Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/nATHCHkMkd5oBbOsL8QNwdSCyJY.roa
File: nATHCHkMkd5oBbOsL8QNwdSCyJY.roa (raw, json)
Hash identifier: K4NAuEIYyJUCuxPRmyha80mGdsR/RmZiaaH0A0SxKlU=
Subject key identifier: 9C:04:C7:08:79:0C:91:DE:68:05:B3:AC:2F:C4:0D:C1:D4:82:C8:96
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 01916985CFDB0EF2F6B65047694AFC4DB1FC
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/nATHCHkMkd5oBbOsL8QNwdSCyJY.roa
Signing time: Mon 19 Aug 2024 07:24:22 +0000
ROA not before: Mon 19 Aug 2024 07:24:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 147003
IP address blocks: 185.113.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 20 Aug 2024 08:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:85:cf:db:0e:f2:f6:b6:50:47:69:4a:fc:4d:b1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Aug 19 07:24:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c04c708790c91de6805b3ac2fc40dc1d482c896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:91:3a:1a:d5:83:5f:31:af:5e:d3:7c:fa:17:
3a:24:dd:62:6a:74:67:11:fd:3a:92:e7:09:b0:ce:
16:e1:f5:2a:6a:6a:d9:7e:f9:ec:81:40:6e:65:88:
64:31:f9:08:ca:1e:56:13:56:fc:32:ee:ae:e6:9b:
b3:7b:f9:c0:5c:70:80:67:95:cf:64:28:71:07:3f:
50:61:ae:84:20:65:8f:bb:45:c3:f3:f6:6b:e2:ac:
19:8f:0d:4e:a2:2c:c3:33:40:4c:a8:68:b1:8a:7d:
69:ad:1c:98:68:fa:15:96:41:a7:86:20:0e:3b:48:
f0:cb:1e:b7:44:38:1f:ec:a3:05:06:07:78:46:bc:
19:41:54:8b:ff:23:a7:91:65:4d:e2:f6:ad:6f:e2:
51:fe:90:8b:8c:46:2f:08:e2:89:ac:01:c5:5b:8f:
11:02:d9:e7:4e:36:ea:62:02:31:c1:4f:1f:01:59:
37:24:08:de:0e:e6:84:1c:06:5e:46:32:f6:e9:24:
e7:59:ba:d4:00:46:9b:4c:7e:cd:39:8a:21:b2:02:
d9:f7:59:67:93:6a:f5:c9:fb:02:dc:c7:b7:46:8e:
10:5f:8e:e7:20:fc:f5:f5:60:84:61:3f:8b:26:5c:
4b:e7:db:13:dc:6c:ad:2d:34:58:fa:70:6a:e5:ce:
be:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:04:C7:08:79:0C:91:DE:68:05:B3:AC:2F:C4:0D:C1:D4:82:C8:96
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/nATHCHkMkd5oBbOsL8QNwdSCyJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
Signature Algorithm: sha256WithRSAEncryption
65:24:b0:70:c2:6d:88:26:20:ac:d1:ba:02:ab:2f:74:71:3d:
0f:59:86:f5:a0:58:c9:f6:f0:6f:66:a2:a3:73:53:39:3b:60:
a7:8a:03:42:4a:b4:74:75:d1:d9:e5:50:c1:ad:43:81:c2:c5:
34:83:60:08:6f:3f:ea:37:ed:f1:6e:21:07:cd:0d:a4:08:ba:
de:de:d0:3f:e8:11:ce:16:c6:0e:fa:0d:2b:0f:69:1b:23:47:
4b:11:1f:ec:23:44:fb:ab:48:52:e7:81:f5:69:87:1c:c5:ad:
f5:cc:e8:6f:76:7f:56:ea:7f:cd:3e:98:95:e1:45:0f:e3:3e:
5b:00:45:c0:53:f3:73:ac:b0:ac:33:59:f6:23:00:c2:e9:07:
13:3f:87:eb:b0:d4:aa:6e:cc:6e:54:e2:77:34:b9:22:58:fa:
4a:8a:1a:1d:4b:08:ad:bd:b4:97:cb:4a:5a:cc:7e:60:2b:b2:
12:5b:56:53:47:3f:2c:84:d7:8d:6f:51:5b:41:f5:80:15:72:
bc:7c:60:84:97:e7:a5:71:d6:84:0c:62:78:6c:df:01:0a:23:
37:e4:68:4b:85:e9:54:39:f1:ab:ce:c5:75:32:7f:17:70:5c:
87:22:e9:db:f9:3b:a3:d5:61:23:82:5e:bc:de:20:09:c6:b1:
32:68:d1:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:42 2025 by rpki-client