:19:9e:f6:08:1f:ff:9b:95:
a3:ef:3d:7f:8d:53:1e:69:94:5c:fd:74:0e:16:74:
b5:d2:a5:98:50:61:77:4f:13:b9:05:57:cf:f1:ef:
d6:42:e1:4f:49:7c:1c:70:5a:ac:77:44:f0:ed:d6:
17:52:20:2d:7e:d0:97:3a:13:d9:84:99:09:43:80:
14:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:76:E9:EC:96:8A:76:CE:83:6A:16:E9:A0:B3:E4:4E:CE:C4:25:03
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/nXbp7JaKds6DahbpoLPkTs7EJQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.98.248.0/24
94.31.15.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fa:09:12:51:7b:74:c8:2b:cd:16:f3:03:9a:54:b6:ab:0a:
87:1e:c3:99:ff:52:63:d2:ac:6d:d1:18:f0:47:f9:cf:6c:d8:
52:04:34:2b:f4:75:f6:be:fd:18:29:37:7d:fb:87:56:9b:a2:
a0:c2:17:89:07:5e:21:c1:f2:f3:8d:b0:e2:0d:c2:ec:5a:da:
b2:93:36:a1:cc:d6:ce:c0:9f:0e:36:16:c8:1d:83:25:32:47:
96:eb:c4:68:17:d6:e7:ba:bd:5b:28:82:7f:b1:e1:47:5c:2e:
88:ad:34:6b:03:0e:f5:b8:64:90:05:1b:5f:ef:e8:f1:d0:4b:
07:ea:c2:27:d0:40:b4:50:c4:27:a9:be:e6:45:b8:5a:51:ae:
ce:c1:fe:0e:c8:c4:5f:54:99:9f:e4:3f:71:04:37:f2:c7:8a:
30:b4:84:e6:0b:79:7d:e8:f3:4e:51:7b:c2:1d:84:bf:bb:35:
ad:59:52:24:c4:49:82:9a:30:41:b6:90:95:60:51:04:90:ca:
69:e1:dc:4c:45:a4:a5:4c:4c:dd:8e:96:23:d2:fa:59:49:d6:
42:11:2f:bc:7a:f3:a3:2a:36:2d:c1:92:b0:8b:ff:f9:46:6f:
05:3c:38:f9:73:bb:4f:aa:0e:b1:39:59:54:95:92:28:f3:b0:
15:ce:02:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:46 2024 by rpki-client on console-fra.rpki-client.org