Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/v_NEOeWP853PlxDQgXWHo7SE8U8.roa
File: v_NEOeWP853PlxDQgXWHo7SE8U8.roa (raw, json)
Hash identifier: 6tn7PRTPAhDAr4aJXwzEUsUESVfpE4euXzZaQJbWh10=
Subject key identifier: BF:F3:44:39:E5:8F:F3:9D:CF:97:10:D0:81:75:87:A3:B4:84:F1:4F
Certificate issuer: /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Certificate serial: 0185739F10D90658E405BEAE2D0EAFE3F909
Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/v_NEOeWP853PlxDQgXWHo7SE8U8.roa
Signing time: Mon 02 Jan 2023 17:54:42 +0000
ROA not before: Mon 02 Jan 2023 17:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 95.176.0.0/17 maxlen: 24
185.147.220.0/22 maxlen: 24
81.14.0.0/17 maxlen: 24
2a00:be80::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:9f:10:d9:06:58:e4:05:be:ae:2d:0e:af:e3:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496
Validity
Not Before: Jan 2 17:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff34439e58ff39dcf9710d0817587a3b484f14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:f5:b3:d9:25:a4:43:6d:26:b0:68:10:e0:
0e:25:58:0d:e6:9f:9d:47:5e:a1:44:92:2e:50:8b:
d3:2a:24:b7:a1:13:fa:0a:97:9e:b5:c4:33:e5:24:
23:e8:b2:fb:29:84:c3:a8:a5:a4:cc:11:53:90:18:
52:cb:8a:24:f0:aa:01:6b:be:2e:ca:a9:a0:e9:ac:
47:32:ba:b7:27:30:f9:e2:f8:dd:05:0d:7e:47:40:
48:90:0e:6f:49:0f:6d:6f:26:7d:3d:96:f1:76:c9:
ad:7a:98:94:48:de:73:ee:fe:d5:18:a6:73:e9:92:
13:ca:bf:f3:73:f6:cd:da:8c:4b:ac:d4:e9:1d:be:
22:4d:6a:2b:4a:a9:2f:a0:a2:0e:bc:0d:60:a7:fb:
8c:e5:2a:56:03:1d:90:58:95:22:b1:db:97:82:f1:
e6:ad:27:96:0e:cb:aa:00:ec:a3:f4:cc:1b:d5:74:
97:6c:fd:2d:ca:2c:50:5a:e3:f6:b7:cb:c1:f3:c0:
98:3f:ef:d1:82:ea:c7:28:7f:3d:ce:4d:88:40:51:
9e:16:a8:4b:bb:f0:ff:29:3b:8d:7b:ef:1e:15:a5:
c0:96:0b:57:1b:16:db:e6:7c:fb:83:93:62:52:3e:
01:d6:da:e4:7a:44:09:22:70:77:02:34:dd:88:5b:
21:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F3:44:39:E5:8F:F3:9D:CF:97:10:D0:81:75:87:A3:B4:84:F1:4F
X509v3 Authority Key Identifier:
keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/v_NEOeWP853PlxDQgXWHo7SE8U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.14.0.0/17
95.176.0.0/17
185.147.220.0/22
IPv6:
2a00:be80::/32
Signature Algorithm: sha256WithRSAEncryption
3f:16:24:44:03:e9:9a:74:69:9a:c9:f0:54:5c:1f:8c:be:58:
b8:df:9c:63:c1:a0:49:c1:a8:df:19:ee:99:c0:58:8b:53:35:
66:f0:24:72:d0:5b:16:7f:53:5d:bf:e3:61:ea:21:65:3f:66:
03:7d:17:c9:fc:54:91:d1:f1:56:09:8a:1c:c7:11:84:f5:3c:
47:be:bd:74:c5:62:63:b7:6e:b5:3d:74:56:30:3f:bc:8a:06:
17:f3:1d:03:3a:dc:9c:e4:c6:97:6c:78:71:f1:10:bc:eb:5c:
14:f7:09:ea:a2:3c:bc:d9:c8:47:74:87:b8:7d:a2:f3:b9:60:
e8:ae:96:b0:52:bd:46:2f:bd:01:de:83:ba:39:f9:f5:81:e7:
ea:39:fb:8d:b5:b6:5c:8c:bc:c6:63:e8:55:8a:00:e7:e2:c4:
49:b5:86:cf:9f:43:4c:40:80:e3:cf:68:ce:12:7f:47:d7:5c:
0a:57:b4:1a:f6:b4:1a:a3:46:2a:65:36:07:f5:21:b1:1f:b5:
da:8c:25:81:99:d3:38:1f:d0:ca:c3:cf:de:83:1e:7e:dc:c9:
59:eb:75:1f:c4:cc:76:f6:e8:d6:79:93:e3:98:52:14:e8:7f:
c0:f6:d1:08:f6:8f:8a:54:68:70:1b:da:bd:75:bb:a4:c8:69:
cd:5a:4f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:17 2024 by rpki-client on console-ams.rpki-client.org