Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/nxoPNE4K1iWTDxKsFDL8cGWR7eY.roa
File: nxoPNE4K1iWTDxKsFDL8cGWR7eY.roa (raw, json)
Hash identifier: PPcdvKKLclhnoY1DkI5HdSj/1S6SHxKl/psPi/nnZhY=
Subject key identifier: 9F:1A:0F:34:4E:0A:D6:25:93:0F:12:AC:14:32:FC:70:65:91:ED:E6
Certificate issuer: /CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Certificate serial: 018B665BBA41389685C561A151DC6D75129C
Authority key identifier: E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/nxoPNE4K1iWTDxKsFDL8cGWR7eY.roa
Signing time: Wed 25 Oct 2023 10:22:49 +0000
ROA not before: Wed 25 Oct 2023 10:22:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212193
IP address blocks: 188.132.214.0/24 maxlen: 24
212.68.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:66:5b:ba:41:38:96:85:c5:61:a1:51:dc:6d:75:12:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4a2b8e90d157ea022f8e700024a93dc356a514d
Validity
Not Before: Oct 25 10:22:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f1a0f344e0ad625930f12ac1432fc706591ede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7d:d1:cf:2a:d0:d1:7e:79:9b:de:9f:ba:44:
e5:d2:f7:79:3e:43:ef:ea:3c:51:3c:3c:a2:8e:00:
9c:ba:91:a0:d2:2a:97:38:61:86:df:c7:24:af:ac:
b0:e5:ed:f1:1d:54:ad:fd:ce:c2:50:89:07:de:19:
b3:fa:70:fa:3e:23:ca:04:3e:c7:42:64:ec:e3:0f:
90:2d:91:42:c0:d0:ba:cd:5b:cf:3f:9e:6a:cc:ef:
7f:75:f6:55:97:47:e2:13:21:a6:aa:60:99:65:21:
74:66:4d:87:f5:ec:d3:89:81:36:87:a5:75:73:49:
e9:50:ed:94:95:69:d5:ee:49:09:16:8c:7c:cb:be:
15:f8:5a:57:b2:59:1c:bf:f4:df:ef:c3:64:99:11:
13:00:8b:64:41:88:be:f9:02:08:6d:cb:6d:0f:73:
ac:c0:8c:a3:e5:9c:52:2e:c3:81:f7:a9:83:83:fd:
5f:bc:e4:34:5a:42:8a:ce:ad:72:a1:1d:9d:b9:ca:
d7:ee:9c:7b:e8:9a:7b:a1:62:c7:16:a3:a0:3a:dc:
26:db:c3:7c:37:ae:40:74:24:d9:fa:4d:ed:3f:71:
e0:1d:c3:b9:68:00:e6:3e:58:4c:1d:eb:ff:f9:3d:
c1:65:47:c4:a3:1f:3e:32:d0:46:0a:a1:3d:a4:2e:
28:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1A:0F:34:4E:0A:D6:25:93:0F:12:AC:14:32:FC:70:65:91:ED:E6
X509v3 Authority Key Identifier:
keyid:E4:A2:B8:E9:0D:15:7E:A0:22:F8:E7:00:02:4A:93:DC:35:6A:51:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KK46Q0VfqAi-OcAAkqT3DVqUU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/nxoPNE4K1iWTDxKsFDL8cGWR7eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/699e85-1027-4c7e-8ae7-df4a2e760ccb/1/5KK46Q0VfqAi-OcAAkqT3DVqUU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.214.0/24
212.68.55.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f1:6a:a7:00:51:dd:f8:89:cb:73:41:6e:38:8b:17:ab:3d:
1c:c9:8c:29:d1:bd:5d:63:26:10:ef:1c:df:0c:e8:e4:2d:4e:
9a:de:87:dc:0a:87:f0:03:5d:ff:6f:70:3a:41:33:4c:b0:77:
2a:c2:54:20:12:b5:22:a6:2b:d6:98:d6:f3:b1:49:fd:fd:ee:
8f:48:40:d4:ac:6f:99:bc:c0:21:b7:5a:2e:1d:26:f1:69:4c:
e7:72:8f:c5:29:3f:97:22:6f:18:d3:5f:c3:bc:64:98:dd:9d:
34:93:9b:c6:dd:e2:ea:40:50:ef:5b:35:2e:2a:a6:c2:87:3f:
ba:05:ac:73:a3:39:63:9a:35:5a:d9:a2:0e:b4:14:f1:44:1b:
57:49:54:b4:3e:6b:43:ad:aa:4e:7a:a0:ee:f9:20:82:e2:49:
65:22:f2:d8:04:79:6c:ce:fe:02:12:d2:df:f5:2e:50:01:03:
cb:cb:42:71:05:11:1f:80:c5:1c:22:f5:7b:6a:e5:4a:0f:20:
4e:7a:4b:57:71:cb:95:24:19:4e:d4:f9:19:42:fe:61:c4:25:
6d:c8:65:5e:48:47:84:8a:1d:54:0b:80:85:2f:64:77:ce:82:
65:78:5c:3a:0a:60:56:bc:59:8c:24:09:32:67:22:f1:73:58:
1e:09:7e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 12 00:02:01 2023 by rpki-client on console-ams.rpki-client.org