Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NEDZl3ngeoU3jdxypmVmGcqITmg.roa
File: NEDZl3ngeoU3jdxypmVmGcqITmg.roa (raw, json)
Hash identifier: M6GitGhHsqwNcPE9T08T3BFME9zCwzroRrRSMdkRG+E=
Subject key identifier: 34:40:D9:97:79:E0:7A:85:37:8D:DC:72:A6:65:66:19:CA:88:4E:68
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 0188772B2C4056C8EB7EEF4755FE026B2E53
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NEDZl3ngeoU3jdxypmVmGcqITmg.roa
Signing time: Thu 01 Jun 2023 13:34:58 +0000
ROA not before: Thu 01 Jun 2023 13:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12325
IP address blocks: 89.39.94.0/23 maxlen: 24
89.39.123.0/24 maxlen: 24
185.18.224.0/23 maxlen: 24
89.45.228.0/24 maxlen: 24
188.215.40.0/22 maxlen: 24
89.40.222.0/23 maxlen: 24
93.115.108.0/24 maxlen: 24
89.35.124.0/23 maxlen: 24
89.46.232.0/21 maxlen: 24
89.46.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:77:2b:2c:40:56:c8:eb:7e:ef:47:55:fe:02:6b:2e:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jun 1 13:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3440d99779e07a85378ddc72a6656619ca884e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:75:46:64:f5:15:2d:5f:b6:36:70:55:49:36:
51:a9:31:9c:c4:56:10:4e:03:39:43:d0:b8:34:ba:
6d:27:4d:f9:2a:dc:e5:20:45:60:67:29:b0:8e:04:
c1:e4:b2:eb:b7:45:c1:34:ea:47:96:ca:38:0c:d7:
1a:83:96:72:69:04:ea:d6:6d:32:62:48:ad:c4:93:
38:06:6e:60:12:28:9b:3d:15:93:47:43:78:ab:a0:
81:50:a8:22:6d:e2:7e:4c:13:1e:1e:0f:99:07:c7:
8b:b3:92:0f:c5:b5:4a:46:72:fe:62:61:d2:f6:35:
69:27:c5:4b:81:a9:6c:8c:ec:32:e7:88:59:04:e8:
a5:a4:38:05:26:b5:71:c0:1c:e5:45:fd:93:62:ce:
92:a2:b0:45:b9:05:a7:73:d0:55:b9:2e:84:bc:58:
10:aa:21:57:0c:b1:d9:e8:f7:2a:51:65:83:a9:f6:
23:ef:01:e7:d4:a7:cb:3d:12:f0:6d:dc:7d:41:05:
f3:73:4b:12:07:f8:1b:14:e6:7f:a4:28:cb:f0:45:
1f:90:ef:ce:da:c3:b7:cc:ea:90:5d:37:ad:e4:7b:
b3:72:97:63:e9:81:88:2b:f2:7b:7a:64:27:0c:b6:
b7:68:36:0b:50:46:3c:7f:57:09:24:2d:59:e7:37:
b1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:D9:97:79:E0:7A:85:37:8D:DC:72:A6:65:66:19:CA:88:4E:68
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NEDZl3ngeoU3jdxypmVmGcqITmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.124.0/23
89.39.94.0/23
89.39.123.0/24
89.40.222.0/23
89.45.228.0/24
89.46.128.0/22
89.46.232.0/21
93.115.108.0/24
185.18.224.0/23
188.215.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:8a:71:0a:74:af:16:e2:4c:cc:63:1a:26:a7:0a:02:1f:43:
49:21:0a:36:67:b4:82:7c:e9:d9:68:f3:dc:e7:4d:d9:20:1f:
72:b1:28:f8:b0:18:0f:fe:42:22:09:43:0c:56:65:32:5a:a0:
ba:85:6f:11:16:24:cd:cc:98:11:52:37:52:b4:74:55:98:a8:
cf:2e:b0:8e:9d:54:1d:ec:1c:92:30:a8:f2:99:d6:20:f3:44:
83:0c:12:08:82:cc:29:d5:45:22:b0:6d:23:4c:ba:54:73:8e:
00:0b:b0:77:63:90:4b:aa:39:9d:cd:c3:82:a2:df:5b:46:4c:
22:89:f9:ac:5d:b9:6a:ed:9d:a0:66:c6:f1:d0:32:e9:de:2f:
26:ab:dd:fa:53:a3:32:49:d3:dc:b1:31:f7:5e:7e:04:ad:c5:
63:62:21:c0:0e:99:c4:19:e6:25:ed:0b:77:08:54:34:2a:bc:
5e:5e:2a:8b:45:5b:39:7b:86:a9:df:de:7c:80:af:c5:d8:22:
13:0c:da:1b:e4:b6:f2:41:2c:f4:fd:27:45:2a:42:b4:1d:79:
5f:a8:2a:34:44:13:e5:ee:d5:31:47:f9:30:44:a8:c4:6c:8c:
aa:0c:79:61:15:33:53:55:96:4b:3f:64:79:67:aa:51:c2:c9:
d7:55:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:12 2023 by rpki-client on console-fra.rpki-client.org