Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NyoPTmnB4psXRwBCj2r_fc73xpA.roa
File: NyoPTmnB4psXRwBCj2r_fc73xpA.roa (raw, json)
Hash identifier: WCViBJLVRP05a5MswkywzOt9W1rwHH9H6k32yF5JOIc=
Subject key identifier: 37:2A:0F:4E:69:C1:E2:9B:17:47:00:42:8F:6A:FF:7D:CE:F7:C6:90
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B645E92DE9B5BD1C3DC9718FD1F701
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NyoPTmnB4psXRwBCj2r_fc73xpA.roa
Signing time: Mon 02 Jan 2023 09:00:48 +0000
ROA not before: Mon 02 Jan 2023 09:00:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210531
IP address blocks: 185.194.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 10:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:45:e9:2d:e9:b5:bd:1c:3d:c9:71:8f:d1:f7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=372a0f4e69c1e29b174700428f6aff7dcef7c690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:14:16:85:01:82:43:88:e7:02:51:10:c5:bb:
63:51:b4:63:e7:33:95:01:17:5d:7d:ed:74:53:2c:
0e:c2:6a:89:dd:c6:cc:00:30:7a:ca:61:39:cf:7f:
e5:48:e2:9e:af:48:a0:b1:9e:e9:7a:57:08:50:bf:
59:bb:be:18:5d:18:00:92:58:9d:75:38:e5:cc:9a:
f5:06:b6:d5:69:5c:f0:cd:06:ec:40:68:7a:7f:0e:
0c:35:d4:71:ac:6d:9d:20:48:31:e0:bb:79:0c:e1:
70:6c:47:5d:09:37:05:4c:ba:b0:b8:5b:a3:cf:19:
3e:be:13:fa:55:2a:04:d5:dd:5e:5c:11:dd:69:ab:
ec:8f:91:11:34:10:2d:56:e5:7b:eb:16:cd:06:c9:
8f:50:62:90:92:af:f7:85:6d:b5:3a:42:4c:fb:01:
6c:12:cb:ad:a2:4d:bd:4c:99:83:48:4c:41:9b:0f:
03:41:21:64:b8:40:0e:e3:1f:5d:a3:21:c2:ca:6f:
c6:0b:46:d8:ad:48:3c:97:80:25:64:d3:c1:54:8d:
9f:b2:96:a0:78:12:2b:7b:45:df:42:45:0a:4c:a2:
48:9f:33:f4:d8:9c:9f:6e:fc:a4:e6:e5:ba:07:c0:
1e:52:a6:91:66:9e:48:91:3d:bc:a7:97:36:13:2e:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:0F:4E:69:C1:E2:9B:17:47:00:42:8F:6A:FF:7D:CE:F7:C6:90
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NyoPTmnB4psXRwBCj2r_fc73xpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.29.0/24
Signature Algorithm: sha256WithRSAEncryption
13:72:d5:bf:ac:3b:99:28:ae:da:ae:90:3b:96:c6:c0:a8:40:
ca:26:2e:0a:0d:c1:04:86:09:d6:12:de:3a:19:38:eb:b2:1a:
20:15:57:38:7c:26:3f:0f:62:14:6c:47:21:e4:9b:77:ee:49:
4f:29:96:1d:9f:a5:4f:0b:f3:23:73:c3:68:81:64:40:96:ed:
05:2c:cc:10:95:42:b2:3c:47:92:35:29:84:05:d7:dd:8c:c1:
ba:24:95:0d:69:59:bb:93:6f:0f:b5:4f:e7:f8:08:6e:d0:30:
01:24:dd:d7:03:03:f7:0a:29:ae:3e:40:40:6d:75:2f:f2:84:
4b:85:1f:5c:47:f2:9e:65:07:07:d2:b9:06:7f:56:5f:50:32:
f9:59:3c:9b:2a:32:c9:98:49:07:2c:60:fa:e1:fd:1a:f8:fd:
be:32:b6:5b:61:a9:6c:35:e4:7b:2f:eb:38:e7:33:eb:ac:67:
f7:e0:71:a6:7c:6e:b5:df:b4:e4:7a:8b:a8:a0:1b:da:52:30:
fd:ef:77:b2:4c:b1:60:b6:14:d8:53:68:56:ea:3e:14:3b:ee:
99:c3:0e:23:00:69:bb:9a:b2:cf:b0:a1:b4:83:63:47:bd:07:
83:7d:9c:40:f3:5c:32:22:74:06:ef:e6:11:ec:54:9e:11:f4:
f3:0e:fd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org