Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/4NaKYqAySwQLv7gsmYgOH1Ncyno.roa
File: 4NaKYqAySwQLv7gsmYgOH1Ncyno.roa (raw, json)
Hash identifier: yOOzLCZaVXrBx+/nP6NzsIEdyV+KqBy7tOVDbrEd6T8=
Subject key identifier: E0:D6:8A:62:A0:32:4B:04:0B:BF:B8:2C:99:88:0E:1F:53:5C:CA:7A
Certificate issuer: /CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Certificate serial: 01857169BCE546E0C473A856E868CCED88C2
Authority key identifier: 84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/4NaKYqAySwQLv7gsmYgOH1Ncyno.roa
Signing time: Mon 02 Jan 2023 07:37:13 +0000
ROA not before: Mon 02 Jan 2023 07:37:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35186
IP address blocks: 195.80.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:bc:e5:46:e0:c4:73:a8:56:e8:68:cc:ed:88:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8491bbeacf5b0c589e99b93f84e1c5e47d9af604
Validity
Not Before: Jan 2 07:37:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0d68a62a0324b040bbfb82c99880e1f535cca7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:75:d1:1e:49:1e:17:7c:09:8d:cf:c8:a1:a3:
cf:b5:03:99:56:d2:a8:6f:d5:7e:52:85:8f:a1:6a:
63:c0:63:d5:b2:eb:07:73:5c:3b:41:a8:75:dc:71:
02:56:37:65:78:27:03:5f:4f:b3:03:32:3f:a2:d9:
f2:ba:1d:86:01:e4:22:8c:3a:1f:22:64:4c:f2:9e:
70:b5:84:cf:60:a3:8a:ae:17:59:1a:9a:93:b1:95:
26:e5:3b:ca:16:8c:57:3e:c7:6d:3d:f0:20:df:63:
28:55:45:fd:a6:61:ba:08:c3:66:a9:ba:46:31:5e:
00:d2:ee:10:8f:1e:2e:2e:1d:59:52:d1:1d:52:e0:
39:99:98:23:16:a5:d0:fc:11:6b:07:bd:d2:35:25:
38:42:bd:3a:50:ed:64:1d:71:4d:6f:90:43:bc:7b:
36:40:3b:b7:ab:8c:10:ba:20:e2:8a:34:a6:4e:43:
f0:e4:dd:86:83:d7:1e:da:75:f9:7d:d8:e2:23:da:
3d:5b:b5:23:7e:59:64:4a:4d:5b:03:bd:5f:fd:8d:
a2:05:3e:3d:e1:eb:c0:81:53:9c:37:00:14:6b:fa:
c8:06:74:a8:4e:dc:25:21:4d:d0:e8:66:ab:a7:4b:
11:1f:c0:7b:11:9f:67:d9:27:6c:10:e3:f5:fb:08:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:8A:62:A0:32:4B:04:0B:BF:B8:2C:99:88:0E:1F:53:5C:CA:7A
X509v3 Authority Key Identifier:
keyid:84:91:BB:EA:CF:5B:0C:58:9E:99:B9:3F:84:E1:C5:E4:7D:9A:F6:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJG76s9bDFiembk_hOHF5H2a9gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/4NaKYqAySwQLv7gsmYgOH1Ncyno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/adf984-7959-4bbd-8a8e-2cbecddd0d64/1/hJG76s9bDFiembk_hOHF5H2a9gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.80.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:23:d0:93:09:0e:ee:30:49:b1:18:fc:8c:63:63:df:bd:87:
ef:00:06:de:c9:cc:9e:ca:04:3e:a3:60:b5:22:73:04:0e:82:
c9:9f:24:cd:95:3e:d8:4b:ab:ce:c3:d3:92:77:fd:c5:c5:20:
7c:7a:19:10:5c:6b:37:6d:10:0a:be:24:59:12:5b:ed:83:db:
3d:c5:07:be:8d:92:6e:93:1e:4b:7d:f9:66:27:b9:85:ad:05:
a1:60:c8:69:7e:08:85:72:9a:e7:d6:87:8c:69:0c:e5:63:f6:
4c:1d:a5:b1:71:a6:38:19:6d:e0:ac:6e:f3:bb:79:88:ee:07:
3b:5b:f8:b3:f9:b0:22:0a:b0:81:58:06:21:1a:c5:ed:f2:96:
c0:45:8a:4b:67:aa:cd:0a:f3:ac:53:5a:99:e4:18:ae:7e:b2:
19:2f:96:45:aa:cf:ea:1f:76:ba:59:fc:58:97:da:33:24:27:
ea:b7:18:e6:b7:45:20:f2:e6:d5:01:f1:d4:9c:ec:e3:6d:a1:
26:cf:27:92:56:c4:60:2a:83:ea:65:fc:2a:f2:50:38:6e:d7:
c1:e3:a9:20:10:a4:e5:20:e5:34:d1:33:36:02:54:c1:06:d0:
9c:91:52:00:7e:fa:05:92:0a:62:d4:f5:5a:d6:fc:49:61:e8:
f6:f0:d2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:03 2024 by rpki-client on console-ams.rpki-client.org