Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/NkSukWRPq_L27PS3aPoA6H_p9Ec.roa
File: NkSukWRPq_L27PS3aPoA6H_p9Ec.roa (raw, json)
Hash identifier: wHx+QxMTLNcq8A2aK8j9/iW7ObmVYZLSlTzsXehWlO4=
Subject key identifier: 36:44:AE:91:64:4F:AB:F2:F6:EC:F4:B7:68:FA:00:E8:7F:E9:F4:47
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 01864A1EF531D96D343A36E8B54536E8C04F
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/NkSukWRPq_L27PS3aPoA6H_p9Ec.roa
Signing time: Mon 13 Feb 2023 09:33:08 +0000
ROA not before: Mon 13 Feb 2023 09:33:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34909
IP address blocks: 95.169.212.0/24 maxlen: 24
95.169.211.0/24 maxlen: 24
95.169.210.0/23 maxlen: 23
95.169.210.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4a:1e:f5:31:d9:6d:34:3a:36:e8:b5:45:36:e8:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Feb 13 09:33:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3644ae91644fabf2f6ecf4b768fa00e87fe9f447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cc:5c:90:bf:8e:bd:7a:45:2b:f7:87:34:28:
e0:36:3a:ce:9f:9b:3c:fa:b0:5f:a2:69:06:56:39:
06:65:76:dd:ab:1a:20:97:b8:61:70:90:86:81:b8:
da:f1:21:b6:69:aa:1e:f8:4f:de:ae:7b:db:28:7d:
76:c4:ec:eb:cf:eb:dc:16:70:9e:3f:18:f0:c1:29:
13:2a:d4:09:75:99:28:8c:81:5b:04:6d:9b:1f:06:
0c:82:21:87:5e:2f:40:9c:02:85:69:e5:29:05:65:
48:b1:50:0b:c0:c8:c0:39:6d:fd:11:9f:67:d0:df:
71:de:b2:ea:bd:93:18:20:3d:c1:19:2a:76:c0:ab:
e6:97:4b:96:b3:ee:8b:06:b3:57:ae:27:5e:0e:58:
b1:6d:ce:1c:64:e9:ff:28:be:64:7e:b6:f0:af:2e:
4f:dd:82:37:7d:c8:e0:18:e9:05:f0:8b:b0:93:e4:
a7:32:31:27:21:a9:f9:25:ba:d5:8a:2a:4b:70:61:
71:5b:a9:9e:21:cc:14:3c:e5:d3:b4:70:9e:5b:5d:
b0:2e:03:17:ad:44:7a:7c:90:c1:03:1f:d9:08:40:
af:75:e6:9f:19:26:02:79:cd:48:43:c3:5c:6b:fb:
04:9a:0c:9d:20:9b:23:04:35:59:2f:29:4c:79:a9:
fc:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:44:AE:91:64:4F:AB:F2:F6:EC:F4:B7:68:FA:00:E8:7F:E9:F4:47
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/NkSukWRPq_L27PS3aPoA6H_p9Ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.210.0-95.169.212.255
Signature Algorithm: sha256WithRSAEncryption
88:15:b3:7c:78:c8:01:95:94:15:12:74:bb:f8:b3:b5:f9:3d:
c7:6f:07:bc:30:29:32:3e:85:d8:3e:67:fd:0f:59:cd:ac:93:
0d:1c:86:64:69:71:ca:7f:6a:6a:57:93:59:66:fa:a8:67:6c:
ac:30:61:e3:a6:1a:d9:5f:66:4a:51:bf:c1:6a:f5:bc:fa:98:
d2:40:a0:b0:a8:63:3a:78:9d:63:7c:e3:6a:37:18:2e:43:fd:
d6:50:d5:7b:e7:97:87:09:b8:ee:32:f6:aa:3e:35:a4:3b:49:
49:75:50:ad:4a:aa:28:98:29:9c:c6:60:05:1f:b8:8d:4d:88:
f1:95:d4:51:71:4c:e1:ee:70:9c:fa:bb:c1:8c:49:bb:0e:04:
c0:1d:ed:85:9e:02:e5:9b:a5:4d:a3:32:18:c0:99:89:e9:e4:
dc:fe:2f:21:37:1d:5c:d3:47:7f:d1:2c:16:24:4b:ee:0b:97:
76:94:ba:3e:e6:75:e9:53:9d:ff:a5:62:ce:6d:02:54:4a:f5:
bb:bf:aa:88:6d:ce:96:94:30:a3:58:1f:87:01:6e:be:5d:af:
86:d6:16:02:4a:21:ae:0e:18:ea:34:e3:d2:e6:a3:67:9b:29:
ae:6c:d5:f0:4d:b7:91:04:a2:46:be:15:eb:34:0e:2b:40:7e:
98:ef:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:58 2023 by rpki-client on console-fra.rpki-client.org