Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nwvQWUUYJ1cTSR7KRA0MjQRCn18.roa
File: nwvQWUUYJ1cTSR7KRA0MjQRCn18.roa (raw, json)
Hash identifier: hdm4ski/revACcrpbTi3b+Q3KYDhwKya9yQfbVzoPF0=
Subject key identifier: 9F:0B:D0:59:45:18:27:57:13:49:1E:CA:44:0D:0C:8D:04:42:9F:5F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018AEF755A27F4B3E6CD4F44E822CD54B522
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nwvQWUUYJ1cTSR7KRA0MjQRCn18.roa
Signing time: Mon 02 Oct 2023 08:15:59 +0000
ROA not before: Mon 02 Oct 2023 08:15:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.208.114.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:75:5a:27:f4:b3:e6:cd:4f:44:e8:22:cd:54:b5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 2 08:15:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f0bd0594518275713491eca440d0c8d04429f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dc:be:55:7e:fd:d4:3a:5f:b4:61:f8:cc:dd:
cd:2d:b5:d2:54:87:31:39:30:74:cf:43:5e:b6:54:
84:70:7f:4f:dc:2a:2a:1d:cd:71:75:2e:74:bc:23:
0c:bc:1c:8f:ff:93:65:6e:c4:66:cd:5e:1e:0a:24:
4a:9e:fb:1c:52:51:ce:e0:b9:34:18:89:06:89:2f:
4e:0d:85:a5:df:e4:14:45:f8:5c:a6:d9:4f:79:e9:
4d:e9:a7:38:25:db:76:f3:50:80:92:e6:43:a2:d1:
c7:38:dc:3a:09:b9:fa:fa:b2:ef:e7:d2:d8:35:0a:
b7:4b:34:d1:61:15:5c:3c:0c:f6:af:37:ec:c6:16:
60:06:a5:9a:16:50:64:58:ed:c4:e5:b0:df:64:26:
48:6d:68:17:a3:12:67:f1:33:02:18:94:44:5f:cb:
97:f3:fb:c6:40:ad:ae:f6:0f:db:d4:b6:43:76:a7:
ba:c8:07:09:83:10:2b:a5:db:d6:ae:5b:8d:d9:a0:
b4:12:f3:e5:37:82:0d:57:26:bc:8f:c7:1b:3b:ec:
36:48:31:ca:3f:37:3d:3c:af:a7:28:25:8d:cf:43:
3a:d0:d0:ce:1f:74:46:b9:f5:8c:91:07:41:7a:80:
3c:f3:21:9b:93:2d:6e:28:c8:c5:97:44:8b:16:42:
6d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0B:D0:59:45:18:27:57:13:49:1E:CA:44:0D:0C:8D:04:42:9F:5F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nwvQWUUYJ1cTSR7KRA0MjQRCn18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.114.0/24
Signature Algorithm: sha256WithRSAEncryption
00:43:1d:b3:d3:2f:e5:64:e2:5b:07:c6:73:b5:8a:8a:41:ed:
00:79:d7:9e:7c:f4:3a:85:14:c5:10:81:47:d8:9e:26:93:2d:
24:df:50:b2:d8:31:88:cb:28:e0:53:d1:5d:c3:44:a4:22:00:
2b:a1:16:9f:e0:e6:80:2e:7a:43:ec:e6:62:d4:a3:cd:73:af:
bb:7e:73:8b:8b:ba:66:63:57:33:83:57:7c:b8:94:00:29:7a:
48:ee:bd:47:8e:d9:a0:a7:4a:bd:26:4d:5d:5a:4c:f3:83:92:
25:79:3b:d5:f9:45:66:95:96:3a:5a:41:98:bd:ed:10:4d:9f:
1f:aa:5b:92:66:f4:80:ca:ef:c0:25:27:fc:a4:2c:ec:7c:1a:
b1:e1:1f:a1:70:83:17:6b:25:a4:de:92:09:bd:51:78:a3:3c:
07:36:fb:7f:54:02:e1:43:7d:83:8d:d5:81:06:41:7b:90:41:
12:2e:a1:51:3d:06:d0:84:5e:17:c8:b5:5c:a6:65:b7:14:62:
c8:c9:80:6c:e8:15:2b:5a:aa:a0:78:fc:6f:b7:fd:c1:2e:b3:
e8:07:02:62:5e:a2:d1:ac:75:b4:a0:b1:32:41:fc:13:4a:55:
24:0a:8f:ca:0c:7b:75:68:ce:97:e9:76:ca:07:56:26:0d:b9:
06:56:98:10
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 3 22:11:47 2023 by rpki-client on console-fra.rpki-client.org