Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ncarkyDhR4KEV5-axxFDY5A4W24.roa
File: ncarkyDhR4KEV5-axxFDY5A4W24.roa (raw, json)
Hash identifier: Vr37Fz2WKGDPqnGgxKmIEFr03KEF3BxJWPbmMpxNqyc=
Subject key identifier: 9D:C6:AB:93:20:E1:47:82:84:57:9F:9A:C7:11:43:63:90:38:5B:6E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709548DBD94EA77D0A91207A7BB19CBA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ncarkyDhR4KEV5-axxFDY5A4W24.roa
Signing time: Mon 02 Jan 2023 03:45:09 +0000
ROA not before: Mon 02 Jan 2023 03:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50245
IP address blocks: 92.38.38.0/24 maxlen: 24
95.47.138.0/24 maxlen: 24
93.171.200.0/22 maxlen: 24
2a02:128:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:48:db:d9:4e:a7:7d:0a:91:20:7a:7b:b1:9c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dc6ab9320e1478284579f9ac711436390385b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b0:23:60:84:5a:fc:4c:7b:f7:a4:88:44:1c:
eb:01:80:54:8d:2c:ba:3d:32:2e:eb:69:90:28:df:
68:fe:66:0a:2a:3f:da:aa:30:6c:5c:c3:b8:f7:55:
28:6a:1e:4b:93:e1:08:30:3f:a5:9d:58:7a:6c:a7:
c7:f1:3e:9b:ee:91:69:17:5b:4e:aa:1b:83:46:75:
59:4d:25:d7:a3:45:d5:f8:02:2a:74:32:ad:46:18:
df:b9:2c:e6:c6:60:e6:2b:de:48:35:70:67:e3:b1:
06:70:f7:78:8f:b0:a8:7b:a9:0b:b6:88:5d:ff:30:
53:0b:58:cc:4d:b8:ff:6f:6c:4d:16:b0:8d:ce:d0:
c3:4b:b1:c3:18:b6:95:f2:30:94:36:cf:81:25:79:
14:d0:c8:5e:65:7e:5f:e0:d6:22:51:0a:07:da:45:
8c:fa:85:5a:0c:9c:59:ac:c6:22:fd:67:8b:48:a7:
4e:df:20:a4:ba:bb:e8:14:27:75:fb:25:bb:26:25:
38:8a:27:66:5d:13:23:6b:1a:2d:d9:c9:77:81:ce:
c1:e5:62:ae:4b:aa:30:53:80:56:1c:be:5c:b4:ee:
d5:02:0b:92:fc:6b:99:d4:dd:ef:ff:a0:66:ef:85:
e7:82:d0:99:7a:0d:50:2c:b7:ea:6c:8a:2a:a8:6a:
04:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:C6:AB:93:20:E1:47:82:84:57:9F:9A:C7:11:43:63:90:38:5B:6E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/ncarkyDhR4KEV5-axxFDY5A4W24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.38.38.0/24
93.171.200.0/22
95.47.138.0/24
IPv6:
2a02:128:7::/48
Signature Algorithm: sha256WithRSAEncryption
02:94:b5:7f:b7:ba:6b:f3:6f:48:f8:58:23:a4:22:dc:88:86:
16:30:e1:63:6f:7d:cb:43:25:a6:e8:25:ae:67:f1:bf:35:30:
a1:ce:0e:b8:6a:18:99:d4:17:63:81:19:3d:c2:cf:01:7d:16:
f0:77:6f:c2:b6:aa:06:d8:46:bb:5f:81:6b:44:8f:ef:14:23:
bb:10:b4:46:27:fc:98:7d:2d:f0:87:2f:f2:26:a8:06:5f:cd:
eb:6c:b4:f9:a9:ff:3c:d5:64:e9:e0:95:7f:16:52:06:c8:5c:
11:f6:c1:a9:25:6a:f3:67:c9:c7:48:b7:b2:49:72:9b:af:58:
57:f7:8b:47:ce:34:73:0b:c6:88:9f:78:89:7a:9c:f9:6c:60:
cb:c3:85:d3:95:6a:1e:40:66:3c:0f:16:20:8c:97:9b:cf:ea:
0b:8a:9f:a0:6c:44:ee:05:88:33:d0:ce:f6:0b:86:7f:59:6c:
b8:21:24:0e:10:dc:32:37:d6:c2:d2:d4:54:fe:f9:75:48:d2:
47:bc:38:d3:48:68:7b:66:42:cc:b1:3d:3c:ca:6b:68:a9:99:
85:15:71:05:d2:40:72:96:c0:3e:74:7b:28:f0:e6:7f:99:42:
ca:a3:f8:2c:a9:d6:2f:74:57:e6:b5:47:2d:6e:17:a9:25:64:
c5:f8:d0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org