Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/Nn7wlTto_oOv3rXXDciadVEwobk.roa
File: Nn7wlTto_oOv3rXXDciadVEwobk.roa (raw, json)
Hash identifier: X5MMr299GjEZ8rUj+ivpa9hxdYNn/TKFTz2kJyl9DqU=
Subject key identifier: 36:7E:F0:95:3B:68:FE:83:AF:DE:B5:D7:0D:C8:9A:75:51:30:A1:B9
Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Certificate serial: 018CC50055BE0F43E9B1FCE9C2794C1556B9
Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/Nn7wlTto_oOv3rXXDciadVEwobk.roa
Signing time: Mon 01 Jan 2024 12:29:42 +0000
ROA not before: Mon 01 Jan 2024 12:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51264
IP address blocks: 91.228.218.0/24 maxlen: 24
194.0.206.0/24 maxlen: 24
194.143.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 14:50:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:55:be:0f:43:e9:b1:fc:e9:c2:79:4c:15:56:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3
Validity
Not Before: Jan 1 12:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=367ef0953b68fe83afdeb5d70dc89a755130a1b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fa:c7:22:bb:c2:39:c1:e7:db:86:b6:4e:b3:
a5:1e:22:7d:0a:21:2a:ad:57:b5:c4:26:56:0b:2b:
5e:d8:4d:19:4a:13:09:3f:0d:8a:76:58:b5:5a:c3:
95:0c:58:21:02:e8:00:20:41:23:a2:6c:ad:09:38:
13:e5:53:fb:4a:bb:70:51:d0:20:58:e5:17:48:04:
90:bf:2e:d8:25:46:ff:6b:02:e3:24:f4:5a:34:a2:
aa:c5:d7:17:b8:8d:4a:eb:aa:c4:93:97:17:5f:0c:
bd:d6:fa:c4:31:47:a3:4b:d4:92:41:01:bc:eb:5e:
c5:74:06:e4:29:95:dd:09:17:4f:a6:0e:c6:23:83:
bc:4b:f6:ab:e1:df:e7:b1:ec:5a:98:ea:e4:51:7b:
bf:0e:61:7c:a7:e9:ab:e0:22:97:19:e6:21:92:da:
d0:41:9a:8a:d5:50:17:c1:3f:3d:5e:86:1e:1c:6c:
e5:25:86:a8:b2:d8:8c:1e:a7:b1:40:83:68:dc:d4:
e3:98:c7:ef:8b:90:86:72:ea:fb:6e:9f:8c:f4:25:
69:5e:9a:bc:be:95:fb:48:b2:98:e3:48:0b:01:3a:
ea:e9:52:0f:cf:8d:1c:df:de:63:33:19:a6:3a:18:
f0:d0:1e:2a:38:e2:3b:ed:48:1f:52:e5:e7:26:37:
20:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7E:F0:95:3B:68:FE:83:AF:DE:B5:D7:0D:C8:9A:75:51:30:A1:B9
X509v3 Authority Key Identifier:
keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/Nn7wlTto_oOv3rXXDciadVEwobk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.218.0/24
194.0.206.0/24
194.143.146.0/24
Signature Algorithm: sha256WithRSAEncryption
24:43:fc:36:ed:52:74:f0:49:11:1c:7a:6a:0e:ce:c7:d9:e9:
c6:36:02:30:a4:e9:22:eb:99:82:c3:28:1b:bd:ba:09:5d:fe:
93:b3:05:32:11:80:61:90:b2:5b:8a:d0:8d:5a:27:c5:2d:5c:
c4:c6:20:eb:87:bd:a5:f1:ff:b5:dc:a9:d5:db:74:02:5e:ad:
c1:82:f3:6b:eb:36:e6:75:ef:af:6f:d7:90:54:f2:20:0f:81:
79:8a:23:f1:ba:9a:9a:d8:0d:aa:ba:02:b7:35:b6:5b:28:b3:
8f:7b:7b:c8:77:b4:e4:a1:6a:a8:fc:96:95:fd:46:45:fe:d8:
71:1e:3f:d8:53:30:47:9d:cb:88:56:ad:cb:4e:bb:91:81:3d:
3f:da:44:b0:23:d6:49:1a:c2:1f:17:40:a0:24:5c:a9:2d:5e:
53:bc:0b:92:02:1d:aa:3d:70:90:89:fb:0d:d7:04:ca:ec:6a:
9e:63:72:97:b6:cb:0f:a9:ed:08:42:4e:71:a9:49:b5:6a:37:
18:14:38:6f:81:f7:db:5f:42:76:c4:11:89:08:03:90:8f:e0:
0a:4a:ef:3b:dd:53:97:d8:d5:38:fe:79:1b:be:66:a7:2f:6d:
49:02:b0:51:07:11:e7:54:2f:c9:1b:67:3c:b4:e2:02:8c:24:
d1:6c:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:43 2024 by rpki-client on console-fra.rpki-client.org