Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/nny-ZDKpKinUbdxWXrgL4dbwI9U.roa
File: nny-ZDKpKinUbdxWXrgL4dbwI9U.roa (raw, json)
Hash identifier: 7ACOmpWMB+RJhOMw8yqBZrR+aub/mp4c37p/6FxO4Qw=
Subject key identifier: 9E:7C:BE:64:32:A9:2A:29:D4:6D:DC:56:5E:B8:0B:E1:D6:F0:23:D5
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 01856CAF1EC44151F235635547AD9C3CCC2C
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/nny-ZDKpKinUbdxWXrgL4dbwI9U.roa
Signing time: Sun 01 Jan 2023 09:34:54 +0000
ROA not before: Sun 01 Jan 2023 09:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8455
IP address blocks: 217.194.18.0/24 maxlen: 24
217.194.21.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:1e:c4:41:51:f2:35:63:55:47:ad:9c:3c:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: Jan 1 09:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e7cbe6432a92a29d46ddc565eb80be1d6f023d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:35:fe:13:80:d7:61:7f:2c:7e:c2:fc:3d:c3:
42:1a:55:12:f0:9f:6c:1f:bd:05:2f:8c:c9:8f:ac:
a2:69:cf:e1:7e:b3:61:43:81:be:c6:57:35:af:2d:
71:54:e0:8f:f1:f7:4c:47:e9:46:16:8f:c2:a3:79:
95:93:75:53:1b:7e:06:16:fa:0b:d5:75:04:8e:cb:
f8:20:c1:73:89:d7:db:25:d5:27:81:98:75:f8:1f:
46:70:0f:44:bc:a1:71:70:3f:1c:4e:5d:b9:50:41:
3c:2d:33:c4:b8:96:04:40:2a:39:0f:e5:23:39:b6:
af:d6:11:e7:bf:5a:63:dc:b0:2d:b6:c1:36:49:e2:
37:2e:cb:03:27:84:bf:18:33:67:e1:d7:df:fe:30:
99:06:7f:7f:49:ca:00:1f:83:ec:d2:92:55:b9:6a:
b5:8e:74:02:40:56:9c:b2:b0:0a:f5:ec:99:ea:ed:
db:9e:1e:5b:66:36:b1:0a:41:fb:11:7c:1a:3f:8c:
f3:ab:d9:e6:b5:2a:53:81:69:ce:9d:34:22:1f:6a:
3a:c3:7e:1c:21:f1:c3:f7:fd:8b:fc:f9:68:41:62:
56:2c:ed:81:3e:42:f5:62:5a:93:e0:3b:5b:10:b7:
99:86:62:13:a7:d6:7b:20:5e:55:69:3d:1b:2f:9f:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:BE:64:32:A9:2A:29:D4:6D:DC:56:5E:B8:0B:E1:D6:F0:23:D5
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/nny-ZDKpKinUbdxWXrgL4dbwI9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.194.18.0/24
217.194.21.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e8:78:f8:fe:29:2c:42:6b:04:a3:9a:76:2c:f7:66:13:33:
ed:84:ad:49:a4:a6:16:66:42:ee:3c:ae:a4:ee:48:1a:da:5f:
ba:aa:a9:12:af:88:4e:82:dd:fa:1a:4f:08:e7:96:c3:8d:32:
58:bf:1f:33:d6:64:d4:91:fc:ec:c0:02:00:1c:16:e8:6f:eb:
7b:15:69:05:2d:fd:1c:9c:0a:72:91:2c:e9:7e:9a:77:86:d8:
ea:8a:36:89:64:29:25:de:ea:34:ae:6c:bc:00:8d:9a:4e:76:
6d:67:c9:5c:39:02:3d:ee:a0:67:d1:6b:e0:cf:2e:7c:78:ab:
2b:d2:ee:66:17:3e:85:11:b7:01:f6:e5:01:98:ba:ad:6a:0c:
d9:06:26:38:0f:7e:5b:41:a1:d2:fa:2f:34:7b:80:04:da:bf:
12:18:2d:47:fa:36:1c:a4:dd:96:ff:a6:e6:d0:24:7d:b1:a6:
6b:ec:bf:3c:2c:d3:2f:5c:95:2d:0e:f4:61:43:b2:ae:50:86:
14:df:a2:42:d3:87:1b:20:19:71:d6:e9:91:35:b1:57:e7:c3:
d9:2e:c3:c3:0a:4a:ee:57:ac:7c:38:83:fe:9b:a2:93:59:68:
42:94:7c:17:ce:64:9b:11:ef:97:f9:12:a5:bb:ec:f9:8a:c6:
02:d1:b1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:37 2024 by rpki-client on console-ams.rpki-client.org