Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Nh0DdcW26PbNYFwgPhlXqSSjWlg.roa
File: Nh0DdcW26PbNYFwgPhlXqSSjWlg.roa (raw, json)
Hash identifier: jUEoDiRYOJMKukLMKvr9Yo8OzBcO61lTwwax7fv3Q3Y=
Subject key identifier: 36:1D:03:75:C5:B6:E8:F6:CD:60:5C:20:3E:19:57:A9:24:A3:5A:58
Certificate issuer: /CN=27321078f359d7990276dabb0f8c30070e685963
Certificate serial: 01856FF04044CA388F5E8C2DA968CA844287
Authority key identifier: 27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Nh0DdcW26PbNYFwgPhlXqSSjWlg.roa
Signing time: Mon 02 Jan 2023 00:44:54 +0000
ROA not before: Mon 02 Jan 2023 00:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212438
IP address blocks: 185.179.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:40:44:ca:38:8f:5e:8c:2d:a9:68:ca:84:42:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27321078f359d7990276dabb0f8c30070e685963
Validity
Not Before: Jan 2 00:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=361d0375c5b6e8f6cd605c203e1957a924a35a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:e8:66:6b:b7:71:6f:37:7c:ad:7c:74:bd:
23:fb:85:82:9c:95:6f:4f:b6:d1:85:2c:14:11:8e:
83:e5:ff:45:2b:35:dd:05:51:4f:a0:0e:53:a9:93:
ae:3e:ff:ac:47:9a:e9:cf:7b:e5:02:a1:bf:5d:32:
e2:eb:0e:c7:2a:27:59:c4:67:a5:3b:e5:a5:c4:5c:
9e:83:b7:f2:82:b7:bc:71:6f:a6:4a:c3:72:f5:5a:
d5:85:80:60:36:04:bb:e6:04:6c:6a:55:e0:ca:45:
6c:b6:53:65:85:a5:0a:ef:89:03:8f:cd:42:20:54:
3b:80:0b:b1:05:13:58:32:cd:85:31:bf:bd:e6:38:
e5:15:8d:dc:31:5f:05:52:c7:0f:a3:1c:84:d6:74:
17:23:41:ab:aa:fa:1b:4b:5a:aa:8a:02:ca:4b:5a:
f5:d8:49:21:5b:08:48:44:10:23:43:f7:12:9a:9e:
ac:55:4a:31:33:72:fd:35:b9:8f:f7:6f:54:0d:a0:
9c:e5:04:30:82:8d:3e:e2:59:43:72:1e:b3:93:12:
2b:f8:ec:bd:39:36:9f:03:eb:99:1d:33:97:d2:4a:
6d:5b:bd:5f:e8:a1:60:11:74:57:39:69:5a:6a:c6:
50:a3:f2:17:59:19:a2:95:b1:2a:4d:fa:f1:b9:2c:
10:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1D:03:75:C5:B6:E8:F6:CD:60:5C:20:3E:19:57:A9:24:A3:5A:58
X509v3 Authority Key Identifier:
keyid:27:32:10:78:F3:59:D7:99:02:76:DA:BB:0F:8C:30:07:0E:68:59:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JzIQePNZ15kCdtq7D4wwBw5oWWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/Nh0DdcW26PbNYFwgPhlXqSSjWlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/eb27f2-e369-4b07-8d1d-c3431d320406/1/JzIQePNZ15kCdtq7D4wwBw5oWWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.213.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ef:46:86:c7:a6:9c:d4:64:15:c2:76:e5:d7:e4:79:2e:e5:
e8:09:b4:55:29:16:5a:ae:2b:2c:ac:c2:17:a9:c6:cf:07:71:
5f:80:f5:4f:8a:c3:c5:9e:6f:62:cc:48:f8:43:06:c9:da:9c:
c8:e7:d9:e5:b1:92:4c:af:4f:11:36:ce:a7:04:ba:91:04:3a:
9d:94:ed:4a:22:00:ea:d5:75:3b:56:ef:4e:66:d1:34:36:26:
20:20:c5:93:fe:7b:b2:48:3e:0e:cc:da:d3:1a:23:a7:07:9e:
73:f7:ef:e3:d0:f7:1e:5f:e4:e2:2d:0b:a6:99:77:44:c2:fc:
a3:67:83:93:2a:f3:b4:4f:d0:7a:8c:c3:e7:99:6d:8e:a4:62:
82:0c:fa:64:04:41:5a:8a:d3:58:6f:84:b1:ae:4f:51:b0:3d:
e5:e7:a8:f3:c7:a4:85:4a:91:96:8c:9e:e3:f5:c7:ab:6a:28:
50:12:a3:2f:fe:58:2d:dd:5c:09:d4:a1:dc:e2:69:b4:9c:bd:
f7:5c:22:c7:30:20:1c:11:06:d9:98:10:d0:6f:47:72:48:09:
9f:db:ec:09:cd:1b:f1:6b:7a:e8:2e:10:17:2a:aa:a9:34:1d:
35:2f:d4:a0:69:74:a4:52:68:0f:fa:30:be:cf:4c:f9:e8:af:
b0:c2:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:15 2024 by rpki-client on console.sobornost.net