Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/NnwRydPOnewfwj1Hx_TQjoCa33o.roa
File: NnwRydPOnewfwj1Hx_TQjoCa33o.roa (raw, json)
Hash identifier: c10WS8K9IoyZjnDSBs7zYx3X1xb6VHfwzJgvt93BM3Q=
Subject key identifier: 36:7C:11:C9:D3:CE:9D:EC:1F:C2:3D:47:C7:F4:D0:8E:80:9A:DF:7A
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 018C154268C71149B19A78C9D638B20BC993
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/NnwRydPOnewfwj1Hx_TQjoCa33o.roa
Signing time: Tue 28 Nov 2023 09:28:42 +0000
ROA not before: Tue 28 Nov 2023 09:28:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 217.195.197.0/24 maxlen: 24
217.195.195.0/24 maxlen: 24
80.93.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:42:68:c7:11:49:b1:9a:78:c9:d6:38:b2:0b:c9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Nov 28 09:28:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=367c11c9d3ce9dec1fc23d47c7f4d08e809adf7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b0:66:a4:85:b5:cb:24:38:80:78:97:32:5c:
96:d6:0a:1e:a7:ed:f3:d9:79:a5:23:4b:fe:8c:a5:
b9:9d:75:fc:01:85:4c:5b:1c:be:1f:41:6d:d0:a0:
9c:2b:b9:05:35:18:bf:63:97:1d:61:4a:de:a3:c9:
b6:25:5f:25:c7:e1:b4:b4:be:2e:d0:c4:2e:a0:71:
4d:e9:9b:a2:d1:70:db:fe:05:eb:74:5e:50:dc:a5:
31:20:f6:6f:41:8a:a8:cc:cb:e4:e2:b8:6a:b7:cf:
b5:07:fb:45:a7:7d:53:29:5d:cd:9c:ab:32:41:f5:
84:e6:b0:c8:65:4d:1e:80:5f:fe:20:6a:6b:2f:e0:
0a:bd:be:2f:8b:22:42:8a:c9:df:b6:c8:94:8f:dc:
d5:34:0c:81:57:02:13:3f:1b:26:d8:10:5e:f7:55:
d5:6f:fb:1b:c5:8a:56:43:6d:17:50:fe:7b:23:18:
93:27:c8:e2:b3:60:59:5b:73:c2:12:68:09:1c:68:
87:6d:cd:da:89:53:a0:43:31:a8:f6:38:0f:26:b6:
8f:0c:e7:1e:f5:25:fa:aa:91:f2:0d:54:56:db:6c:
14:6d:97:58:77:4b:74:a7:d5:a5:a2:c6:cd:7d:e0:
1a:1a:69:2d:c1:3e:c7:42:1f:1c:ff:a9:46:4c:3c:
71:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:11:C9:D3:CE:9D:EC:1F:C2:3D:47:C7:F4:D0:8E:80:9A:DF:7A
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/NnwRydPOnewfwj1Hx_TQjoCa33o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.93.220.0/24
217.195.195.0/24
217.195.197.0/24
Signature Algorithm: sha256WithRSAEncryption
71:01:65:c5:eb:31:10:09:a6:18:0d:35:5c:59:2d:b2:e9:28:
05:01:bf:c0:cb:c2:c9:28:3a:8c:4b:08:96:f5:99:4d:22:40:
10:af:7e:2e:ae:06:e2:5a:3d:e5:40:c6:b0:98:5c:45:29:d8:
cb:63:b1:cc:d5:2a:e6:d4:f5:9e:79:8e:fe:75:a4:50:14:3e:
e8:59:7a:b2:7a:19:27:b2:ed:56:dc:03:56:34:88:c3:84:ae:
4f:46:71:23:ea:9e:13:cd:57:d8:30:f9:e7:e3:d6:aa:60:3a:
c5:62:97:2d:9a:1a:8f:ef:f3:7a:f3:3c:de:96:74:55:f4:a4:
37:5b:a3:8e:e5:72:f0:d2:1e:19:41:23:e8:59:17:a6:d3:61:
01:6f:1a:26:42:13:55:1c:cf:e3:38:ff:c8:7d:5d:d2:b6:f2:
6e:ae:57:6a:a2:ed:e5:7d:aa:02:71:a9:f3:aa:15:9c:da:a4:
fe:af:58:00:2b:34:c0:81:16:ec:d2:0d:e7:79:20:05:28:18:
3d:ea:16:f9:52:20:a9:a9:30:b2:91:6b:21:89:83:62:30:88:
f3:e3:57:13:19:48:72:89:82:b3:cf:dc:6c:66:b2:0e:de:54:
45:3a:92:4f:ee:0a:f4:11:4c:4b:b7:b8:22:11:89:71:27:75:
69:12:67:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:29 2024 by rpki-client on console-fra.rpki-client.org