Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NkvFy1ureZEsMI0tAvkEGns9dpI.roa
File: NkvFy1ureZEsMI0tAvkEGns9dpI.roa (raw, json)
Hash identifier: rLEmQ4gre+PO5VbvK+/qX77UKAw7seBAXBte8iLhbKE=
Subject key identifier: 36:4B:C5:CB:5B:AB:79:91:2C:30:8D:2D:02:F9:04:1A:7B:3D:76:92
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01892F38429750EC1BD6F13920DF5853884F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NkvFy1ureZEsMI0tAvkEGns9dpI.roa
Signing time: Fri 07 Jul 2023 07:19:23 +0000
ROA not before: Fri 07 Jul 2023 07:19:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.208.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:38:42:97:50:ec:1b:d6:f1:39:20:df:58:53:88:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 7 07:19:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=364bc5cb5bab79912c308d2d02f9041a7b3d7692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d2:d0:1d:c8:da:9f:ec:48:2c:95:d8:65:0d:
8f:cb:89:6c:47:09:ff:9f:9e:d3:50:58:45:7e:6a:
b8:c0:3b:7b:29:9c:04:a8:72:05:38:7f:4f:0c:2d:
f3:65:38:8c:4f:fb:0f:a3:c1:c9:e7:d0:db:ae:b5:
6f:d4:b8:7a:06:a9:72:fc:e5:67:71:d1:a8:24:58:
c9:ca:7d:cd:cc:53:1d:be:70:28:25:7e:9f:7e:55:
ec:17:a5:99:40:e0:1a:c5:bf:cd:2b:f9:d0:1f:36:
86:ac:a5:82:ad:33:e0:08:33:e4:8b:85:93:e3:b0:
29:b4:00:da:b6:09:9f:cd:16:82:14:16:13:32:d9:
cc:3d:a6:b6:d8:c9:0b:67:ab:1e:45:29:af:3b:da:
1b:7c:5f:90:09:4c:96:60:98:8d:5d:88:70:c5:c2:
d1:29:f4:06:22:f0:78:95:f8:8b:4c:ed:ac:3a:c0:
aa:d9:a5:1c:e6:db:0a:4f:42:8b:d9:e3:dd:79:98:
d6:b1:43:2f:95:eb:27:4d:f1:8b:b3:43:6c:91:9c:
41:4a:88:34:20:8f:b7:f0:2b:1b:38:48:44:ad:50:
cd:73:65:d6:0c:0d:20:ec:81:b7:8f:69:cb:f8:1f:
1c:9b:c0:1b:39:cd:d8:de:ce:b0:4a:99:c5:43:e9:
54:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:4B:C5:CB:5B:AB:79:91:2C:30:8D:2D:02:F9:04:1A:7B:3D:76:92
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NkvFy1ureZEsMI0tAvkEGns9dpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.104.0/24
Signature Algorithm: sha256WithRSAEncryption
17:95:58:d4:d9:2b:26:29:a4:2b:25:2f:c9:9e:18:5a:3f:28:
7c:6f:4c:c3:66:73:77:ad:17:48:1d:4d:38:1c:41:24:e6:dc:
9e:38:ec:bf:e1:ea:e2:a2:a4:b1:94:46:f1:b5:2b:97:2f:78:
bb:a4:7d:f2:54:4a:39:b3:6a:0e:ee:c4:38:51:e2:6e:b6:fd:
46:68:8a:60:21:d8:2b:1e:22:68:5d:24:05:d0:87:5d:22:7f:
ee:1c:36:06:a6:fa:55:f2:2e:37:b2:cb:8d:a5:c1:23:1b:66:
1c:92:bb:af:8e:e7:62:12:fc:e8:cf:df:34:bb:6c:b4:e4:61:
1a:4c:ce:d2:a2:7f:34:dc:67:58:be:bc:f5:1e:9c:cf:3d:86:
73:cd:fc:01:dc:29:2c:2e:2e:d7:8c:b1:b4:0c:8a:0f:0a:c4:
ad:f7:ca:e2:14:62:3d:0b:f6:59:c9:0b:5b:19:14:ec:ba:9f:
d6:11:62:f2:ea:f8:c5:d0:8d:86:41:af:23:bb:73:5e:85:72:
39:1a:9d:be:ec:a7:d7:91:ba:6d:84:c2:8b:09:2f:4d:3d:32:
37:8a:9f:fb:7d:9b:e5:f0:05:bd:9a:1b:e0:d0:ce:e6:b7:b0:
6a:91:82:b7:86:47:49:c3:b2:55:7c:5d:87:c5:6d:58:e6:80:
be:4a:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:57 2023 by rpki-client on console.sobornost.net