Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/nKJUnU_2wqW7MZ_cFrwhzLNWSxw.roa
File: nKJUnU_2wqW7MZ_cFrwhzLNWSxw.roa (raw, json)
Hash identifier: nsjCoR38NVHWy2/46mY3WSIw4yxNJqV/8P4d5djf5hI=
Subject key identifier: 9C:A2:54:9D:4F:F6:C2:A5:BB:31:9F:DC:16:BC:21:CC:B3:56:4B:1C
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018CB0D245595C0CD42E0816BA33475C9184
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/nKJUnU_2wqW7MZ_cFrwhzLNWSxw.roa
Signing time: Thu 28 Dec 2023 14:26:59 +0000
ROA not before: Thu 28 Dec 2023 14:26:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35182
IP address blocks: 80.233.245.0/24 maxlen: 24
80.233.250.0/24 maxlen: 24
62.63.176.0/21 maxlen: 24
62.63.184.0/22 maxlen: 24
62.63.188.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:d2:45:59:5c:0c:d4:2e:08:16:ba:33:47:5c:91:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 28 14:26:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ca2549d4ff6c2a5bb319fdc16bc21ccb3564b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:44:22:b3:72:87:06:d2:e9:a6:11:9a:43:
2b:64:6d:d3:d6:2a:c6:39:35:5c:f9:b7:c7:00:d1:
0a:93:b5:ae:90:80:0f:4f:67:d6:30:95:32:c5:31:
aa:39:df:93:a2:2b:81:d9:a9:eb:78:61:a0:be:40:
79:a5:11:bd:b1:27:df:ff:00:ea:35:92:2b:bd:4b:
0f:43:bc:60:25:07:35:b2:02:8f:e3:d7:6e:1b:9f:
63:db:d8:26:91:21:33:30:fa:c9:8c:07:e4:6c:b2:
b4:b0:0a:a1:59:5f:72:ab:3d:43:6e:d5:d8:09:f9:
b0:d2:da:ec:c3:5f:8a:88:78:0b:1f:9c:3b:e5:44:
e7:4f:99:3b:57:4e:b2:5a:67:cc:53:07:bf:87:50:
df:ae:fc:cf:ad:72:55:ad:d3:05:f9:14:b7:2c:3d:
09:d0:95:10:ed:2f:21:0f:e4:c8:9d:df:23:b8:ea:
c5:a7:11:79:9e:91:ac:6e:94:43:2b:28:0e:c5:6b:
93:23:8f:08:a5:03:6f:e3:8a:45:7e:7b:7a:7c:8b:
bd:dd:85:51:b3:f5:89:0b:b8:07:44:66:94:14:e7:
5b:c0:ba:09:1f:ea:83:cc:42:bd:2c:c9:6b:d1:93:
8a:84:d2:9d:b7:55:5a:5f:b0:0f:43:a7:00:33:a8:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A2:54:9D:4F:F6:C2:A5:BB:31:9F:DC:16:BC:21:CC:B3:56:4B:1C
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/nKJUnU_2wqW7MZ_cFrwhzLNWSxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.176.0-62.63.189.255
80.233.245.0/24
80.233.250.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:a4:96:3d:07:e6:54:e1:7a:e2:dc:36:c5:be:85:f1:98:2d:
1a:16:74:f5:0b:04:e1:1a:bd:b4:ce:59:4a:d1:3e:1e:24:83:
b1:af:3d:d9:4e:d2:73:5f:f2:ea:22:07:79:9c:47:ee:c0:09:
5d:24:86:d9:02:34:88:a8:15:3e:ff:eb:b0:46:17:e7:2c:bf:
d5:c0:b4:0c:b9:7e:ac:f7:b7:dc:4c:0b:f4:08:64:ab:8d:0c:
8a:18:d0:1b:3b:28:3c:fa:73:60:10:0f:e7:c5:51:46:8a:55:
cc:fe:a3:68:18:15:ad:8c:4c:58:b6:90:97:32:82:97:ce:30:
5e:e2:43:f7:7e:ac:cb:b5:fc:45:ff:5f:0e:cf:ef:6c:fd:b7:
96:ce:13:08:1b:a5:40:e4:d1:a6:57:49:b8:58:76:7e:9d:15:
23:5b:91:04:3a:48:1c:f1:42:41:31:85:7b:1c:4a:73:71:7c:
c0:ec:9d:16:13:33:f5:e6:29:b5:b0:34:9a:d8:bb:b8:a3:8c:
ea:ed:50:72:5d:cb:8a:25:33:18:82:c9:7f:00:85:25:6e:4a:
0c:d1:dc:ef:0e:09:f8:8e:a6:eb:da:b2:21:ce:5c:3b:8d:74:
66:c4:ac:69:b6:af:14:df:4a:28:0d:dd:b8:37:90:e0:fa:f7:
be:5e:a6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:24 2024 by rpki-client on console-fra.rpki-client.org