Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/NOhnSbJA_8rkm-t0tGoQctNA2oM.roa
File: NOhnSbJA_8rkm-t0tGoQctNA2oM.roa (raw, json)
Hash identifier: Yj/54VNvrBdYk8Motb9zsrhsML91pQ9kUDCTkShTGB4=
Subject key identifier: 34:E8:67:49:B2:40:FF:CA:E4:9B:EB:74:B4:6A:10:72:D3:40:DA:83
Certificate issuer: /CN=810af00225106b2096e9b21d9ac2f2040688dea2
Certificate serial: 018793FECAE7090ED621E0B7020DEE2E5870
Authority key identifier: 81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/NOhnSbJA_8rkm-t0tGoQctNA2oM.roa
Signing time: Tue 18 Apr 2023 10:52:41 +0000
ROA not before: Tue 18 Apr 2023 10:52:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56468
IP address blocks: 87.120.100.0/22 maxlen: 22
93.187.110.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:fe:ca:e7:09:0e:d6:21:e0:b7:02:0d:ee:2e:58:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=810af00225106b2096e9b21d9ac2f2040688dea2
Validity
Not Before: Apr 18 10:52:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34e86749b240ffcae49beb74b46a1072d340da83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:c3:70:5d:5f:73:ba:6d:af:3f:43:54:72:
cc:55:99:06:6e:28:4c:01:02:92:0e:d8:2d:33:29:
a8:fc:17:13:ff:d9:d9:63:7e:55:27:54:f3:fb:0b:
b3:ad:65:5b:84:6c:7e:78:ff:20:5c:e7:27:f7:f7:
7d:6c:22:a6:62:3e:70:dd:0a:d6:23:a3:38:18:b4:
79:5c:50:a8:42:98:4c:03:4e:c0:b0:cc:35:56:7f:
a7:e7:37:a8:eb:b4:e0:45:d9:42:dc:14:1b:fc:33:
1d:37:84:cf:8b:26:83:02:0a:46:05:90:59:9d:ab:
f5:f4:af:c2:f9:a4:f6:4b:8e:31:f7:ec:e3:8c:68:
28:e7:87:84:e1:11:f1:75:e8:ad:5c:c8:ab:63:10:
4f:f3:0e:b4:0b:9b:2c:a9:12:93:cf:9c:c6:62:b9:
34:c0:a5:f7:94:f2:dd:f0:e2:a7:bc:ee:63:74:ac:
b1:2e:6b:bf:be:4e:73:73:64:f8:2f:05:c1:1f:13:
64:fa:4e:4e:c0:f8:e9:23:36:90:f3:98:9c:4a:83:
83:af:1f:1d:ab:60:5b:60:0e:dc:a5:c5:79:48:15:
c8:1e:7b:ac:ee:b0:c9:4e:68:b5:c9:77:05:3e:0d:
d8:60:f8:2a:b1:2b:9c:dc:b9:05:c5:d5:46:4f:08:
79:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E8:67:49:B2:40:FF:CA:E4:9B:EB:74:B4:6A:10:72:D3:40:DA:83
X509v3 Authority Key Identifier:
keyid:81:0A:F0:02:25:10:6B:20:96:E9:B2:1D:9A:C2:F2:04:06:88:DE:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQrwAiUQayCW6bIdmsLyBAaI3qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/NOhnSbJA_8rkm-t0tGoQctNA2oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/442a9b-9ed7-493d-83f3-3ca488deee89/1/gQrwAiUQayCW6bIdmsLyBAaI3qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.100.0/22
93.187.110.0/24
Signature Algorithm: sha256WithRSAEncryption
76:de:9f:45:6b:ff:fd:df:af:56:2f:85:d4:df:20:b9:35:30:
a3:2f:a6:7e:7d:ba:4b:4d:73:2d:0e:5e:34:fa:67:fb:91:7f:
00:1e:79:57:26:92:ff:6a:da:f1:ed:b9:aa:63:a0:3f:e1:1f:
97:e6:9a:74:c7:7c:92:27:bf:2f:d5:21:cd:24:26:9b:c5:6f:
5f:ab:88:a4:9d:f8:12:c0:8b:1f:8a:2c:37:76:fd:ae:65:6b:
ef:c4:5b:03:6a:66:41:52:21:be:cb:a8:12:86:3e:7d:88:fc:
1e:27:6a:b6:a1:bf:3a:9e:40:df:9e:56:54:7b:10:e2:cc:24:
1a:aa:64:90:94:0f:fc:3b:0e:a4:b7:27:7f:47:f7:95:f2:25:
43:08:9d:76:23:6f:c1:51:eb:1d:72:44:e9:e7:ae:e3:ed:9c:
c4:30:52:00:f7:e9:46:57:6a:26:35:e1:22:f9:40:b3:fa:e5:
70:36:30:cf:81:4c:62:44:e7:77:e1:ce:a6:7e:bc:81:bc:7e:
6c:b6:03:08:75:94:bb:a9:b2:90:06:aa:10:29:84:9a:b0:7d:
d3:34:b0:af:9a:fc:9a:2f:d3:1e:7c:87:55:a1:47:29:2b:5f:
cf:81:af:51:c9:51:20:d1:65:79:67:c7:ab:c2:03:f7:99:b1:
b9:a9:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:31 2023 by rpki-client on console.sobornost.net