Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/nnEB7XKqnzf7Yge1DcTYWTuPmcc.roa
File: nnEB7XKqnzf7Yge1DcTYWTuPmcc.roa (raw, json)
Hash identifier: /Tec07NLdPKrWsiuOKR65Mh0WDTAcPvgiS/ernBy2JQ=
Subject key identifier: 9E:71:01:ED:72:AA:9F:37:FB:62:07:B5:0D:C4:D8:59:3B:8F:99:C7
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 0189947163FC34B56DB86ACDBEBAF2EAEE6C
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/nnEB7XKqnzf7Yge1DcTYWTuPmcc.roa
Signing time: Wed 26 Jul 2023 23:03:26 +0000
ROA not before: Wed 26 Jul 2023 23:03:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.0.0/17 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:94:71:63:fc:34:b5:6d:b8:6a:cd:be:ba:f2:ea:ee:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jul 26 23:03:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e7101ed72aa9f37fb6207b50dc4d8593b8f99c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:22:02:74:99:7f:9d:a6:9e:f9:11:f2:bc:
2a:a3:eb:e5:ce:61:f7:a5:13:3e:59:2e:04:f0:6e:
a5:e4:0e:15:d8:05:eb:c0:11:9c:32:e2:bc:19:b2:
7f:0b:68:80:8f:88:8d:eb:22:43:4a:a6:14:42:14:
d1:34:cb:b9:d6:ea:08:cd:b7:d9:41:06:83:87:41:
c9:ec:99:d5:d6:a3:45:1f:38:8f:ec:b9:8b:77:3e:
e0:97:7c:30:ff:7c:dc:47:49:7b:1f:69:63:ad:50:
d8:52:33:aa:60:3d:08:d4:29:19:a7:74:87:5a:ba:
37:57:99:d4:d8:d6:37:df:a8:b8:de:e6:22:fd:ca:
3b:c5:72:6d:2a:3b:c4:ea:0e:0f:d9:58:89:ff:bf:
a3:fd:30:b9:64:b5:4b:31:86:6c:f1:3e:14:8b:b5:
f7:07:a4:c8:7b:ff:af:d4:c8:3f:04:5a:29:12:fa:
b0:68:45:48:88:c2:e1:d7:16:2d:39:cd:97:d4:9a:
28:cf:02:df:9d:50:a5:eb:ae:82:f4:e0:89:e2:2a:
41:5b:9e:22:8e:6f:cd:b5:f5:36:ab:1b:66:94:a7:
41:7f:9b:f2:b4:a7:64:c2:51:0c:e4:fd:f8:70:1d:
d8:96:22:a2:f9:ff:b4:1a:e7:f8:8a:63:49:57:cb:
29:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:71:01:ED:72:AA:9F:37:FB:62:07:B5:0D:C4:D8:59:3B:8F:99:C7
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/nnEB7XKqnzf7Yge1DcTYWTuPmcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.0.0/17
Signature Algorithm: sha256WithRSAEncryption
93:fa:11:f3:a0:c4:3e:27:04:ad:a6:94:ea:d4:0f:9d:c7:b3:
78:b3:6e:44:53:8b:89:88:39:d7:e5:c9:3a:80:75:8b:74:2a:
ce:cb:71:09:b6:0f:e2:1e:27:83:ed:93:cd:4e:36:d9:41:6c:
1a:f5:c6:e5:20:8e:44:fb:e8:59:f4:f2:5d:71:43:38:6e:7e:
dd:61:8f:3b:d2:b7:37:db:42:73:5f:6a:4c:4e:4e:5e:26:c4:
cc:74:a6:0e:46:66:b8:fb:f2:2d:f6:73:1b:b5:4b:e8:84:2f:
67:e3:58:92:ca:01:8d:a2:d2:5c:78:84:ca:e4:08:3e:b6:92:
eb:87:93:42:5a:6a:ea:e4:d8:d2:fa:c6:7a:44:70:3e:25:d1:
bb:66:5f:dc:35:52:86:b3:18:d6:74:03:cc:50:74:d3:f1:4c:
13:5e:05:83:57:ff:73:cb:1f:9f:c5:39:9a:79:54:b9:72:e6:
c2:57:c6:97:e6:bf:21:97:5d:0a:62:0b:a8:39:d4:93:5e:f8:
48:d4:b7:21:61:e8:60:fe:61:d8:1d:33:bd:6a:ed:6b:62:b1:
ca:51:71:b9:bd:f4:af:95:30:02:0c:3f:fd:10:e7:b7:75:84:
e2:86:77:3c:b1:9b:2a:c8:57:b1:04:8c:2c:c2:e4:33:6b:6a:
33:f1:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net