Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NrKMRSHHwkwkUUv3GqX85Z7MLds.roa
File: NrKMRSHHwkwkUUv3GqX85Z7MLds.roa (raw, json)
Hash identifier: f1dHXpbK1LMMADUx6OAuE9h/lRXATmvu1B9Dn8U6Go8=
Subject key identifier: 36:B2:8C:45:21:C7:C2:4C:24:51:4B:F7:1A:A5:FC:E5:9E:CC:2D:DB
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018570956A1CF9DA603BF4EA6951D9DCB7A3
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NrKMRSHHwkwkUUv3GqX85Z7MLds.roa
Signing time: Mon 02 Jan 2023 03:45:18 +0000
ROA not before: Mon 02 Jan 2023 03:45:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60286
IP address blocks: 146.120.92.0/24 maxlen: 24
146.120.92.0/23 maxlen: 23
146.120.93.0/24 maxlen: 24
95.47.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Aug 2023 14:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:6a:1c:f9:da:60:3b:f4:ea:69:51:d9:dc:b7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36b28c4521c7c24c24514bf71aa5fce59ecc2ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:dc:44:ca:b8:52:1f:e6:96:7c:ea:99:7e:
ec:dd:ae:5e:da:77:55:92:f5:72:c5:cb:cf:19:c0:
39:1c:77:c3:13:8f:c9:31:3f:9a:5a:64:88:5a:45:
1a:cd:1d:dc:42:77:cf:04:fc:dc:76:b5:68:0e:75:
53:4e:f2:61:03:f8:c1:2c:1f:cb:90:ba:56:da:b7:
39:66:1b:2e:e0:35:61:84:77:c5:30:30:db:d9:5e:
3e:6c:02:c9:11:0d:01:b0:0e:8a:e5:49:d7:b0:6e:
7b:71:e8:c2:45:bf:96:89:a7:37:be:74:af:4f:59:
4d:13:20:06:6e:8d:40:12:18:f2:6c:8b:e7:0d:2a:
59:c7:c1:07:1a:9a:90:b2:2a:d2:c4:73:f2:9a:24:
11:05:be:3e:e6:75:dc:b6:f5:ca:44:39:1c:e2:2b:
8c:66:6d:97:2d:ea:ff:a5:00:1e:9b:72:35:83:bc:
34:7a:40:a7:08:71:cd:80:9f:4d:b3:9d:57:48:dd:
43:85:20:25:dc:dd:32:33:49:4c:4a:14:7b:f6:a5:
79:9f:86:82:a4:9d:65:ec:3d:60:6e:8f:bd:e8:4a:
49:8d:5c:0c:82:a5:86:42:cd:dc:05:4a:32:6e:17:
3c:c5:c0:a6:58:37:b1:4c:91:28:b4:33:7e:8e:2d:
24:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B2:8C:45:21:C7:C2:4C:24:51:4B:F7:1A:A5:FC:E5:9E:CC:2D:DB
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/NrKMRSHHwkwkUUv3GqX85Z7MLds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.188.0/24
146.120.92.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:eb:b5:60:13:4a:d3:6d:8a:40:c5:0c:8b:1f:01:92:fb:4c:
33:01:90:a9:78:e3:bb:7a:19:00:4f:f0:cd:a4:f0:44:8b:8e:
1f:29:ff:f6:3d:bc:ba:74:36:a7:b0:5f:8b:4c:95:e5:d8:c3:
21:44:ce:5f:0a:19:90:b2:4c:87:31:d7:75:f7:7e:fa:c3:59:
00:97:52:0b:f6:29:f4:62:e3:38:dc:c0:82:b6:26:02:13:94:
b3:82:cc:6c:0c:23:96:db:83:a6:e7:6c:ff:2b:57:e0:42:5f:
d5:4c:43:31:bd:a2:75:c6:3b:98:42:9c:0c:e9:36:0d:0a:47:
9e:6f:97:51:a4:e6:d1:0f:85:96:ee:12:d2:9c:00:74:2a:fc:
dd:50:b6:4a:1c:ab:35:06:90:21:69:d4:f4:18:37:4d:5c:bc:
84:0b:00:93:82:a0:64:30:a1:45:1f:59:0b:72:25:b1:56:62:
8c:ae:4a:d6:5a:bd:19:85:af:b5:68:ad:60:82:6d:33:81:1d:
cd:cb:87:07:ac:a3:07:40:24:9c:24:c2:b8:52:35:d8:ab:e6:
37:56:f8:a0:f7:35:c3:da:2a:89:31:eb:a9:fa:b1:e3:d2:c4:
bf:ed:65:0d:e2:13:2e:d6:bb:d4:b9:6d:36:81:6d:d7:e4:45:
7d:86:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:50 2024 by rpki-client on console-ams.rpki-client.org