Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/N53ItD06hYDRe2Io3mPTE3dvdSA.roa
File: N53ItD06hYDRe2Io3mPTE3dvdSA.roa (raw, json)
Hash identifier: BtIhBRs9v28Xa1iMGLP8Fwgwts3PqgsgaEt4yr8N/ec=
Subject key identifier: 37:9D:C8:B4:3D:3A:85:80:D1:7B:62:28:DE:63:D3:13:77:6F:75:20
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018A61A044E35D417AD6986236B9B7637DF8
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/N53ItD06hYDRe2Io3mPTE3dvdSA.roa
Signing time: Mon 04 Sep 2023 19:16:47 +0000
ROA not before: Mon 04 Sep 2023 19:16:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34820
IP address blocks: 45.158.82.0/24 maxlen: 24
185.225.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:61:a0:44:e3:5d:41:7a:d6:98:62:36:b9:b7:63:7d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 4 19:16:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379dc8b43d3a8580d17b6228de63d313776f7520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:24:5b:8b:bd:0e:17:39:97:10:a8:93:c6:db:
5f:55:80:17:30:4b:8d:fe:81:80:70:7a:2c:c6:7a:
d2:76:ee:39:98:39:5f:c6:f8:0c:68:6c:85:76:fa:
8c:e4:3a:00:ee:bc:ab:96:19:5a:37:0e:f5:8a:52:
67:bd:9e:f4:25:cb:c3:46:76:11:2a:f0:2b:4f:2e:
58:1c:e0:d1:f5:04:03:9d:45:cb:c7:0e:53:c1:13:
73:8d:fe:21:0b:f0:b2:cb:0f:c1:c4:4c:40:d2:00:
79:e4:15:db:f6:e2:f8:52:68:46:f8:ca:6a:f6:6b:
10:2b:0d:0f:52:c1:e8:28:ae:e4:bf:1b:b8:c9:be:
88:f3:d3:f1:56:09:39:0e:63:9d:a8:9c:00:e2:dc:
67:22:7c:ae:69:b3:66:57:29:3c:b4:cb:18:d1:7f:
ad:e3:59:6c:83:e0:60:03:a5:51:80:83:c4:58:75:
2d:90:6a:ca:2e:e5:34:24:96:85:56:16:2c:48:99:
c1:99:c4:3f:f3:8a:cb:44:c9:15:4f:19:10:b3:03:
5b:1e:65:75:87:95:c8:99:4d:0c:1a:40:c3:76:b7:
9d:11:24:fb:55:cc:35:36:50:c1:a9:87:0b:53:46:
31:f3:25:e0:e7:e1:33:ae:2b:15:e8:5f:5a:0f:e3:
e4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9D:C8:B4:3D:3A:85:80:D1:7B:62:28:DE:63:D3:13:77:6F:75:20
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/N53ItD06hYDRe2Io3mPTE3dvdSA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.82.0/24
185.225.204.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ab:b1:6b:22:1b:18:70:d2:cb:49:b9:d8:59:18:14:29:1d:
5f:fe:48:23:51:c5:69:1d:11:b3:90:be:19:9d:74:0b:c9:e3:
aa:ae:81:6a:ac:f6:c6:58:27:26:7b:1d:e4:44:26:ef:07:d8:
28:d7:a4:05:56:1f:c6:4e:46:e8:19:82:2a:20:b6:a9:dd:41:
40:00:50:fe:52:fa:46:db:31:62:87:25:6d:ea:00:e6:c0:37:
2c:6c:ec:18:f8:46:e1:88:d3:28:86:8b:d5:fe:0b:82:70:e4:
52:21:75:54:77:66:23:b7:c4:da:50:6f:ea:f1:9a:da:0e:0a:
83:95:bc:8f:4a:1e:eb:af:42:04:4a:6d:7b:41:df:d2:0a:d1:
bd:24:8d:d1:61:2b:30:22:1d:25:49:5a:cf:d3:67:ad:9c:31:
3d:c6:b2:09:6b:bf:cc:2e:bf:21:22:4e:34:3a:55:2f:2d:5e:
60:d7:2d:06:c7:62:44:0c:89:55:08:be:13:25:4d:8e:3e:3d:
88:4c:61:0e:63:46:ed:9d:cc:a9:9a:c2:04:9e:a5:e9:57:81:
50:91:73:1a:dc:ab:7d:09:68:dd:05:49:0b:bd:25:20:30:0d:
f1:5d:b5:46:de:fc:5c:a0:21:4e:c3:04:78:ce:c6:4c:3b:42:
00:83:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:18 2024 by rpki-client on console-fra.rpki-client.org