Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/oursNRIDlO3tdMBmnPfYob7Yf9o.roa
File: oursNRIDlO3tdMBmnPfYob7Yf9o.roa (raw, json)
Hash identifier: BuZaua/Mvp0+kFYxZmefBACbswCMjrbF8YyMcaNRrVE=
Subject key identifier: A2:EA:EC:35:12:03:94:ED:ED:74:C0:66:9C:F7:D8:A1:BE:D8:7F:DA
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018EA8792D34A26E601E99A5086BC4A3735D
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/oursNRIDlO3tdMBmnPfYob7Yf9o.roa
Signing time: Thu 04 Apr 2024 09:38:17 +0000
ROA not before: Thu 04 Apr 2024 09:38:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215179
IP address blocks: 94.125.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 08:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:79:2d:34:a2:6e:60:1e:99:a5:08:6b:c4:a3:73:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Apr 4 09:38:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2eaec35120394eded74c0669cf7d8a1bed87fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:a7:78:34:d9:85:dd:50:b6:84:82:51:39:
fd:af:16:81:e1:ab:15:9f:9c:b0:2f:ef:b2:c0:16:
8f:e6:4c:13:10:6c:e6:b3:99:57:7c:90:06:6d:e2:
21:35:f7:2f:fc:3e:59:e5:32:ab:36:b5:ac:e8:97:
5f:a4:25:5c:90:f0:13:09:0b:29:a2:6a:6a:ff:6d:
1f:19:45:41:a5:3e:55:3a:3e:7b:27:4d:4d:b5:ca:
eb:e2:ac:bb:bc:a9:84:a6:96:48:c5:9d:91:13:8b:
3b:4b:6e:05:5e:59:bb:92:f9:29:73:69:21:c8:34:
66:83:92:d8:4f:21:15:f1:67:e7:38:b6:91:cb:15:
94:fb:1e:d1:a5:b2:47:56:6f:a6:62:fc:07:5c:a8:
ef:d9:be:4b:8e:60:6f:e2:3e:14:ef:ab:f9:79:07:
6a:c4:f1:f5:16:b3:89:22:db:cb:18:fd:73:f3:cd:
f2:d8:08:40:9e:82:be:2a:87:f6:16:81:ac:45:7c:
54:f5:8a:33:4a:e0:0d:c5:d5:49:fb:bb:0d:5b:a0:
d9:f5:0d:6c:38:6d:87:a9:14:ab:6d:b3:1a:a4:eb:
5a:62:7e:68:88:c8:f6:5e:ce:f1:e3:68:15:4d:eb:
48:74:ab:e7:fa:68:ed:8a:f2:f5:2d:ef:2a:dc:20:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EA:EC:35:12:03:94:ED:ED:74:C0:66:9C:F7:D8:A1:BE:D8:7F:DA
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/oursNRIDlO3tdMBmnPfYob7Yf9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.14.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e9:10:58:0e:db:63:51:60:52:8a:a5:79:f2:09:b3:90:28:
79:b1:c9:3f:41:0b:ba:a3:13:2e:45:e2:98:76:23:29:95:1b:
a4:62:d6:98:0c:6a:ed:b8:88:22:a4:79:07:98:99:12:7f:a7:
68:b5:bb:1c:8e:77:14:69:5e:f0:ed:3f:6f:8e:d3:33:97:85:
fd:aa:53:2f:f4:a8:57:f4:89:0c:27:5f:01:00:58:52:c3:67:
0d:0d:19:bc:1f:73:64:eb:16:d5:09:8b:c8:98:2f:71:6d:f2:
d8:ef:9b:d6:41:80:24:c8:95:55:29:df:ab:10:79:81:cd:eb:
aa:ca:8d:61:ff:cc:53:26:08:55:fc:0e:21:60:c7:7e:9b:96:
6b:43:dd:47:fb:8d:60:e2:36:15:1f:e9:cc:35:96:11:d3:a9:
41:b7:91:67:1c:3d:a7:7f:a2:99:af:96:34:f2:56:f6:31:71:
02:18:b6:d0:15:70:29:08:77:61:7c:62:27:e0:cd:18:1c:d4:
45:9b:b2:5d:3f:f8:24:ff:11:f4:dd:ce:46:e8:a6:4c:8d:90:
d3:af:ee:9b:27:ce:b8:12:a5:23:7b:1b:dc:0b:38:fe:7c:23:
4e:0d:bc:47:73:a6:da:aa:69:b3:de:4a:6e:cd:ac:67:6b:db:
f3:0e:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 10 12:50:59 2024 by rpki-client on console.sobornost.net