Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/nkAU8fLQ6GuCqxPGGkP8WOveLJs.roa
File: nkAU8fLQ6GuCqxPGGkP8WOveLJs.roa (raw, json)
Hash identifier: wC5U+Uy/h61Q95IMfdg/TIuEsy3l6mZG/9DbAcs9f/0=
Subject key identifier: 9E:40:14:F1:F2:D0:E8:6B:82:AB:13:C6:1A:43:FC:58:EB:DE:2C:9B
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 018DEB536956CD8B20A63BE4E1F60BEB8415
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/nkAU8fLQ6GuCqxPGGkP8WOveLJs.roa
Signing time: Tue 27 Feb 2024 16:08:48 +0000
ROA not before: Tue 27 Feb 2024 16:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396356
IP address blocks: 104.232.37.0/24 maxlen: 24
185.230.120.0/24 maxlen: 24
2a0a:8f40:31::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 16:31:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:53:69:56:cd:8b:20:a6:3b:e4:e1:f6:0b:eb:84:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Feb 27 16:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e4014f1f2d0e86b82ab13c61a43fc58ebde2c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:89:eb:e4:95:bd:3e:07:57:20:2a:7a:e2:b8:
c0:af:57:cd:ea:31:9b:a0:d0:1d:1b:c9:fc:c3:cf:
15:d8:b3:e8:23:65:af:f4:72:5e:3e:10:86:46:41:
fa:6c:80:d0:51:44:e4:f0:ee:33:64:26:32:87:70:
b9:fd:07:65:8c:bf:0a:2e:21:f0:8f:75:a5:85:b2:
97:54:80:ae:ec:cd:6c:ba:ce:f0:d4:14:be:4e:3b:
95:b0:84:0a:f4:d3:66:ea:6b:85:a3:7d:97:c6:5f:
0c:f3:08:e8:5e:31:a6:e3:70:99:39:17:4e:16:93:
26:b4:bf:e9:fd:5b:d9:3a:6c:8a:4d:4b:f7:6b:93:
bb:b6:b6:8f:1e:c8:8b:85:90:39:16:bd:ad:52:72:
89:17:51:47:10:89:fb:a4:fe:46:c7:22:0c:91:48:
4d:51:01:28:4c:7e:1b:8a:63:1d:6f:8d:be:19:30:
da:73:cc:50:14:64:6e:d5:25:e8:d1:91:6e:fc:d5:
1b:5d:a8:25:f6:e5:bd:5d:3a:6a:0d:f3:8a:73:35:
67:3e:6e:a9:9e:f5:67:e7:02:e2:64:6d:0a:cc:28:
bb:ff:87:3f:6b:28:cb:db:0c:7f:0e:a0:bd:f0:9f:
f1:8e:6b:45:4f:e9:99:88:93:2b:2f:45:cb:45:82:
98:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:40:14:F1:F2:D0:E8:6B:82:AB:13:C6:1A:43:FC:58:EB:DE:2C:9B
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/nkAU8fLQ6GuCqxPGGkP8WOveLJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.232.37.0/24
185.230.120.0/24
IPv6:
2a0a:8f40:31::/48
Signature Algorithm: sha256WithRSAEncryption
7a:54:8e:52:31:9b:4e:e3:cf:cf:17:fb:f9:68:0f:3b:3c:c7:
6b:34:6a:e5:4a:19:2f:e6:04:33:7f:84:d7:9d:b4:ba:9f:3f:
be:53:1a:56:fb:f8:67:fa:3d:b4:5f:53:7f:10:0d:7e:4c:5f:
38:b3:a2:24:04:3a:65:75:e0:cc:73:b8:9e:eb:a7:90:a8:d4:
73:4e:f2:48:5e:17:95:06:a0:c3:e5:35:ac:ec:0d:ac:a7:58:
aa:02:81:fd:8a:20:e6:44:8d:07:80:c8:70:51:b0:24:a5:37:
43:e3:a5:aa:9c:44:1a:1f:5d:be:92:f5:c7:7d:e2:72:bc:08:
31:af:43:21:25:c3:a7:a7:41:a4:19:cc:db:20:aa:c5:96:b1:
14:85:9f:2f:5e:11:ae:38:5f:0a:d4:36:58:4e:1c:d7:f4:bb:
3e:f3:1f:ef:de:2b:17:85:c4:41:b2:c6:b0:a6:f4:30:4d:46:
44:f9:fe:46:8c:13:4e:cf:cc:0a:3b:ba:cf:a0:8a:79:b0:11:
7c:7a:0c:de:21:f6:73:f0:35:06:3c:81:df:11:4c:5d:3f:b3:
d9:3b:c2:c5:0b:bc:69:ab:0c:7b:37:e9:4e:45:8f:b6:77:84:
8b:12:02:95:05:93:6b:03:e3:48:99:63:f2:63:c3:21:a5:01:
69:5b:f0:15
-----BEGIN CERTIFICATE-----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Generated at Tue Feb 27 22:44:04 2024 by rpki-client on console.sobornost.net