Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/NgvjB-kdboGfgJLSO5EgnBuRuDI.roa
File: NgvjB-kdboGfgJLSO5EgnBuRuDI.roa (raw, json)
Hash identifier: 1yJQE0jyzrm67UXHx7+qeu5UDDhElbtnixT8SR617T8=
Subject key identifier: 36:0B:E3:07:E9:1D:6E:81:9F:80:92:D2:3B:91:20:9C:1B:91:B8:32
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 018B428CD19DD6EAF8E36E6C89C3F471B264
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/NgvjB-kdboGfgJLSO5EgnBuRuDI.roa
Signing time: Wed 18 Oct 2023 11:30:06 +0000
ROA not before: Wed 18 Oct 2023 11:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2914
IP address blocks: 212.68.180.0/22 maxlen: 22
212.68.188.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:8c:d1:9d:d6:ea:f8:e3:6e:6c:89:c3:f4:71:b2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Oct 18 11:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=360be307e91d6e819f8092d23b91209c1b91b832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:40:54:53:ca:cc:5a:e4:9a:57:c8:c9:82:
34:10:c8:3e:0d:ee:9a:f1:3c:53:dc:9c:a6:de:a0:
73:96:bd:2d:30:21:1e:50:85:6a:69:bf:54:07:c9:
ec:63:7b:8b:c3:b9:98:95:3c:4d:22:ed:32:5e:6d:
f7:43:4f:c3:cb:72:4d:5d:ca:d7:89:94:e9:52:af:
7f:cb:fe:d8:3f:d7:ae:5b:3b:55:03:62:a5:ef:20:
71:38:5e:90:9c:eb:95:2d:0d:6b:23:8a:d9:6d:ff:
24:4b:70:7f:47:f1:92:d3:ba:8e:fc:de:f6:01:ec:
d4:98:d0:e3:c0:aa:7c:98:23:74:5d:ef:d0:34:a3:
a5:cb:0d:74:c2:3c:39:ed:b1:6f:9f:f7:1e:fc:01:
60:b6:74:3c:6d:89:29:f7:06:99:57:ce:8c:63:57:
4d:0d:8c:ee:bb:af:4a:c6:e2:30:39:25:3f:d9:2a:
23:5b:0c:c3:f6:ea:aa:8f:59:12:5e:43:50:19:ee:
32:90:e1:64:fb:3a:6e:2a:fc:d4:53:36:fb:da:cb:
6a:fc:0d:8c:c7:df:cd:25:68:d9:79:cd:59:09:9d:
48:45:f3:7d:c2:fd:00:36:44:90:4a:e6:72:7a:bf:
7f:68:a6:c8:0e:eb:87:b0:9a:e7:b8:fd:d5:30:01:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0B:E3:07:E9:1D:6E:81:9F:80:92:D2:3B:91:20:9C:1B:91:B8:32
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/NgvjB-kdboGfgJLSO5EgnBuRuDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.68.180.0/22
212.68.188.0/22
Signature Algorithm: sha256WithRSAEncryption
87:de:c3:a4:06:4c:64:66:fe:4d:d1:f2:7a:b0:59:0e:14:1d:
ba:f7:63:57:f1:8c:ed:da:7f:f6:53:35:d7:da:b2:31:f6:7f:
eb:45:c9:1b:3f:be:d8:fb:f4:c1:a9:fd:3b:b3:d4:88:a9:e4:
56:99:6a:60:4b:1b:eb:77:f2:8d:83:cd:49:bf:6f:00:65:e4:
72:9e:58:9f:80:13:3d:73:4e:c6:96:30:e6:31:7d:55:43:13:
ba:e2:a7:70:25:20:54:b7:9c:8f:98:22:5b:ce:12:8a:e2:73:
80:9c:8d:1b:71:b9:21:c9:f8:1b:86:f4:91:d0:52:ee:ac:b9:
ed:0c:26:59:d6:16:f7:f5:e4:f4:3f:7a:91:78:05:06:7f:41:
25:1b:9d:18:00:30:04:96:47:52:67:9f:ca:71:f5:9f:5d:43:
fa:ad:f6:54:5a:b7:3b:17:a5:78:3b:54:41:54:24:51:b0:f6:
d4:b3:d0:fc:1b:0c:12:8d:d0:07:4c:16:b6:99:75:5a:39:e2:
64:da:12:11:35:98:f1:ff:ce:b6:19:2b:85:1a:db:fd:01:6a:
51:b4:67:01:fa:83:f9:28:0e:8e:1f:46:90:c6:8e:da:75:82:
5b:57:22:85:91:0f:28:5b:12:59:2b:6d:e5:0e:51:0c:6d:86:
4b:1a:c2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:19 2023 by rpki-client on console.sobornost.net