Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/0nm57xAPsHoCZJDA_ywWcXHOErA.roa
File: 0nm57xAPsHoCZJDA_ywWcXHOErA.roa (raw, json)
Hash identifier: +cYsctmLOMRS5fA4hKY+3ka4N6OPhdJ7c0zduu/5JDw=
Subject key identifier: D2:79:B9:EF:10:0F:B0:7A:02:64:90:C0:FF:2C:16:71:71:CE:12:B0
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 0186CC6232F328058D2EE9E7CE4D33EF4185
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/0nm57xAPsHoCZJDA_ywWcXHOErA.roa
Signing time: Fri 10 Mar 2023 16:37:13 +0000
ROA not before: Fri 10 Mar 2023 16:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 80.90.188.0/22 maxlen: 24
95.140.146.0/24 maxlen: 24
80.90.179.0/24 maxlen: 24
80.90.184.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Mar 2023 19:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cc:62:32:f3:28:05:8d:2e:e9:e7:ce:4d:33:ef:41:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Mar 10 16:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d279b9ef100fb07a026490c0ff2c167171ce12b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:47:37:58:fe:3d:09:2b:c7:89:96:c8:8a:
77:a4:d1:48:54:ba:06:af:bc:2f:41:4e:46:1a:a2:
aa:ef:ca:a7:2a:9e:a4:53:ee:14:12:2e:29:7c:1c:
40:d8:2f:19:bf:07:a8:87:bb:6a:2f:ad:c4:17:f2:
ae:d0:ac:7e:65:d1:82:05:ed:fe:57:7f:01:60:ce:
53:be:a8:e3:90:ef:78:20:b0:0a:00:20:a6:67:6e:
23:f6:8d:54:9b:a1:27:0c:25:12:6c:3a:95:7e:0e:
66:ae:5f:bd:cb:f5:a1:2b:9d:ff:80:9e:33:f7:b3:
85:2c:78:2c:55:50:4a:77:2b:2d:73:ed:82:8e:00:
e6:61:8b:53:fa:1b:cd:3d:d8:d5:79:1d:57:7f:b2:
84:00:c8:2e:df:58:ce:51:7f:96:55:71:20:94:73:
4e:31:b1:1f:c1:f3:1b:f1:b8:3d:18:29:53:b7:d7:
e4:20:57:4d:0c:67:48:14:53:a6:1b:cb:42:cb:28:
ba:3f:af:db:59:ff:9a:9a:45:80:53:37:60:fc:e1:
c6:55:a8:16:e2:2b:66:5b:53:17:22:78:db:22:c9:
f3:19:cd:2b:91:bb:62:28:6a:9a:e3:1d:bf:74:6d:
fc:ff:04:3a:85:96:b6:7a:2d:81:2b:55:59:7c:cf:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:79:B9:EF:10:0F:B0:7A:02:64:90:C0:FF:2C:16:71:71:CE:12:B0
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/0nm57xAPsHoCZJDA_ywWcXHOErA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.179.0/24
80.90.184.0/21
95.140.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e7:08:48:8c:22:85:75:4b:24:d4:3f:db:7a:d1:f4:55:9e:
61:e7:25:cd:3c:9f:75:b8:a3:64:21:3f:15:a8:38:b0:d1:13:
b6:72:fc:d1:75:ba:f1:0f:7b:b4:e4:ee:ab:51:44:54:d9:2b:
3a:79:dc:fd:fc:4b:bb:68:b5:54:7f:96:2b:56:52:bb:e6:7c:
35:5f:54:cd:ba:44:e4:b2:f4:77:2a:28:ff:12:14:e6:cb:58:
62:51:5b:ad:4f:20:cd:d2:fa:6d:6b:b8:c0:90:8d:2c:98:3d:
07:d4:60:43:ab:e2:33:8c:d7:af:c0:ef:0e:7c:17:9f:9d:e6:
38:c2:b7:e3:62:ef:45:aa:5e:2a:5d:8a:45:de:4a:b2:a9:46:
d1:69:88:be:41:a5:e6:49:78:8a:ed:59:b9:1e:bd:2d:af:9e:
87:83:93:2a:94:8e:96:51:21:c8:f3:d2:b4:03:38:9d:d5:c1:
bf:74:b4:d8:c0:71:0b:91:d6:b7:a2:b2:27:34:8c:2c:15:df:
77:e5:47:1e:65:a7:2c:3f:ef:93:79:8f:b9:4a:b4:9b:b1:96:
21:f3:e7:7b:9b:90:9e:bb:f4:fe:fb:07:81:a4:35:af:88:ab:
91:d4:d6:ff:6e:94:69:d3:be:2f:67:b8:c8:9b:19:5b:38:7d:
d1:26:7d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:15 2024 by rpki-client on console-fra.rpki-client.org