Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/nKYAwU31_fvA47kYhclmG-SFopE.roa
File: nKYAwU31_fvA47kYhclmG-SFopE.roa (raw, json)
Hash identifier: 4XcL1hrr2lbWviJsn2slsiXXnF6kJbGveCczcl4h0z0=
Subject key identifier: 9C:A6:00:C1:4D:F5:FD:FB:C0:E3:B9:18:85:C9:66:1B:E4:85:A2:91
Certificate issuer: /CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Certificate serial: 018939CCCCC2C5951196406F5711EC52D283
Authority key identifier: 18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/nKYAwU31_fvA47kYhclmG-SFopE.roa
Signing time: Sun 09 Jul 2023 08:37:50 +0000
ROA not before: Sun 09 Jul 2023 08:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12826
IP address blocks: 185.55.164.0/22 maxlen: 22
91.151.64.0/20 maxlen: 20
91.151.64.0/24 maxlen: 24
91.151.65.0/24 maxlen: 24
91.151.66.0/24 maxlen: 24
91.151.69.0/24 maxlen: 24
91.151.70.0/23 maxlen: 23
91.151.67.0/24 maxlen: 24
91.151.68.0/24 maxlen: 24
91.151.72.0/23 maxlen: 23
91.151.76.0/24 maxlen: 24
91.151.77.0/24 maxlen: 24
91.151.74.0/24 maxlen: 24
2a00:ef60::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:39:cc:cc:c2:c5:95:11:96:40:6f:57:11:ec:52:d2:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e0e9a3d20cfac6cbe3ccf74ab5784a77682933
Validity
Not Before: Jul 9 08:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ca600c14df5fdfbc0e3b91885c9661be485a291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:ce:62:26:3c:e2:01:93:aa:4c:71:05:0c:
e0:c8:b2:be:67:64:53:c8:e3:71:1b:52:0e:65:58:
0a:9a:38:95:04:3b:12:f6:cd:28:29:f1:af:87:23:
8e:7f:60:5d:b7:de:52:5b:0e:f5:3c:7b:d7:d0:1e:
aa:ce:da:1a:b6:40:f7:66:cc:15:3c:f9:28:47:c8:
fb:eb:f9:2c:cb:87:5f:9e:c5:ac:60:3c:77:e9:80:
b7:c9:98:9a:3d:1f:6f:58:ee:f0:ad:e2:9f:bc:28:
88:4d:6d:3b:f5:f3:a0:cf:6f:91:63:59:c4:e1:40:
7d:47:ce:69:7b:26:f4:f5:90:f6:d2:58:fc:d3:24:
1d:ce:92:32:bc:9d:32:a1:8a:48:bb:f3:6b:6a:3f:
f3:7b:19:fe:c9:1a:59:d6:88:13:40:20:52:54:84:
d0:ac:8f:27:f5:08:29:ce:cf:7c:6a:a8:06:e1:b4:
0b:b8:15:91:1b:b5:dc:1d:6c:33:c0:62:15:e3:0c:
ce:a3:3e:2f:d6:5a:9e:af:73:25:52:ec:75:49:97:
36:31:8b:4d:25:75:cf:c4:24:0f:b7:24:6b:ab:57:
26:9b:d6:f3:be:f0:ef:a9:ec:cf:6b:03:40:3d:08:
62:13:32:69:35:53:16:94:a0:6e:f3:15:25:f7:13:
b9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A6:00:C1:4D:F5:FD:FB:C0:E3:B9:18:85:C9:66:1B:E4:85:A2:91
X509v3 Authority Key Identifier:
keyid:18:E0:E9:A3:D2:0C:FA:C6:CB:E3:CC:F7:4A:B5:78:4A:77:68:29:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GODpo9IM-sbL48z3SrV4SndoKTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/nKYAwU31_fvA47kYhclmG-SFopE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a763ed-beb0-43cb-baa3-95ab81b77691/1/GODpo9IM-sbL48z3SrV4SndoKTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.64.0/20
185.55.164.0/22
IPv6:
2a00:ef60::/32
Signature Algorithm: sha256WithRSAEncryption
41:59:60:f4:37:36:8d:1a:1e:e5:bb:0c:b5:30:d2:36:6e:60:
76:d0:1f:00:cc:d7:44:55:85:f3:a1:31:3c:51:af:52:4d:7f:
c9:fa:20:4c:25:a4:8f:7d:42:a6:e2:61:af:ad:fa:0d:fa:dc:
76:de:d9:a6:a5:9b:eb:bf:ce:c0:83:ac:2d:6b:87:f4:b8:f7:
25:48:c7:28:04:29:4a:be:f7:cb:f0:4c:75:73:df:c0:52:cf:
91:de:c7:5a:7e:1b:4a:70:7d:e1:44:db:b4:54:3a:f4:c4:1a:
19:0f:f0:0d:6f:b1:73:e1:e0:ea:bd:dd:a6:51:3f:80:96:19:
0c:93:3c:01:26:74:15:35:4b:14:b5:af:90:ba:64:5a:fd:6e:
9f:fe:b8:f1:f7:ed:08:d7:65:7f:d8:3d:97:2c:e5:82:58:b0:
02:5e:0e:f7:13:3c:34:dc:86:49:57:ce:01:bd:c1:9f:1b:bf:
ed:d6:72:25:be:70:bb:2f:d2:04:ef:4e:c4:e7:7c:d1:c1:84:
b2:21:da:88:fc:ed:ca:f9:a0:ec:fa:d0:bc:9a:b5:74:55:bc:
46:8d:02:75:41:94:ef:f8:b1:2f:19:ce:aa:d5:c3:41:b9:e8:
43:bd:d2:ce:f6:a9:16:60:d6:cf:89:97:df:60:2f:97:d7:4e:
68:3b:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:12 2024 by rpki-client on console-fra.rpki-client.org