Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/Nv2uBWVBadFNR4f2Kb42R_V6Lqg.roa
File: Nv2uBWVBadFNR4f2Kb42R_V6Lqg.roa (raw, json)
Hash identifier: d5Ol6AE8mGrae6ScmkC2DeXEeVYtwvM6D25n5oUIXSM=
Subject key identifier: 36:FD:AE:05:65:41:69:D1:4D:47:87:F6:29:BE:36:47:F5:7A:2E:A8
Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial: 01856BB7D2C414BBD9946B8770B20F80C05E
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/Nv2uBWVBadFNR4f2Kb42R_V6Lqg.roa
Signing time: Sun 01 Jan 2023 05:04:47 +0000
ROA not before: Sun 01 Jan 2023 05:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6724
IP address blocks: 81.169.128.0/17 maxlen: 24
194.45.97.0/24 maxlen: 24
193.141.3.0/24 maxlen: 24
192.67.197.0/24 maxlen: 24
192.67.198.0/24 maxlen: 24
185.56.148.0/22 maxlen: 24
85.214.0.0/15 maxlen: 24
2a01:238::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:b7:d2:c4:14:bb:d9:94:6b:87:70:b2:0f:80:c0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Validity
Not Before: Jan 1 05:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36fdae05654169d14d4787f629be3647f57a2ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:79:1c:0c:15:65:ab:f4:c8:b7:bb:17:f2:
e5:43:e7:a8:03:d8:06:44:45:e0:b5:3b:0d:a7:21:
cd:20:db:28:0f:72:2d:e8:e2:62:77:c1:95:94:ca:
f5:32:d8:b9:59:88:86:5f:9d:60:3f:4c:44:54:be:
f6:69:40:06:ef:ee:cb:6b:a5:dd:8d:3c:87:08:e2:
ca:76:cd:88:33:43:5d:43:cb:ac:b9:3d:49:ae:46:
b5:d7:36:eb:d2:a8:2a:c7:d3:56:63:0f:7e:22:4f:
26:e7:43:80:0b:d8:e9:67:94:c5:c2:4a:46:67:49:
26:0b:23:1b:0e:e5:25:ca:81:a5:dc:b5:b1:ea:9f:
f4:a7:09:c1:db:af:71:ce:04:ca:89:93:96:f9:3a:
c2:8b:a1:04:d9:ce:27:4b:01:42:0e:84:7e:0e:22:
72:89:ea:4d:c3:7e:a3:1a:ca:e5:df:db:42:8a:73:
5b:7f:0e:62:be:50:cf:7a:af:7d:71:67:6b:f2:0f:
3d:8c:ef:c2:4b:bb:aa:35:7f:c1:71:11:37:bc:44:
60:c5:f7:e4:15:b2:a9:f9:ce:6a:98:10:9b:2e:34:
88:b3:67:eb:d1:39:8a:3a:48:9a:53:06:14:0f:65:
f4:3c:f1:ba:25:d0:62:29:8b:7f:07:01:60:34:3d:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FD:AE:05:65:41:69:D1:4D:47:87:F6:29:BE:36:47:F5:7A:2E:A8
X509v3 Authority Key Identifier:
keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/Nv2uBWVBadFNR4f2Kb42R_V6Lqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.169.128.0/17
85.214.0.0/15
185.56.148.0/22
192.67.197.0-192.67.198.255
193.141.3.0/24
194.45.97.0/24
IPv6:
2a01:238::/29
Signature Algorithm: sha256WithRSAEncryption
4f:3e:26:5d:99:cc:99:a3:ed:71:54:ad:6a:40:f9:77:3f:71:
0a:7c:08:f9:b1:58:c8:b0:44:2c:c2:b4:2b:07:f5:78:21:17:
a4:92:a9:32:fa:a2:26:b4:03:a5:3d:b8:b3:6b:eb:de:a4:08:
19:2f:cf:b1:bb:8a:09:32:7c:c0:ae:47:ff:41:ba:ed:c8:31:
1c:cb:86:49:b5:2e:8d:3c:08:21:43:5a:e5:d2:2a:b8:b0:8b:
39:ee:b3:19:eb:2d:e7:17:01:5a:d7:1d:14:e1:3a:1a:dd:48:
ac:d6:71:c5:79:cc:1f:02:3f:2b:6e:ab:78:82:84:35:45:0b:
06:39:86:c4:4f:50:63:5e:8a:4b:ca:21:a2:ac:d5:a3:31:41:
14:e7:89:0a:91:bb:b2:f4:c1:61:09:7b:11:aa:de:b4:b2:fe:
b4:5b:74:0f:aa:ba:93:f3:65:ad:dc:ba:c8:a5:ef:3e:ea:6b:
a2:b1:97:62:3d:a8:b4:ec:0f:98:71:6a:f4:bd:66:bd:05:a5:
4e:3e:59:25:52:63:74:10:c2:7d:22:5d:57:00:ea:8c:f0:36:
4b:4b:bc:3c:52:1a:3e:6d:a6:d9:ed:cf:84:28:41:e7:d4:8c:
b9:0f:3a:6f:01:55:c6:5c:00:1c:75:a6:63:56:75:f2:44:d3:
fc:a3:dd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:37 2024 by rpki-client on console-ams.rpki-client.org