Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NPu-GW4gd3tb7twjvQrIfeTEUGk.roa
File: NPu-GW4gd3tb7twjvQrIfeTEUGk.roa (raw, json)
Hash identifier: crZq/pG8Y1aATRAnXe3B3QKnSbR2GZTypZmQVve4HwU=
Subject key identifier: 34:FB:BE:19:6E:20:77:7B:5B:EE:DC:23:BD:0A:C8:7D:E4:C4:50:69
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0189860F24FC837C67C7617C86407B64F8EE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NPu-GW4gd3tb7twjvQrIfeTEUGk.roa
Signing time: Mon 24 Jul 2023 04:01:26 +0000
ROA not before: Mon 24 Jul 2023 04:01:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13335
IP address blocks: 93.119.106.0/24 maxlen: 24
89.46.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Sep 2023 19:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:0f:24:fc:83:7c:67:c7:61:7c:86:40:7b:64:f8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 24 04:01:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34fbbe196e20777b5beedc23bd0ac87de4c45069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:6e:aa:65:42:ff:dd:19:a6:82:9b:a5:12:
1e:17:08:04:a2:68:e2:c0:cd:b2:13:aa:09:92:1b:
13:f5:ae:f9:c4:cb:ef:e4:41:a4:cf:a2:85:c2:20:
77:9c:e5:eb:bc:f2:02:24:a6:ea:84:ea:74:34:14:
bb:a4:c5:50:03:b8:fb:f4:72:2d:c3:96:15:fe:69:
33:55:c5:11:6f:cf:38:6b:34:4a:51:d6:d4:92:fd:
ab:3e:f2:9c:c1:13:6f:c1:41:f5:f8:9b:d1:1d:43:
4e:54:c3:85:7c:78:6b:61:eb:b1:34:f0:8f:50:3b:
21:f1:47:e0:a8:86:87:50:92:53:fd:90:91:04:58:
7d:2c:5c:39:b8:9a:fd:9a:96:4c:ab:c2:66:7c:1d:
0f:8c:49:45:d1:be:5b:3c:87:a6:89:1d:98:fe:28:
e0:34:dd:46:1d:56:38:d1:5c:82:a0:c0:4c:0a:40:
8e:0e:1e:19:bd:2a:5b:76:35:f6:9f:03:08:72:99:
f6:0d:23:0d:8f:5f:c2:6c:0c:7d:f9:03:a7:9a:e8:
3d:d6:56:17:26:d4:dd:c9:a4:67:a0:25:ee:49:0e:
45:19:1e:78:35:2c:df:9a:bb:66:fc:d2:d4:fa:31:
07:3d:32:ef:39:8d:64:4e:6e:eb:25:a8:43:74:39:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FB:BE:19:6E:20:77:7B:5B:EE:DC:23:BD:0A:C8:7D:E4:C4:50:69
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/NPu-GW4gd3tb7twjvQrIfeTEUGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.0.0/24
93.119.106.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c2:89:34:b4:e6:81:da:4b:cc:5c:bf:60:a0:e7:25:dd:76:
57:e3:87:72:18:93:b4:07:27:1b:d3:46:aa:06:49:11:eb:62:
1e:85:99:07:7a:37:d4:6b:61:1a:2e:8f:62:d6:6b:e5:25:e0:
45:36:69:f6:72:cd:70:94:94:c8:8d:46:ae:44:ad:a4:60:93:
e8:43:0b:a0:67:4e:0c:65:32:d1:14:4b:80:8b:1f:99:49:94:
ff:26:0c:8c:09:cd:17:73:91:c4:b0:73:65:99:31:8e:b5:f1:
2b:fc:ed:31:f9:f9:a6:fb:11:38:66:16:14:ea:bf:4f:27:48:
5e:fd:57:66:84:f3:e1:8e:b0:b9:44:5d:0b:da:ef:9c:cd:cb:
3b:21:6a:80:49:15:92:0f:2c:ed:45:12:b6:65:67:82:a9:b0:
28:c4:64:7f:e0:04:bd:3f:6b:7f:e2:53:37:43:b8:db:3c:2c:
70:fc:85:16:2f:dd:95:d1:65:cc:2a:24:18:48:80:ae:cf:e6:
94:05:bb:b9:ae:e5:29:ef:ef:15:d7:e8:7a:86:da:78:c6:c2:
f5:26:f6:35:0d:59:5b:2f:cd:c3:74:51:cd:1c:8a:79:4e:d5:
c8:74:4f:15:5a:18:d5:fa:a5:5b:01:ce:9f:57:f8:fb:5a:50:
1a:35:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org