Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NnifAmSTacxf4Qmrz1_5DE2ucGw.roa
File: NnifAmSTacxf4Qmrz1_5DE2ucGw.roa (raw, json)
Hash identifier: mYtecE8O42u7OyxWHF16D9gXFfZ+toOjUVRnsTWSP/c=
Subject key identifier: 36:78:9F:02:64:93:69:CC:5F:E1:09:AB:CF:5F:F9:0C:4D:AE:70:6C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CA054C2845E74CFF708B0F437DDCA8CF7
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NnifAmSTacxf4Qmrz1_5DE2ucGw.roa
Signing time: Mon 25 Dec 2023 09:35:58 +0000
ROA not before: Mon 25 Dec 2023 09:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 185.80.196.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
146.19.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:a0:54:c2:84:5e:74:cf:f7:08:b0:f4:37:dd:ca:8c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Dec 25 09:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36789f02649369cc5fe109abcf5ff90c4dae706c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:08:b2:a2:5b:da:db:93:01:af:f9:2a:4b:07:
8a:cb:10:31:44:7d:b9:7e:6f:79:c3:e7:d7:eb:cc:
c0:11:2c:46:dc:da:14:57:79:eb:00:63:56:aa:69:
d8:ec:1a:f2:77:02:90:5a:7c:e3:3a:a2:df:bb:41:
b2:dd:93:49:5e:13:58:9f:6a:62:12:6a:cf:8c:93:
1c:44:67:51:95:87:6a:2d:45:78:7f:c1:45:5a:4d:
ca:50:e3:8e:58:e3:b2:30:43:7c:5c:1e:b6:b7:f9:
b0:65:36:da:28:be:3d:97:72:38:f2:9e:3c:4b:07:
4c:7e:a7:51:f7:86:38:f1:57:e2:51:fe:b2:06:49:
41:66:e8:55:ec:aa:c4:2a:74:e1:b0:86:25:9b:95:
64:76:6d:50:a3:e9:ee:2e:72:fc:e9:e7:98:35:78:
e5:6d:c5:88:60:d9:5d:6b:ce:7f:cc:3a:c2:c1:be:
75:d3:ca:a7:18:c7:7e:d3:7b:e7:b5:3f:aa:db:8f:
e2:a3:e6:c2:74:db:14:15:cd:ef:e3:b7:af:31:b3:
91:02:f1:88:20:1d:e4:7c:bb:0c:c9:50:d8:aa:9a:
27:7d:6d:41:ff:fa:d3:5b:cc:c5:78:46:55:db:db:
ac:a9:73:4b:f0:bb:ad:09:dc:80:af:db:e7:e3:64:
ae:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:9F:02:64:93:69:CC:5F:E1:09:AB:CF:5F:F9:0C:4D:AE:70:6C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NnifAmSTacxf4Qmrz1_5DE2ucGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.13.0/24
146.19.135.0/24
185.80.196.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e1:ff:c4:9c:e4:79:d6:8d:3e:ae:4b:46:f1:7f:4a:c0:44:
eb:21:fb:0c:b2:8d:22:9e:cf:18:a4:28:5e:73:bc:f3:d3:b8:
a3:12:77:32:c3:6c:df:cb:c2:da:38:8d:8a:ea:a9:e8:21:4d:
73:05:cf:d7:9c:c8:00:ca:c0:5f:8b:40:4f:f4:55:3f:63:9c:
e0:7d:60:00:1c:31:4a:56:dd:69:da:8e:f2:e1:c7:a0:99:3c:
19:21:16:19:a1:f5:e4:23:6f:53:7a:5b:f4:de:bc:34:85:fc:
9d:ad:29:0e:79:b8:45:1a:49:78:89:63:f0:83:44:c1:d4:af:
3d:56:f1:fe:8c:95:a1:78:b3:12:61:f3:e8:50:76:be:06:67:
8d:77:63:91:66:18:1e:84:bc:62:bb:db:59:dd:25:db:f5:4c:
e6:5d:08:49:ab:c3:79:2e:7d:40:4b:49:42:df:6f:0d:90:26:
8d:27:81:b6:17:8d:78:27:68:73:04:fe:9b:45:6f:9f:32:93:
93:30:b0:2c:0d:1e:7d:87:e6:fc:5e:8a:d3:a6:8c:cb:98:df:
9f:64:a7:27:ad:d8:5e:34:75:cb:26:8b:9c:3e:10:7c:bc:f9:
6e:84:2b:cc:97:29:de:e6:4b:6e:7b:b3:f2:32:94:3e:d5:c2:
b0:49:05:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:23 2024 by rpki-client on console-ams.rpki-client.org