Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/_NnGWkOXjOLnMrYQGM6jpNZdrMI.roa
File: _NnGWkOXjOLnMrYQGM6jpNZdrMI.roa (raw, json)
Hash identifier: gnzAul/tulYvftlArhgGLiPl4l7qy35uhB4kJwbu6Wc=
Subject key identifier: FC:D9:C6:5A:43:97:8C:E2:E7:32:B6:10:18:CE:A3:A4:D6:5D:AC:C2
Certificate issuer: /CN=cef84e4749cccd583fefc7797c3d67b10898a188
Certificate serial: 01856E01DB6A2CAA16053C38EAB3D86B32E1
Authority key identifier: CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/_NnGWkOXjOLnMrYQGM6jpNZdrMI.roa
Signing time: Sun 01 Jan 2023 15:44:53 +0000
ROA not before: Sun 01 Jan 2023 15:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43627
IP address blocks: 185.61.65.0/24 maxlen: 24
185.61.66.0/24 maxlen: 24
185.61.67.0/24 maxlen: 24
213.164.120.0/23 maxlen: 24
213.164.124.0/23 maxlen: 24
213.164.122.0/23 maxlen: 24
213.164.126.0/23 maxlen: 24
46.36.92.0/22 maxlen: 24
185.61.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:db:6a:2c:aa:16:05:3c:38:ea:b3:d8:6b:32:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cef84e4749cccd583fefc7797c3d67b10898a188
Validity
Not Before: Jan 1 15:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcd9c65a43978ce2e732b61018cea3a4d65dacc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b6:84:75:d2:b2:ba:50:26:8f:e7:e4:8f:49:
f0:c0:6b:a9:bf:51:59:28:29:95:0a:57:72:8c:d1:
fe:1f:2f:80:82:fb:60:46:39:8b:a3:7f:06:a2:dd:
1e:fe:d2:2c:74:4e:08:a1:18:18:97:32:29:83:96:
0e:78:f0:7a:40:9d:a7:f4:72:a0:9a:ed:bd:21:63:
20:3c:2a:fd:24:88:22:3a:d6:3a:f7:b1:30:71:24:
34:24:39:58:01:f6:b1:0f:3f:dc:06:b1:0b:43:74:
c1:a4:5a:f5:a5:59:7a:a2:f0:03:c3:77:18:5d:73:
c7:a8:e2:5d:d1:10:cb:c8:4c:b0:4c:41:8f:43:0d:
d5:57:b7:14:d4:8b:7f:20:c7:86:64:01:ed:29:b0:
ff:31:a4:6b:ba:9c:42:a2:8f:71:b5:fe:73:bc:06:
cc:c4:1f:69:29:8e:80:64:32:dc:2e:e2:e6:43:e5:
bb:3e:0a:1d:ad:6e:30:40:a0:96:5e:af:8d:eb:f5:
97:ea:0b:e4:9b:83:1c:55:13:ac:b9:d3:84:e5:d3:
b1:c9:b7:ea:c1:50:b0:24:d4:90:31:01:a3:17:13:
31:78:f5:68:23:16:3b:63:c8:1b:78:38:2e:8d:13:
f9:b9:d4:6c:f2:23:34:ea:25:dc:32:3f:7e:3d:29:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D9:C6:5A:43:97:8C:E2:E7:32:B6:10:18:CE:A3:A4:D6:5D:AC:C2
X509v3 Authority Key Identifier:
keyid:CE:F8:4E:47:49:CC:CD:58:3F:EF:C7:79:7C:3D:67:B1:08:98:A1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zvhOR0nMzVg_78d5fD1nsQiYoYg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/_NnGWkOXjOLnMrYQGM6jpNZdrMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/16afe5-a443-4237-ad7d-dab6e2c5fdd9/1/zvhOR0nMzVg_78d5fD1nsQiYoYg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.92.0/22
185.61.64.0/22
213.164.120.0/21
Signature Algorithm: sha256WithRSAEncryption
12:d5:0d:8e:91:a1:d8:ee:0c:a8:2c:8a:ac:94:88:14:79:33:
0c:2b:d8:33:b6:2d:e1:f8:c4:0c:80:a1:22:7d:57:da:fe:50:
85:98:14:bd:68:8a:9f:22:41:f8:8a:de:fa:bb:94:b8:43:18:
5b:dc:49:22:3e:13:ca:87:a6:14:2f:9f:20:b4:c3:97:c4:36:
19:1f:cf:b5:e3:78:a5:cb:23:2e:00:9a:7a:a5:d3:15:a6:c1:
76:ae:ea:66:4b:79:3d:9e:df:f7:94:be:87:a5:d9:69:21:38:
f7:6b:0f:2e:b4:1a:c6:62:af:09:89:ef:85:84:34:fb:53:03:
d7:71:2e:53:71:2a:5b:63:b1:7b:06:af:8c:8a:78:4a:ba:86:
2a:d7:06:79:0f:a7:bf:a7:b3:19:33:76:7e:66:1f:ed:78:97:
89:43:63:c4:fc:02:d2:ee:cc:cf:4f:5c:d9:68:0b:91:5b:a8:
de:22:39:c9:04:93:f2:e1:d7:1f:d5:a3:9d:ae:78:11:f0:d8:
e8:fe:60:0c:32:c1:b9:3c:58:e2:3c:52:c3:86:8d:a0:fc:b4:
c1:3e:5b:83:a8:96:25:2c:4e:2a:d7:70:8b:73:66:38:46:bb:
39:d7:78:7e:73:0d:04:6c:c4:89:93:3d:16:ce:87:39:68:93:
a6:fe:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:40 2024 by rpki-client on console-fra.rpki-client.org