Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ncg6g0x73T32tt0pIwwtnGtBqS8.roa
File: Ncg6g0x73T32tt0pIwwtnGtBqS8.roa (raw, json)
Hash identifier: qSeOYVRozWuO7kz+w6r9ykUU8BQKNFJUSb9S/jOGRZo=
Subject key identifier: 35:C8:3A:83:4C:7B:DD:3D:F6:B6:DD:29:23:0C:2D:9C:6B:41:A9:2F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018C732B99631F9C652CDB0E12E99D0DB6E1
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ncg6g0x73T32tt0pIwwtnGtBqS8.roa
Signing time: Sat 16 Dec 2023 15:08:06 +0000
ROA not before: Sat 16 Dec 2023 15:08:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 45.8.184.0/24 maxlen: 24
45.15.143.0/24 maxlen: 24
5.253.38.0/24 maxlen: 24
45.92.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:2b:99:63:1f:9c:65:2c:db:0e:12:e9:9d:0d:b6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Dec 16 15:08:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35c83a834c7bdd3df6b6dd29230c2d9c6b41a92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1b:0c:c9:40:b8:ee:23:5f:46:25:00:10:68:
06:f6:cc:66:2f:0c:c9:e3:46:3b:8d:34:b2:94:4e:
17:dd:bd:33:81:74:27:a9:26:23:95:4b:38:0c:70:
50:b7:24:11:f1:05:e9:b0:31:cb:d3:f5:6a:3d:d2:
be:01:0d:68:0a:58:e6:99:3d:88:b1:c2:9e:e1:5f:
87:ab:5a:97:40:d8:5c:76:13:56:aa:66:4d:a5:1e:
dc:fd:e7:ee:cb:d1:c9:d0:21:c0:06:57:4b:22:2d:
d4:5a:18:71:5a:ad:87:8e:44:d6:74:d1:03:9b:40:
38:c0:67:f5:12:b7:1a:3a:6f:db:bf:f4:34:66:27:
42:7f:37:88:83:f5:c6:b7:32:00:e0:af:0b:3a:15:
02:d7:92:b2:ee:af:6c:ea:d3:59:57:c5:df:9a:13:
58:76:13:e1:d5:8b:b6:80:63:a3:f1:60:fd:83:5a:
95:23:31:c2:61:31:a0:bd:fa:fa:8c:74:44:3f:18:
b9:59:58:44:a6:3f:9e:25:f3:d2:9e:f4:6e:9a:ac:
b2:ef:2c:e1:5f:1f:4b:0b:4b:00:38:c6:49:18:f4:
6b:e2:47:d8:ad:3f:74:0e:28:82:d0:88:84:39:9f:
20:e8:97:ea:ab:e0:0a:8a:8d:fd:d3:c0:18:39:58:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C8:3A:83:4C:7B:DD:3D:F6:B6:DD:29:23:0C:2D:9C:6B:41:A9:2F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ncg6g0x73T32tt0pIwwtnGtBqS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.38.0/24
45.8.184.0/24
45.15.143.0/24
45.92.195.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a7:1f:cb:d9:42:01:05:f3:3b:54:71:00:9a:44:eb:f0:a6:
a8:50:e9:1a:a8:8d:15:f5:16:d9:30:bd:37:c5:ca:f3:73:24:
0d:20:dd:61:17:09:7e:f9:a8:09:8b:09:a7:7c:82:9c:05:c8:
fd:c1:ac:98:8b:34:09:1d:c3:99:2b:bd:eb:80:fc:8b:b4:b2:
52:2e:7c:27:19:b3:de:50:50:e6:d0:87:a4:5d:a0:66:98:42:
4e:62:7f:ca:c8:82:a7:3b:a7:20:17:42:45:84:39:4a:8a:14:
1d:82:cb:d9:9c:53:6f:7e:18:63:fa:29:e5:ce:af:f7:74:27:
a6:cc:c7:78:c3:d2:48:f0:53:7e:fc:cf:49:a3:ac:65:ae:0d:
bf:ad:26:2d:eb:d1:a4:dd:5b:24:73:b8:5d:b9:d7:8e:12:ba:
03:0f:d1:ba:e6:39:4e:aa:1f:0e:82:6a:5c:5c:41:8a:0d:e9:
1a:f5:d7:66:8c:27:fc:51:7a:d6:84:45:a9:ee:f6:0c:0b:ce:
77:94:63:ee:71:46:bb:c3:c6:d6:ec:9b:ce:01:13:57:af:b9:
5b:4f:cd:53:6a:5d:5f:96:10:0d:b3:f4:0b:ab:b0:06:f6:fb:
05:21:7d:01:49:75:70:5e:21:05:12:0d:a9:af:ab:5a:04:13:
9c:89:1a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 17 11:36:37 2023 by rpki-client on console-fra.rpki-client.org