Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nzm6tilQn4DnMvV-ddtDmqm8ftA.roa
File: nzm6tilQn4DnMvV-ddtDmqm8ftA.roa (raw, json)
Hash identifier: lM7WbkU9eSx2WOKMsyNSAR8yRCJvvne4Ct+0LMJ7d28=
Subject key identifier: 9F:39:BA:B6:29:50:9F:80:E7:32:F5:7E:75:DB:43:9A:A9:BC:7E:D0
Certificate issuer: /CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Certificate serial: 0185E76ACA486FA73AAFF1BB640E2A98E5A3
Authority key identifier: 9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nzm6tilQn4DnMvV-ddtDmqm8ftA.roa
Signing time: Wed 25 Jan 2023 05:33:33 +0000
ROA not before: Wed 25 Jan 2023 05:33:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44462
IP address blocks: 185.178.0.0/22 maxlen: 24
81.21.112.0/20 maxlen: 24
2a0a:4d80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:6a:ca:48:6f:a7:3a:af:f1:bb:64:0e:2a:98:e5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f24064f95331cf1f315dc50de4db05ff95aa410
Validity
Not Before: Jan 25 05:33:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f39bab629509f80e732f57e75db439aa9bc7ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:d4:f4:8d:27:20:dc:35:82:cd:19:86:4b:
88:e7:c0:c6:a5:d1:55:d5:c7:55:fc:0f:10:a2:f8:
a6:31:0f:a7:1d:45:fc:fb:dc:6b:53:4d:a7:6d:62:
60:cf:f7:a3:4d:02:76:50:b9:30:b4:20:15:33:5b:
4f:c8:1e:af:5c:29:3b:93:8a:ce:65:6c:eb:7f:e7:
c1:37:90:07:8c:ca:f8:8e:a3:af:02:a8:75:ea:b2:
b5:e0:3a:24:43:c3:2b:fd:6d:c4:cf:3e:05:61:9c:
e8:47:42:f2:1c:a9:6f:54:13:67:67:ba:33:c5:a6:
09:de:7c:02:56:9d:e2:15:63:03:e5:43:bd:3c:6f:
2f:66:f8:88:80:d6:81:47:26:9e:51:8f:b3:f9:d8:
24:65:6a:88:98:d4:31:f7:73:77:4d:d6:e3:9a:f1:
88:58:e4:33:34:3c:a7:11:bd:a8:9a:ed:f7:66:76:
6c:0b:b8:a8:66:25:39:ae:75:f1:d0:d3:4f:9e:0b:
4c:e0:f9:d2:80:cf:f5:38:c6:6c:c6:11:25:2b:0e:
95:4e:9a:14:f2:eb:3d:94:ee:77:d3:85:f8:6d:ca:
d2:0d:9e:30:c9:89:85:3b:b2:b2:50:97:70:f4:8b:
e5:71:7f:fd:6f:72:e1:d8:2f:89:45:37:f5:b2:fd:
2b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:39:BA:B6:29:50:9F:80:E7:32:F5:7E:75:DB:43:9A:A9:BC:7E:D0
X509v3 Authority Key Identifier:
keyid:9F:24:06:4F:95:33:1C:F1:F3:15:DC:50:DE:4D:B0:5F:F9:5A:A4:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nyQGT5UzHPHzFdxQ3k2wX_lapBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nzm6tilQn4DnMvV-ddtDmqm8ftA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/40079b-fcaa-46d9-8161-66a6c80d26a5/1/nyQGT5UzHPHzFdxQ3k2wX_lapBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.112.0/20
185.178.0.0/22
IPv6:
2a0a:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
61:a7:6d:58:2c:af:61:09:35:79:08:10:d5:dc:24:fc:be:fb:
35:40:83:4e:d5:fa:0e:66:67:f8:9b:f3:36:c0:52:19:d6:cf:
c0:3d:be:2f:27:2f:f7:e1:b2:68:eb:62:e5:db:2f:10:3b:d3:
fa:ad:92:c3:d1:2a:36:0e:4b:e7:64:8d:5d:0b:e7:82:a6:6f:
ee:f5:dd:e2:0f:3a:08:77:ed:c0:a4:7d:41:64:bc:60:51:14:
77:63:10:53:3a:32:01:b1:7c:07:7d:41:a8:08:f8:b5:ce:01:
9e:b3:5b:49:b2:ca:88:62:be:b1:ed:8c:06:6e:e3:01:e7:6f:
40:5a:42:42:fe:27:78:5b:90:3b:77:b8:80:02:1c:b7:f6:7a:
52:d9:dd:e6:c6:da:41:02:54:d3:a5:31:45:d0:69:03:87:9c:
d2:c4:0b:b9:3f:3a:51:98:fb:1d:29:d4:69:49:ee:23:92:3b:
fa:d5:7a:a9:dd:e2:db:0d:e4:97:df:5e:ce:89:8d:cf:4d:e0:
10:a6:8e:7e:ae:9e:70:80:2f:ba:bb:21:20:d6:54:bb:70:db:
4d:bd:d6:17:4f:84:d0:02:85:a0:93:dd:34:cf:e3:65:8b:45:
06:fb:d4:c4:e4:f6:16:8e:e4:3b:67:e2:fa:c4:e1:a3:67:b2:
c5:bc:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:08 2024 by rpki-client on console-ams.rpki-client.org