Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/NtLdWwI_XqCJpN-4tgnrAzutRnA.roa
File: NtLdWwI_XqCJpN-4tgnrAzutRnA.roa (raw, json)
Hash identifier: Vw/aiUsSOeIP9v+jruF6debeIYc+gsJ2X746bytFokw=
Subject key identifier: 36:D2:DD:5B:02:3F:5E:A0:89:A4:DF:B8:B6:09:EB:03:3B:AD:46:70
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0185710BF3C9802A4688D26C657BE432F7BA
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/NtLdWwI_XqCJpN-4tgnrAzutRnA.roa
Signing time: Mon 02 Jan 2023 05:54:46 +0000
ROA not before: Mon 02 Jan 2023 05:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208229
IP address blocks: 185.250.196.0/23 maxlen: 23
89.29.250.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:f3:c9:80:2a:46:88:d2:6c:65:7b:e4:32:f7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Jan 2 05:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36d2dd5b023f5ea089a4dfb8b609eb033bad4670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8c:b3:5b:8f:d6:8e:aa:e5:0c:85:94:f4:fa:
d0:59:31:58:5e:62:d8:db:12:7a:5b:35:1d:08:26:
19:11:a3:2b:65:32:2e:7b:37:c8:8e:7d:df:fc:ef:
aa:18:5b:a3:47:6a:5a:4b:4f:9f:6f:b5:34:f5:ac:
3c:a5:84:44:e9:60:76:79:db:05:3d:8c:43:2a:d9:
f1:b2:4e:0e:26:cc:65:c8:ff:2c:f3:42:85:71:fe:
7b:61:74:c1:1d:fa:99:e0:f3:02:c5:62:27:3f:ed:
ef:e4:63:c7:60:1d:fa:69:d8:e5:75:35:b5:1a:88:
57:eb:d5:79:25:37:e2:36:f6:b9:58:70:e3:de:e5:
ef:9c:62:c7:d9:66:38:a2:68:8d:e2:7c:59:d6:95:
5e:3b:16:6e:f7:22:9b:4e:0c:6f:57:82:9f:56:fa:
30:03:4a:3b:f8:2a:90:a3:77:1b:e6:64:4a:f9:b7:
ab:82:c4:b0:8b:03:1e:25:6f:4f:8a:0c:d7:ef:fa:
0d:e0:25:4c:62:ef:63:ac:9d:d8:54:f8:b0:af:7f:
d3:2c:d2:93:a7:65:e4:6d:f2:0b:27:71:d8:59:a5:
aa:a7:74:9c:87:96:0e:c1:c1:63:42:ae:c4:09:e8:
3d:24:8b:54:eb:6e:0b:ea:19:f8:59:b4:7c:dc:c2:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D2:DD:5B:02:3F:5E:A0:89:A4:DF:B8:B6:09:EB:03:3B:AD:46:70
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/NtLdWwI_XqCJpN-4tgnrAzutRnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.250.0/23
185.250.196.0/23
Signature Algorithm: sha256WithRSAEncryption
70:e8:d9:eb:34:47:51:c0:a2:c7:d8:85:d3:5b:e3:97:60:4e:
b8:34:1b:96:d3:81:7f:ec:14:16:f0:b2:4e:29:f7:ba:a2:8a:
8b:47:66:ef:fa:21:c1:a9:9d:a6:e1:98:46:f6:82:14:6f:bf:
51:5d:60:bb:12:fb:1b:d3:8d:97:03:0f:7f:ed:fb:3e:eb:80:
8a:14:28:40:15:58:ff:26:ac:a3:cc:ba:9b:72:88:f7:ab:0c:
3a:94:6e:f2:bd:0e:67:d9:7f:d1:a3:2b:82:39:cd:51:a4:0a:
43:27:e4:1c:61:79:1b:9f:a4:d0:4f:1f:7e:b0:fb:03:b2:57:
10:01:32:5b:f4:bf:0b:96:eb:49:97:f2:98:15:83:f1:05:f3:
1c:98:98:05:f3:e7:6a:aa:eb:da:25:3a:3d:c4:9b:b8:1c:9b:
5f:df:d1:f4:90:64:39:5b:ab:cc:b6:0a:5d:22:11:6e:af:3c:
a9:1f:3b:35:55:d8:93:53:4b:af:92:4e:c6:5d:03:f8:6f:1b:
e4:09:08:b5:b5:7d:6d:1a:08:d8:1e:58:77:30:49:15:a7:c9:
72:20:27:1b:83:e7:27:b2:d6:08:47:69:8d:1c:48:2d:30:dd:
c9:2e:30:b5:7e:95:a9:b9:e0:73:1a:b6:c7:ef:cd:b0:de:a8:
23:a7:ea:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:43 2024 by rpki-client on console-fra.rpki-client.org