Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/nEBs9CoHASJ1pPpkzENv2FF5Mo0.roa
File: nEBs9CoHASJ1pPpkzENv2FF5Mo0.roa (raw, json)
Hash identifier: KNTAft/VLshUpVIUUOTfH6liLyTfebL6Wrju3UeugkM=
Subject key identifier: 9C:40:6C:F4:2A:07:01:22:75:A4:FA:64:CC:43:6F:D8:51:79:32:8D
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 018570399E778003B65FB112C3733AB1E978
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/nEBs9CoHASJ1pPpkzENv2FF5Mo0.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3292
IP address blocks: 80.73.48.0/20 maxlen: 20
95.130.64.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9e:77:80:03:b6:5f:b1:12:c3:73:3a:b1:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c406cf42a07012275a4fa64cc436fd85179328d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:67:ef:dd:b1:0e:cf:48:fc:4f:fb:bf:33:
33:8b:0d:2e:35:7d:c3:d5:02:4a:5e:d3:ba:48:97:
5f:50:cb:fa:32:99:5e:f6:c6:46:10:32:ac:dd:0c:
6a:00:30:04:9e:88:f9:c0:d0:83:85:34:66:33:32:
a9:47:08:71:10:f1:da:07:e4:2f:e4:f1:0e:f6:c0:
ad:37:68:9f:6a:f4:b3:0c:55:17:27:ab:51:32:fc:
a6:3c:1f:bb:f8:4e:97:b1:0e:45:14:82:d8:95:e4:
3a:b6:b9:59:32:53:e4:ea:cd:c4:09:b5:54:7f:3a:
61:97:b1:77:34:d7:3e:17:d3:76:80:9a:19:ce:75:
7a:86:f3:26:b1:f5:40:8e:5f:46:c8:13:c1:94:7e:
7f:fe:51:56:25:86:d2:15:3b:30:56:33:a2:d1:55:
9c:05:d5:9d:b4:cd:de:03:0a:7f:99:5f:09:64:25:
a6:73:15:cd:10:2e:f9:f1:bd:33:14:7d:14:1b:90:
81:97:b3:f3:cb:28:79:ab:64:34:ea:d0:06:05:f7:
90:c3:19:2c:d8:f4:58:4d:c2:d8:78:c5:b4:70:d6:
39:f0:59:dc:cf:e1:50:54:33:06:15:1b:df:bd:e2:
15:75:08:45:17:6d:76:de:cc:78:7b:f8:0a:cd:bc:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:6C:F4:2A:07:01:22:75:A4:FA:64:CC:43:6F:D8:51:79:32:8D
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/nEBs9CoHASJ1pPpkzENv2FF5Mo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.48.0/20
95.130.64.0/21
Signature Algorithm: sha256WithRSAEncryption
49:7f:39:75:47:7d:d1:d0:56:96:c9:5c:62:1e:00:15:a9:2e:
f3:2a:04:01:9d:07:35:b6:f1:f6:85:d2:e2:68:76:8f:42:9c:
36:83:71:60:6d:fc:f0:ab:04:de:01:92:15:66:54:24:d7:9e:
e7:18:14:5d:fa:83:18:0f:26:cd:99:df:9f:16:67:b5:44:0c:
59:2d:00:da:62:7c:08:ee:86:36:57:71:47:a2:34:c8:e6:e5:
9a:7f:0c:14:0f:48:f6:e2:bb:23:1e:94:e2:fe:7c:ab:c5:b6:
38:6a:c8:1e:99:78:8c:e5:ca:3e:27:f6:dd:ff:e9:bd:3d:00:
46:fe:97:88:08:00:5f:ff:a2:a5:f0:54:30:0d:1c:b4:2f:5e:
cc:e7:c6:c6:6a:ef:bf:ba:09:4e:58:7b:2d:00:f8:5c:93:5a:
50:40:e0:32:9e:45:75:eb:c3:3f:dd:80:cd:11:41:7e:27:0e:
46:67:fb:a8:2b:67:7e:29:20:92:4c:a4:94:a8:2c:61:fb:93:
5c:fd:7b:7d:1a:10:a4:23:cb:97:90:68:d8:c2:1f:51:68:95:
a1:ce:96:fc:f1:86:18:45:02:33:da:8f:3b:e5:97:b0:74:e8:
ae:6f:62:3e:34:9c:8d:1c:14:ee:cf:92:8c:73:c8:b6:3c:6f:
d4:65:72:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:54 2024 by rpki-client on console-fra.rpki-client.org