Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/nKkdD25YgEoztybDcPX22h8VCE4.roa
File: nKkdD25YgEoztybDcPX22h8VCE4.roa (raw, json)
Hash identifier: pib5RGyCYeY0CZ5/p1CCF7lxBBNpDSOOPoox/RD6XIY=
Subject key identifier: 9C:A9:1D:0F:6E:58:80:4A:33:B7:26:C3:70:F5:F6:DA:1F:15:08:4E
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0188CA490810FCD1F4C0D2AB34A649EFF33A
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/nKkdD25YgEoztybDcPX22h8VCE4.roa
Signing time: Sat 17 Jun 2023 16:56:03 +0000
ROA not before: Sat 17 Jun 2023 16:56:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 195.34.94.0/23 maxlen: 23
91.204.78.0/24 maxlen: 24
91.204.77.0/24 maxlen: 24
91.204.76.0/24 maxlen: 24
91.204.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ca:49:08:10:fc:d1:f4:c0:d2:ab:34:a6:49:ef:f3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jun 17 16:56:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ca91d0f6e58804a33b726c370f5f6da1f15084e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:7e:70:1a:69:7c:e2:ac:34:7f:4d:0d:72:
f0:af:12:69:8a:3b:92:30:7c:56:7b:b1:39:20:be:
f4:2b:5f:1d:41:b1:d3:5e:dd:ea:ae:91:3b:ab:d3:
3d:b0:9a:70:b4:f8:34:44:64:6a:88:e3:97:3d:2d:
65:b8:5e:58:4b:9d:fd:0d:d1:75:09:2a:71:e3:7a:
66:f8:7d:4e:f9:b9:88:c0:6e:bf:20:f0:9f:88:ea:
d0:d3:6f:fd:25:db:99:1f:24:1e:33:a9:03:15:6c:
02:90:f3:f4:50:b0:2e:d1:12:7e:f9:2a:53:35:b3:
bd:f9:12:b0:8d:92:98:46:aa:2c:df:df:cd:07:41:
0b:31:a4:4a:3f:9b:e9:b9:23:1c:f4:81:32:06:7f:
6e:89:01:2b:dc:ed:4f:34:19:02:ee:b6:a6:34:c0:
ac:76:17:2e:86:e1:fb:ad:f1:22:e8:e1:92:17:a1:
31:6a:fa:fe:8d:0e:73:1d:b8:40:94:cc:3f:23:09:
d7:5c:5c:94:c6:96:76:34:c6:5c:e9:64:7e:66:3e:
d2:41:32:ed:c1:10:a4:04:4e:5c:e9:1a:ac:fa:e3:
35:3a:1e:a1:9b:89:8b:c1:7c:84:12:c9:87:e3:40:
96:95:69:5a:ca:56:70:3a:74:1c:b1:e4:e4:55:d2:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:1D:0F:6E:58:80:4A:33:B7:26:C3:70:F5:F6:DA:1F:15:08:4E
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/nKkdD25YgEoztybDcPX22h8VCE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.76.0/22
195.34.94.0/23
Signature Algorithm: sha256WithRSAEncryption
08:96:c0:fe:e5:7d:ae:18:9c:41:c1:cc:b6:ed:c6:86:7e:73:
d2:93:aa:30:4c:cb:d2:5c:0a:5c:92:f3:69:ed:34:03:9e:9f:
4f:a3:3a:d7:6c:a8:f5:2f:a8:d7:86:61:dd:17:e7:4b:0e:88:
a9:f2:d7:4f:3b:12:db:6e:70:7c:4c:19:e3:26:63:80:c3:0c:
82:c6:a8:c5:ca:64:c8:59:88:84:b1:9e:de:f1:f4:0d:d9:d7:
c7:0e:e5:df:dc:51:18:28:70:78:79:e1:68:83:1a:1a:8a:bd:
c6:c9:79:29:38:1b:03:e5:f6:c4:b7:66:31:0a:e6:7c:e3:5f:
ac:17:5c:48:f9:a0:80:ef:2f:40:c1:11:05:96:81:2f:47:c9:
dd:26:e3:b1:02:c7:3f:c8:19:2f:3e:cf:e0:a0:1d:3f:49:b3:
84:4d:b5:6a:c0:d5:36:36:6b:a7:88:12:95:3b:12:c0:ac:58:
16:62:64:0e:c3:27:c4:43:54:92:05:48:85:20:4e:d8:65:53:
d5:aa:12:00:8c:59:9c:74:4b:29:78:75:f7:7f:bb:3d:ba:c9:
df:5e:bb:99:58:2c:7f:78:fd:8f:33:e8:72:62:53:b8:ca:d3:
56:62:be:6a:c3:3f:19:0c:1d:1b:3d:3a:4e:7b:34:a3:ad:34:
07:ec:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:22 2024 by rpki-client on console-fra.rpki-client.org