Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n4pdAprNCz6bo-17druN3rXgz88.roa
File: n4pdAprNCz6bo-17druN3rXgz88.roa (raw, json)
Hash identifier: gh0zLP8vbyrCIT7cvouvUZn0UDu8EbORoYBDhrF1nDw=
Subject key identifier: 9F:8A:5D:02:9A:CD:0B:3E:9B:A3:ED:7B:76:BB:8D:DE:B5:E0:CF:CF
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EBD368DE0623F2AE461A8FFAC629138DD
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n4pdAprNCz6bo-17druN3rXgz88.roa
Signing time: Mon 08 Apr 2024 10:17:32 +0000
ROA not before: Mon 08 Apr 2024 10:17:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25515
IP address blocks: 185.141.236.0/23 maxlen: 23
217.107.96.0/21 maxlen: 21
217.107.104.0/23 maxlen: 23
2a00:56c0:40d::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Apr 2024 06:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:36:8d:e0:62:3f:2a:e4:61:a8:ff:ac:62:91:38:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 8 10:17:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f8a5d029acd0b3e9ba3ed7b76bb8ddeb5e0cfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:30:13:96:f2:1b:46:6e:7b:e7:9e:76:37:69:
7f:45:56:3f:b3:e8:bf:c8:8e:43:67:88:ba:3b:86:
2e:a6:0e:aa:2a:4e:54:c1:00:f3:c1:b1:75:36:a5:
9c:7d:60:86:06:ea:07:9c:7c:f0:12:31:0a:34:d4:
7a:15:c5:f8:23:a7:2c:95:be:24:24:b8:41:5d:25:
46:62:64:01:01:02:51:52:48:a0:03:d9:f4:6f:22:
fa:c4:b2:85:8b:f2:d2:25:ed:11:06:1e:53:cc:c8:
33:e9:a7:ee:b0:ee:1a:45:0d:3e:7f:2f:fe:36:de:
8f:88:73:f0:01:92:e9:65:37:cf:18:1a:17:dc:60:
85:f8:0d:5b:39:6f:d0:25:d8:a5:a3:a0:8e:be:fb:
c2:1b:13:3c:06:23:5b:e4:42:a8:0b:19:bf:9f:d7:
e7:3e:ed:f6:6d:03:c3:1e:a3:7a:bb:42:60:cf:1f:
0b:31:4b:ff:3a:34:d4:03:66:98:0f:02:bb:47:8b:
3f:af:c1:a9:c3:5a:74:07:20:01:5d:34:a5:d3:78:
d9:9f:d5:95:02:6c:d0:e9:8c:90:59:a9:6b:30:49:
79:99:4a:11:99:f6:a9:b6:32:4b:26:de:69:48:00:
03:d1:b0:d2:54:44:60:cf:b9:58:7a:dc:a2:fd:3f:
bc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8A:5D:02:9A:CD:0B:3E:9B:A3:ED:7B:76:BB:8D:DE:B5:E0:CF:CF
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/n4pdAprNCz6bo-17druN3rXgz88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.236.0/23
217.107.96.0-217.107.105.255
IPv6:
2a00:56c0:40d::/48
Signature Algorithm: sha256WithRSAEncryption
7d:87:23:f4:c8:c5:a1:b9:6c:6f:fd:1d:20:27:cb:a6:87:d0:
e7:57:d4:38:04:9a:ee:09:44:b0:1c:dd:64:af:e1:d0:3e:ad:
c2:33:88:0b:1e:8a:b7:5f:a4:6d:7d:8d:76:52:9f:2f:45:6e:
11:13:83:0b:32:13:47:91:0b:e4:8f:1a:23:7d:0d:00:a3:e8:
74:a6:e0:bc:3c:e7:e2:50:29:19:eb:a2:99:70:33:d2:13:b4:
6f:6b:8e:a6:0c:33:f7:0f:6b:04:db:f3:12:76:80:a1:f6:78:
6a:7a:b1:72:f8:12:da:55:92:18:43:0a:96:f7:8d:57:7d:60:
bd:16:31:ce:74:50:c0:00:60:84:e2:ed:b8:e9:75:eb:ba:3c:
e1:ee:82:8e:96:36:a5:88:93:44:0f:31:e7:40:5b:3b:a2:09:
2a:75:81:31:66:92:f7:e1:11:9c:61:74:22:8a:dc:52:71:e2:
ea:7a:c3:4a:e5:6f:b6:57:b6:65:76:fc:93:2d:5f:66:e8:af:
15:c0:39:a5:84:ce:d0:58:d5:19:20:a6:70:3d:ba:05:a3:6a:
94:9e:7b:f7:83:87:8b:44:a0:eb:bf:d2:e7:9c:14:62:54:55:
56:20:fd:fa:69:be:3f:8c:b7:8a:24:73:23:bc:9a:f5:cc:94:
c6:8e:b3:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 10:36:39 2024 by rpki-client on console.sobornost.net