Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/nzMY1Ip_P3dIOhuM-TA1lnqsGFo.roa
File: nzMY1Ip_P3dIOhuM-TA1lnqsGFo.roa (raw, json)
Hash identifier: RBCOXH5qFBr9oEM5L+P1TW6Siv1J6tu3V12uaAFC9Q8=
Subject key identifier: 9F:33:18:D4:8A:7F:3F:77:48:3A:1B:8C:F9:30:35:96:7A:AC:18:5A
Certificate issuer: /CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Certificate serial: 01856F949B2328A9FA0041C930F8B8262D2B
Authority key identifier: 29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/nzMY1Ip_P3dIOhuM-TA1lnqsGFo.roa
Signing time: Sun 01 Jan 2023 23:04:48 +0000
ROA not before: Sun 01 Jan 2023 23:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12389
IP address blocks: 185.134.120.0/24 maxlen: 32
83.217.10.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:9b:23:28:a9:fa:00:41:c9:30:f8:b8:26:2d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2940b694bba095344e4bdb99f51e1f1023be57ce
Validity
Not Before: Jan 1 23:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f3318d48a7f3f77483a1b8cf93035967aac185a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:cb:0c:68:7f:3e:a4:f1:60:1d:0d:b6:ab:
0a:fc:75:28:d6:0b:2e:9a:ff:ac:66:fb:82:d0:54:
e7:34:ee:cb:a0:5c:7e:71:a2:87:f5:96:61:0a:51:
aa:dc:b9:86:bf:70:19:2f:3d:03:e3:36:05:9c:39:
01:27:1f:54:91:4d:71:a1:a8:97:88:8f:f2:cf:6f:
05:7c:37:ae:b5:a6:2f:9e:aa:a5:44:d1:aa:b7:08:
82:15:54:50:84:76:ca:3e:45:88:de:07:8e:29:ff:
91:a0:0d:bf:21:3d:9b:13:8a:d7:af:83:62:5e:8f:
c9:cd:9f:f9:48:8b:43:cb:47:d5:82:b0:c7:55:e8:
1a:99:a4:3e:13:d2:2b:d0:e2:2b:96:59:ad:84:67:
92:be:70:46:85:8a:8c:72:b0:34:c4:c7:c6:d4:b1:
38:3b:93:fd:d9:ae:c0:7a:1a:74:df:f0:6d:63:70:
48:37:d1:1c:40:c6:10:af:d8:a9:d3:d7:90:5a:a3:
d5:1f:e8:3a:d7:ca:cc:22:53:05:65:4b:56:14:2a:
bb:d6:68:a3:8f:dc:d5:1d:16:03:f7:47:04:34:18:
09:02:49:d6:c0:22:58:7b:11:9f:58:46:04:77:c6:
53:63:b1:6e:fe:3e:e7:aa:50:11:4a:e7:c2:14:3c:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:33:18:D4:8A:7F:3F:77:48:3A:1B:8C:F9:30:35:96:7A:AC:18:5A
X509v3 Authority Key Identifier:
keyid:29:40:B6:94:BB:A0:95:34:4E:4B:DB:99:F5:1E:1F:10:23:BE:57:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUC2lLuglTROS9uZ9R4fECO-V84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/nzMY1Ip_P3dIOhuM-TA1lnqsGFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6107e4-4393-4cbe-a6c2-27c1a35976de/1/KUC2lLuglTROS9uZ9R4fECO-V84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.217.10.0/24
185.134.120.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:36:7d:fb:17:34:56:14:19:5c:5f:59:08:a9:3e:41:da:e3:
7e:75:16:6a:aa:ad:96:90:70:ef:c4:58:34:7a:50:34:a8:e5:
7f:c2:86:0d:0e:19:b4:04:41:9c:0f:2f:7b:07:ab:a3:02:a5:
13:b2:78:d0:c4:de:9d:2d:bb:13:ff:e3:9f:e7:f1:06:fc:83:
da:6f:65:38:23:50:ef:1c:63:97:e1:6f:07:ef:8d:5e:7c:32:
30:a6:3e:b8:5e:df:1f:e8:6a:c6:7b:23:de:9d:f0:ab:3b:21:
94:d3:43:5b:33:2a:b5:f1:0c:58:ad:89:f5:f7:72:01:28:4f:
eb:58:e7:bb:ab:a6:61:5b:ef:11:fa:f3:28:45:db:4d:12:b8:
19:15:3a:74:9e:95:8e:00:e4:11:83:2b:ca:ec:ad:c1:3b:fe:
ec:10:dd:a9:8c:88:ca:25:e1:94:e1:3e:61:d0:99:2f:81:70:
9c:b4:dd:14:fe:b6:d7:3f:e1:e0:1c:82:c9:a1:74:de:ac:d2:
3d:07:bb:2e:f3:39:dd:a3:19:7a:cf:65:d6:8c:71:1b:1c:73:
d7:09:d1:a6:12:3f:f0:3d:37:97:2b:dd:f3:a9:40:a6:85:38:
82:e1:b2:00:12:20:9b:a0:26:b8:fa:b9:f8:32:be:4b:40:bd:
24:77:61:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:32 2024 by rpki-client on console-fra.rpki-client.org