Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/NVXB1FYmbDpwOidX2nALLnwUh-0.roa
File: NVXB1FYmbDpwOidX2nALLnwUh-0.roa (raw, json)
Hash identifier: bFkdJCWnl3MYQUvXH687nSe8dNC0Rlz7XaCGO3hDGWc=
Subject key identifier: 35:55:C1:D4:56:26:6C:3A:70:3A:27:57:DA:70:0B:2E:7C:14:87:ED
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 01857246CE3EA7DBA0364AE898CD514A303E
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/NVXB1FYmbDpwOidX2nALLnwUh-0.roa
Signing time: Mon 02 Jan 2023 11:38:40 +0000
ROA not before: Mon 02 Jan 2023 11:38:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59590
IP address blocks: 188.241.208.0/24 maxlen: 24
89.44.204.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ce:3e:a7:db:a0:36:4a:e8:98:cd:51:4a:30:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Jan 2 11:38:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3555c1d456266c3a703a2757da700b2e7c1487ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8e:76:58:b9:df:e1:c9:e2:04:d3:0d:95:ac:
26:f9:5a:22:90:66:03:c5:56:21:7e:c4:7a:12:80:
69:79:33:3b:e6:82:b5:2a:6d:14:fb:94:1e:6b:39:
08:6e:22:b1:2a:f9:56:01:57:52:37:42:26:d7:4a:
16:99:0b:ae:b8:ce:7e:f6:09:fd:cb:4b:70:26:0a:
ca:c0:a4:4f:b4:a7:e0:e8:1b:06:85:ce:ff:0e:e3:
1e:59:83:27:49:19:11:fe:80:cb:ee:d5:37:42:34:
d3:0a:ce:05:a1:13:ad:80:0e:ab:d0:8b:d7:8f:58:
02:87:59:77:4f:b2:a2:ff:30:47:53:91:4e:10:df:
75:23:ab:39:4e:05:2a:15:6b:9c:d8:04:ad:96:7f:
ab:2e:ad:26:c5:c4:97:3b:60:7f:42:60:5e:67:35:
8b:f7:fa:fb:3e:c7:2d:8d:ab:7f:53:f1:fb:6d:23:
65:2e:3b:76:68:c5:c2:9b:a3:52:68:1f:3f:6d:af:
79:23:c8:cb:59:eb:f3:d2:5c:88:66:e0:82:25:e1:
9b:30:72:f8:48:67:b3:6e:66:5f:7b:f9:93:df:c5:
08:bb:8a:92:26:75:e5:df:5d:27:31:15:38:47:19:
61:a8:d0:d8:19:f0:95:f5:07:3c:7f:ed:b4:af:7e:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:C1:D4:56:26:6C:3A:70:3A:27:57:DA:70:0B:2E:7C:14:87:ED
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/NVXB1FYmbDpwOidX2nALLnwUh-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.204.0/24
188.241.208.0/24
Signature Algorithm: sha256WithRSAEncryption
72:71:ba:0f:85:ba:c1:6e:ae:c6:16:2d:8f:44:6b:e0:0d:2f:
8b:43:49:74:ce:20:b5:f2:90:38:1a:ff:b8:50:01:33:e2:c4:
75:5f:be:23:c0:d8:3d:a7:2f:98:1c:b8:cf:c8:8f:5a:29:ef:
09:e4:93:bb:8f:fb:a6:52:ca:c7:7b:6a:54:77:b6:a6:95:7c:
55:e6:51:19:61:e0:1b:4c:b6:c8:c4:f0:40:7d:68:fa:33:70:
67:80:8f:2a:73:09:14:f6:2a:cd:e3:06:d2:eb:c1:5f:24:ab:
b3:c1:16:57:0b:63:d0:bc:7d:77:5d:6e:c1:f8:12:c1:6f:81:
7b:4d:e1:8a:31:d3:28:88:35:cc:ec:d3:09:5c:17:7a:f6:02:
c3:19:12:36:f2:10:6f:26:08:f6:cb:1f:89:4f:79:f9:8d:07:
9d:25:80:7d:57:0d:a1:70:f4:4a:1c:54:cb:50:c2:a3:df:25:
1d:63:3d:c4:9a:32:84:78:ac:f9:42:34:41:59:5a:c6:87:97:
cb:c3:9b:da:f1:e3:8d:98:1c:99:c9:df:0b:5f:c5:7e:87:5e:
d9:23:67:96:33:93:07:ce:06:15:f8:08:e3:95:55:cb:13:bc:
54:9b:7f:36:5c:6b:b0:69:c2:f5:e3:db:58:95:c9:ad:c1:26:
45:0a:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:39 2024 by rpki-client on console.sobornost.net