Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/nGhR6emmYtRWpeCYIjk0oEDelqI.roa
File: nGhR6emmYtRWpeCYIjk0oEDelqI.roa (raw, json)
Hash identifier: lZd4QAZ0Dp/MK8+A2GlzwKV9iK9VJQ47nY0oskaQwe4=
Subject key identifier: 9C:68:51:E9:E9:A6:62:D4:56:A5:E0:98:22:39:34:A0:40:DE:96:A2
Certificate issuer: /CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Certificate serial: 01856D53D043EA909ADE2B7F4BE808690FC1
Authority key identifier: 46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/nGhR6emmYtRWpeCYIjk0oEDelqI.roa
Signing time: Sun 01 Jan 2023 12:34:47 +0000
ROA not before: Sun 01 Jan 2023 12:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62248
IP address blocks: 185.73.132.0/23 maxlen: 23
185.73.135.0/24 maxlen: 24
185.73.134.0/24 maxlen: 24
2a05:4280::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:d0:43:ea:90:9a:de:2b:7f:4b:e8:08:69:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ffa79440c517eddbaced3aa60e5fbcbdc6502e
Validity
Not Before: Jan 1 12:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c6851e9e9a662d456a5e098223934a040de96a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f4:6a:9d:09:ca:f6:e8:42:91:34:78:1c:f7:
83:26:85:d8:10:d6:56:b6:a0:4f:2d:0a:b7:42:b5:
a3:ea:2b:4a:37:41:c3:79:7d:0f:da:46:7f:5c:b2:
71:0f:de:93:49:89:69:ca:21:83:14:89:5a:63:e2:
5f:8b:15:45:dc:56:7d:0d:62:b8:c9:0a:5b:78:01:
bb:2d:2a:31:82:3f:89:22:f2:bb:8d:9c:d3:8f:d3:
8c:ac:1b:6f:01:c1:f2:c8:cc:f5:93:60:9f:db:05:
2a:f9:86:cf:20:58:f5:3b:d2:ca:81:49:e3:e7:30:
4a:f9:20:46:de:ed:e5:5a:36:d0:34:d7:2d:4b:2a:
45:f5:d5:6e:43:44:d9:2a:b5:72:b6:c9:98:bb:2f:
9d:d1:f8:09:3a:53:fc:24:75:e3:7d:86:5e:83:b9:
2f:4b:24:74:bc:a9:aa:c9:34:92:82:cd:21:e7:7e:
9e:e3:79:8f:d4:fe:7b:13:d6:df:24:66:1d:82:43:
b0:36:ff:d1:10:8d:d3:b4:11:cc:82:47:b8:2a:91:
f3:4a:81:cb:a8:30:9a:eb:e4:9d:54:1f:54:58:23:
83:7d:24:ec:d0:a0:8e:c0:bc:be:33:e6:53:96:6f:
d6:7e:fc:2a:70:2d:e7:59:b5:f1:11:c5:b3:fe:24:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:68:51:E9:E9:A6:62:D4:56:A5:E0:98:22:39:34:A0:40:DE:96:A2
X509v3 Authority Key Identifier:
keyid:46:FF:A7:94:40:C5:17:ED:DB:AC:ED:3A:A6:0E:5F:BC:BD:C6:50:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv-nlEDFF-3brO06pg5fvL3GUC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/nGhR6emmYtRWpeCYIjk0oEDelqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f92a0d-f74a-4768-96c5-4dc2e9361ff1/1/Rv-nlEDFF-3brO06pg5fvL3GUC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.132.0/22
IPv6:
2a05:4280::/29
Signature Algorithm: sha256WithRSAEncryption
50:bb:0d:19:98:ce:e9:a9:47:26:38:45:66:04:5f:df:25:0e:
ca:21:84:0f:6c:f3:a8:21:07:55:29:ee:f9:b3:7b:ce:ed:aa:
9f:57:44:69:d6:5d:f2:6a:95:f2:ce:b4:ac:d6:e5:08:b8:5e:
f3:c5:db:dd:a1:6e:3e:65:09:32:4c:85:b1:00:30:7c:49:31:
d0:55:58:29:b3:e2:84:d8:9a:a5:62:08:f4:ab:bd:b2:ed:3d:
6c:6b:87:ed:3e:05:0b:69:33:7e:4c:ab:ba:16:9a:d7:f8:f8:
37:5c:f5:87:e0:fa:5e:75:34:c4:61:ef:75:04:36:38:7d:c9:
0a:80:c7:85:76:eb:89:e2:2b:f2:77:2b:0e:a8:d5:35:ce:cb:
d0:fd:5a:ad:4b:9d:b7:d7:f4:93:da:17:83:bb:1f:69:13:cd:
0c:4b:d3:98:6c:1d:30:26:7c:31:40:67:bc:88:7c:f0:a0:87:
6a:cd:e0:fb:64:84:f4:fb:2d:d7:35:09:e8:cd:dd:75:e9:3d:
54:be:74:bc:6f:9c:29:c7:8f:78:0e:1a:f0:8b:d8:15:6c:74:
ab:f6:a7:a5:df:06:31:59:74:b1:49:ff:b4:f7:75:9e:97:39:
65:e6:cb:a2:ba:b5:33:f4:a6:7d:59:a0:29:b3:ee:f7:c3:06:
05:e1:f9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 12:38:33 2023 by rpki-client on console-fra.rpki-client.org