Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/N8wropMSVSnYEsotmEt9uKfM07w.roa
File: N8wropMSVSnYEsotmEt9uKfM07w.roa (raw, json)
Hash identifier: lZs4Br300w/rXUOMsumSpplsSFIwZCL9cFM40HfXDls=
Subject key identifier: 37:CC:2B:A2:93:12:55:29:D8:12:CA:2D:98:4B:7D:B8:A7:CC:D3:BC
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018A32EDCF73A916833C7164D7E430F287E8
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/N8wropMSVSnYEsotmEt9uKfM07w.roa
Signing time: Sat 26 Aug 2023 17:39:20 +0000
ROA not before: Sat 26 Aug 2023 17:39:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52468
IP address blocks: 94.125.137.0/24 maxlen: 24
46.29.28.0/24 maxlen: 24
201.77.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:32:ed:cf:73:a9:16:83:3c:71:64:d7:e4:30:f2:87:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Aug 26 17:39:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37cc2ba293125529d812ca2d984b7db8a7ccd3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5c:60:b1:6c:a7:5a:f1:84:23:88:cf:d2:58:
81:77:e5:98:3b:27:53:1e:78:4f:6d:04:b1:d1:0f:
15:ef:3f:fc:05:9f:c9:7c:1a:e8:c9:25:ec:bc:61:
09:20:20:ae:c8:1a:b5:8f:97:56:42:cc:a2:59:6b:
48:bd:3a:6a:f7:af:dc:68:f2:19:ca:32:a7:ab:96:
b1:34:6b:8d:d2:ea:9b:9e:e2:0a:e2:ae:03:ff:23:
cb:87:cb:0c:1d:89:8f:1f:b3:b8:2e:21:7a:ec:95:
74:52:c9:7f:6b:eb:60:66:26:d9:cb:45:84:49:68:
da:1f:7e:bd:61:bb:55:1d:9f:5c:e6:b7:4d:a1:93:
ea:ff:d8:91:e3:c4:c4:53:6f:84:7f:fa:9b:03:6f:
d0:05:cc:7e:25:8c:5b:4f:fe:d0:51:db:f6:d5:e7:
5d:d7:4b:d5:b2:7f:08:06:ee:91:42:6b:f2:77:4b:
0b:6a:17:53:37:69:c3:c9:a1:b1:00:19:b9:1c:c6:
27:62:df:6e:4b:8e:14:b7:0b:e8:c3:f8:df:96:49:
56:d7:a8:e9:be:e8:69:4f:78:ed:ff:ff:f5:18:09:
07:c4:50:35:36:07:6f:eb:a5:a2:02:6f:2e:0e:67:
47:ad:bc:47:ac:40:af:89:35:37:01:36:2d:b7:87:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CC:2B:A2:93:12:55:29:D8:12:CA:2D:98:4B:7D:B8:A7:CC:D3:BC
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/N8wropMSVSnYEsotmEt9uKfM07w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.28.0/24
94.125.137.0/24
201.77.53.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:89:5a:46:13:ba:30:df:ce:ee:48:7f:82:cd:b6:f0:2d:fe:
82:25:5d:ef:5d:f2:ec:fd:1e:85:38:0c:0b:e9:71:8d:2d:53:
c6:cd:72:d4:91:d4:8b:4b:0f:30:cb:fb:a3:f2:44:ac:ff:e1:
10:e7:9d:db:61:be:81:e4:13:84:0c:fb:48:8e:de:02:8a:70:
3d:12:6d:f5:61:62:8f:75:cf:62:8d:45:bd:23:dc:8f:17:df:
d0:bb:bb:e6:b9:7e:d9:34:bb:64:4e:3f:95:6e:87:76:c4:30:
a1:50:16:15:b4:64:88:15:45:02:78:79:f4:89:ce:28:ab:07:
3c:78:19:7d:19:ee:db:cd:5c:1b:e2:61:6b:31:28:20:61:81:
76:12:44:b2:40:ee:6c:56:8f:5c:a5:81:44:23:47:05:c6:3b:
80:f0:44:f1:b3:b3:14:71:2c:c5:78:72:37:a3:a2:b2:df:ac:
05:48:00:0b:b9:d2:1e:df:ef:5f:d5:fa:8f:1b:64:f7:a4:20:
f5:8a:6f:bc:55:e7:d6:06:b6:76:4a:ac:a9:bb:ce:ba:84:2c:
65:f3:45:fc:65:e1:dd:a3:b3:2d:c9:50:cd:1e:84:21:00:34:
07:db:22:30:ba:90:b5:13:6d:97:ab:92:f0:74:51:a3:01:01:
f8:ff:15:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 12:23:03 2023 by rpki-client on console-fra.rpki-client.org