Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/ntGtD7165ewy-8HU6P259he8DdE.roa
File: ntGtD7165ewy-8HU6P259he8DdE.roa (raw, json)
Hash identifier: dzUHwjadeIXEWg4se17DklOaW8EUEXhj1o+y3mymuFo=
Subject key identifier: 9E:D1:AD:0F:BD:7A:E5:EC:32:FB:C1:D4:E8:FD:B9:F6:17:BC:0D:D1
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 01857115370EA14506603575745F54CCF371
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/ntGtD7165ewy-8HU6P259he8DdE.roa
Signing time: Mon 02 Jan 2023 06:04:53 +0000
ROA not before: Mon 02 Jan 2023 06:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43125
IP address blocks: 91.194.83.0/24 maxlen: 24
91.194.82.0/23 maxlen: 23
91.194.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:37:0e:a1:45:06:60:35:75:74:5f:54:cc:f3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Jan 2 06:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ed1ad0fbd7ae5ec32fbc1d4e8fdb9f617bc0dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5d:cb:dd:fa:7f:62:1c:42:a7:94:14:de:12:
9d:a6:73:04:59:88:9e:bc:ae:c5:54:06:c0:a9:a1:
7d:a6:86:cd:ef:7d:66:da:7b:37:5f:2b:2a:52:16:
09:07:6e:20:a4:c1:79:6f:b3:88:c1:ad:40:e1:51:
b9:b8:6a:b3:bd:91:94:79:75:73:77:3d:9d:36:85:
66:71:af:55:1d:28:4a:07:87:15:59:f8:82:4c:cd:
f2:5b:ed:88:1f:fb:59:7a:1a:e9:fd:be:98:56:d5:
13:15:38:b6:af:f9:38:c1:7b:b2:6a:99:e7:77:f0:
b4:81:bf:32:7d:c6:69:06:4d:d4:ab:21:ab:5a:ec:
84:e6:4f:39:ab:d9:2f:d4:87:32:f4:2e:45:4f:15:
94:b1:98:a3:f0:64:40:76:77:00:88:a0:41:d6:9e:
aa:1d:8d:44:c1:b9:56:24:dd:a7:d0:db:ed:26:0e:
f5:8d:7b:1d:3c:35:7e:23:bc:d7:09:f3:fe:96:d9:
ce:f9:83:eb:ec:ab:8e:19:fb:48:ac:67:cc:46:4b:
fa:9d:ff:36:a4:67:f5:e6:ff:af:4f:12:5d:9f:35:
13:dd:e2:c8:50:fc:4e:fe:6e:67:43:16:b8:b6:93:
7d:fa:21:b7:50:e8:15:c0:74:87:a8:4f:38:cf:92:
3d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D1:AD:0F:BD:7A:E5:EC:32:FB:C1:D4:E8:FD:B9:F6:17:BC:0D:D1
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/ntGtD7165ewy-8HU6P259he8DdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.82.0/23
Signature Algorithm: sha256WithRSAEncryption
74:86:73:00:27:fb:9a:34:e9:84:51:5a:a7:bb:18:f9:17:43:
51:6d:e8:9a:dd:78:a1:f7:91:05:06:db:ab:cb:96:0e:26:c8:
e7:04:c7:8d:13:31:33:c7:a7:23:e8:e1:34:bf:0c:d4:bc:54:
3d:27:24:95:2a:eb:3d:63:bd:cf:05:56:c6:c1:3d:cf:1a:e3:
3c:16:02:92:a8:a2:34:77:df:92:b2:f8:82:96:e4:1d:cd:17:
1e:fc:9e:d9:16:aa:7b:b2:9f:cb:13:dd:8a:5c:60:d1:c6:fc:
86:ae:94:85:9a:c6:a5:18:3e:a3:01:c7:a7:03:b4:25:71:62:
84:3e:d9:2a:36:8b:63:a0:f4:6b:6d:53:e3:5c:9a:48:c8:56:
b0:a2:6f:b6:84:9e:ce:02:98:b0:14:fd:28:17:e9:3b:d5:11:
e3:4a:19:d3:a5:c1:a7:d2:4e:b2:8e:55:f4:df:ca:9a:54:af:
ab:e3:96:b9:15:51:73:02:47:c8:6f:83:51:10:3b:e8:a6:83:
a5:20:00:1b:ef:0a:3d:c8:45:49:eb:0e:ed:5e:50:77:02:30:
84:99:73:bf:aa:b9:6e:25:86:37:b0:78:39:bf:aa:96:fc:db:
30:a9:80:4c:0a:29:e1:f3:9f:01:78:af:c0:bf:03:a5:a3:3a:
e2:4f:5d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:07 2024 by rpki-client on console-ams.rpki-client.org