Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/nqBWToJHTPXFne6-iCM1ZyNCDW4.roa
File: nqBWToJHTPXFne6-iCM1ZyNCDW4.roa (raw, json)
Hash identifier: 9u942HLBRXVxqupJ7U+nmiFsWwj7qKU4sCbMGEEqdmQ=
Subject key identifier: 9E:A0:56:4E:82:47:4C:F5:C5:9D:EE:BE:88:23:35:67:23:42:0D:6E
Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4
Certificate serial: 0187BD8C4E1F8FB9D485E024EB89A5D55F58
Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/nqBWToJHTPXFne6-iCM1ZyNCDW4.roa
Signing time: Wed 26 Apr 2023 12:31:41 +0000
ROA not before: Wed 26 Apr 2023 12:31:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 185.187.106.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bd:8c:4e:1f:8f:b9:d4:85:e0:24:eb:89:a5:d5:5f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4
Validity
Not Before: Apr 26 12:31:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ea0564e82474cf5c59deebe8823356723420d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:89:d6:cf:15:dd:6b:63:35:6e:3b:d6:ae:5d:
9d:6e:7a:ca:f1:c3:ce:1a:14:9f:eb:01:12:93:c5:
15:60:28:22:1a:96:d6:56:c0:49:f4:89:73:f4:35:
95:61:b1:bf:e3:5a:6c:82:75:b1:67:ad:b3:22:b8:
f2:ae:f4:11:5c:e6:85:23:b2:7d:6e:c6:2a:7c:cd:
1b:e2:7e:fb:db:19:c7:03:76:cc:d7:62:6a:3e:0f:
a7:46:ba:57:01:4a:f5:26:63:58:89:3c:38:5d:1f:
7f:5d:08:56:69:47:a9:3f:00:d3:d4:42:e4:a9:bf:
21:5f:dc:fe:09:59:1b:45:16:5a:07:6d:88:a3:bf:
0d:70:12:95:75:96:da:94:67:5e:f1:26:f7:da:2e:
94:43:7a:06:f2:5c:35:35:de:7a:f2:63:fa:f7:d5:
8a:a8:db:81:1b:cb:c0:6a:11:76:6b:6f:8f:0f:47:
0f:1a:c4:61:58:c1:bb:65:9b:34:d4:5f:1e:96:17:
91:66:c0:7d:ae:dc:37:f0:97:0b:69:33:48:34:9e:
47:39:43:28:a3:26:e0:40:7e:b8:2c:8f:67:55:2d:
ac:fe:f4:e7:ca:6f:11:d1:fd:4c:c5:9e:27:32:60:
9d:df:ab:c7:04:5e:8d:12:d9:e6:72:b1:ab:80:a9:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A0:56:4E:82:47:4C:F5:C5:9D:EE:BE:88:23:35:67:23:42:0D:6E
X509v3 Authority Key Identifier:
keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/nqBWToJHTPXFne6-iCM1ZyNCDW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.106.0/24
Signature Algorithm: sha256WithRSAEncryption
34:27:56:48:07:a7:9a:e0:6c:95:33:bb:b2:3a:36:c2:d9:97:
3c:d4:4a:a7:61:19:20:1d:ca:ca:60:1b:cd:f9:cc:1c:70:47:
ea:c1:42:f3:68:c7:73:e4:14:fb:52:d1:b1:67:b6:6f:48:6c:
70:8a:26:46:5d:bf:12:21:cf:f3:fd:1d:f1:72:f6:65:71:98:
29:17:db:75:88:5f:c6:42:b8:7d:f9:fd:3a:dd:d5:45:68:94:
c6:37:7e:9d:d5:94:19:60:c6:d0:7f:a0:7e:5f:e5:61:1e:e9:
fd:a2:c2:f7:d1:fb:84:2b:a1:6f:f5:89:01:1b:81:6a:b5:3b:
80:03:fc:5f:50:71:8b:57:a0:1c:87:01:f0:91:7a:c3:16:76:
72:87:83:35:71:0a:d8:a5:22:c6:7f:93:12:bf:00:cd:ff:cc:
c8:f7:d0:97:03:21:37:31:31:24:63:ec:41:4d:46:f5:e2:88:
f9:b6:17:e5:1a:ea:c5:62:27:c4:0c:24:be:88:fa:ed:a3:ab:
4d:f2:9e:5a:92:ca:2a:2e:07:3e:4e:a6:3d:aa:32:24:9e:6c:
84:42:2a:09:82:71:28:a2:0c:08:89:a8:f4:f3:c1:d4:b7:68:
0d:77:24:90:d8:cc:69:1d:51:7e:cd:cc:d1:9d:6b:6d:84:d7:
53:9d:d3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:56 2023 by rpki-client on console-ams.rpki-client.org