Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/nGuq7s0K8GATYh-i8hS7k499wzw.roa
File: nGuq7s0K8GATYh-i8hS7k499wzw.roa (raw, json)
Hash identifier: sDjyePAVURHk4AiSf6DOEE8h6qLBEBL6X3EMqjlq3/s=
Subject key identifier: 9C:6B:AA:EE:CD:0A:F0:60:13:62:1F:A2:F2:14:BB:93:8F:7D:C3:3C
Certificate issuer: /CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Certificate serial: 018FF96529F6609203B34A8DC4CAC5E47B07
Authority key identifier: 2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/nGuq7s0K8GATYh-i8hS7k499wzw.roa
Signing time: Sat 08 Jun 2024 19:48:27 +0000
ROA not before: Sat 08 Jun 2024 19:48:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.14.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Jun 2024 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f9:65:29:f6:60:92:03:b3:4a:8d:c4:ca:c5:e4:7b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc81d24c45ddaa345f9064de29fbca7b129a52c
Validity
Not Before: Jun 8 19:48:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c6baaeecd0af06013621fa2f214bb938f7dc33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:c4:d7:16:22:61:a1:c3:87:d1:97:3d:2d:
a3:29:6f:cd:6b:da:3f:37:6d:72:ac:0b:5e:d7:74:
f3:ac:0e:c6:81:b1:92:be:fe:8a:6f:ce:2d:ca:c0:
3c:39:d8:24:7b:08:be:37:58:ed:c9:d3:00:32:32:
cc:f3:a1:a7:91:24:b3:c1:67:9e:e7:33:38:91:4a:
d1:5b:ec:f9:1b:31:27:42:e8:96:25:9e:90:f4:bd:
f3:28:02:f5:d8:92:47:be:8e:8b:68:19:30:92:50:
7e:4d:23:3b:28:bb:b5:4a:4d:d4:03:a4:15:02:0e:
83:77:17:ca:2f:fe:a2:15:1a:1c:05:0c:a2:88:0c:
a5:30:26:5a:73:ac:f3:80:32:b1:55:18:db:de:12:
7c:dd:8a:e2:62:8b:d0:4c:28:f0:4e:a5:67:62:a6:
07:da:b4:d3:50:9a:fb:1a:37:05:1a:13:62:f3:fe:
e0:d6:95:e1:b4:ff:30:07:ab:4f:f4:7b:00:e4:36:
1a:21:53:8c:ca:ba:e9:08:fd:6b:65:19:af:6b:50:
8c:37:88:de:6c:04:e5:68:d5:e3:6c:49:4a:aa:d2:
ba:d0:79:22:e2:3d:8d:93:e6:12:e1:ab:79:9c:82:
80:ab:4a:34:a0:27:f4:39:0e:24:b2:78:ff:13:81:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6B:AA:EE:CD:0A:F0:60:13:62:1F:A2:F2:14:BB:93:8F:7D:C3:3C
X509v3 Authority Key Identifier:
keyid:2D:C8:1D:24:C4:5D:DA:A3:45:F9:06:4D:E2:9F:BC:A7:B1:29:A5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcgdJMRd2qNF-QZN4p-8p7EppSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/nGuq7s0K8GATYh-i8hS7k499wzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bf3db5-a33f-4311-acd9-2fcc0b749b32/1/LcgdJMRd2qNF-QZN4p-8p7EppSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.14.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4a:c9:f4:48:21:18:2a:d7:fe:70:16:00:ef:35:97:9b:ba:
ee:e3:fa:ea:c5:8d:2d:d6:4f:c9:d0:91:2e:c4:a5:ab:be:5c:
36:16:2e:bd:0d:d2:e9:c2:07:25:7f:b8:ca:ba:86:14:0a:aa:
96:e7:67:1f:a9:b1:2f:72:94:42:9e:75:55:b6:4b:be:8a:15:
fd:95:0a:30:80:d4:d8:9d:43:02:58:c1:aa:fa:2e:0b:62:b5:
84:bf:19:11:fc:d8:13:eb:09:4a:79:f8:84:a1:c1:41:ec:7e:
23:be:2a:23:4d:ec:96:3f:3b:63:b3:45:2a:df:84:48:2a:4b:
53:d7:23:8f:b7:00:fb:76:ea:1a:ec:fc:dd:59:e0:c4:ca:45:
15:7a:a3:23:76:fa:8f:33:be:db:c9:54:ea:12:a3:92:d3:6f:
69:39:54:fd:98:11:1f:0d:76:a8:a3:7c:b8:b1:6b:0b:fc:e8:
32:2f:90:e0:73:47:8d:c2:2a:55:b8:75:97:5c:60:6b:98:10:
ad:94:ca:79:79:0f:41:fa:9f:c5:39:d8:ca:59:56:97:42:c9:
63:35:05:c4:f5:01:39:ab:2f:50:db:21:f6:2e:86:0c:dc:aa:
c0:31:a5:f4:7f:38:e0:1e:11:dc:18:54:57:e0:e2:44:ca:56:
58:53:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 16:21:31 2024 by rpki-client on console-fra.rpki-client.org