Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/nuTPlaucaRFccZRRihd4aen7WXM.roa
File: nuTPlaucaRFccZRRihd4aen7WXM.roa (raw, json)
Hash identifier: Pw2EQgO13mZrO+RhB/HS90+Vup3mSqoLwAg8vL098bA=
Subject key identifier: 9E:E4:CF:95:AB:9C:69:11:5C:71:94:51:8A:17:78:69:E9:FB:59:73
Certificate issuer: /CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Certificate serial: 018F010DBDBC18D3C7B43B74B68614FB489C
Authority key identifier: 50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/nuTPlaucaRFccZRRihd4aen7WXM.roa
Signing time: Sun 21 Apr 2024 14:27:08 +0000
ROA not before: Sun 21 Apr 2024 14:27:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209528
IP address blocks: 45.135.64.0/22 maxlen: 24
185.162.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 20:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:01:0d:bd:bc:18:d3:c7:b4:3b:74:b6:86:14:fb:48:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=501c1057bcb9d1e0d15748b7f32c59f8c7b72a4e
Validity
Not Before: Apr 21 14:27:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ee4cf95ab9c69115c7194518a177869e9fb5973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:77:98:4d:ff:b2:59:d7:25:04:17:dc:00:
b3:6b:4c:dd:ba:67:8b:e7:24:04:53:7e:dc:2c:17:
d8:b6:14:c4:21:2f:f2:e3:4d:68:b7:ab:2c:93:cb:
89:3c:3d:36:58:68:7d:cc:6f:9d:fb:58:f0:c8:c7:
78:00:4e:c3:b4:07:e6:f5:fb:2c:e8:7b:eb:9e:0a:
fc:aa:64:60:ee:a5:ff:12:04:89:86:3a:9b:16:ea:
c6:c3:1c:ba:23:ec:f1:e8:2c:da:ba:6a:87:74:a1:
bd:34:3f:61:76:0f:30:42:50:af:f6:f8:56:53:6a:
78:49:f9:51:cf:dd:cf:89:a3:b7:b1:33:b6:c8:d2:
52:6f:16:d0:5e:4d:0a:99:4a:91:e2:43:02:f6:09:
3e:28:0b:d6:93:0c:65:04:fa:da:94:6d:43:22:bf:
4e:db:82:18:bc:c1:3b:2d:f0:4f:78:f2:f2:35:b2:
d6:d3:9d:7e:45:53:be:bf:91:95:be:ba:d5:55:ce:
eb:41:5d:10:e1:4e:e6:b2:a7:fe:a2:ee:01:23:fb:
db:c0:7c:57:a9:88:90:25:4a:fc:15:9e:37:c8:94:
57:54:5f:b4:c3:7f:a3:54:96:93:2e:42:0e:5c:fe:
0b:ec:ec:1e:74:c2:d2:e0:8e:cb:e4:95:5b:39:0f:
a8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E4:CF:95:AB:9C:69:11:5C:71:94:51:8A:17:78:69:E9:FB:59:73
X509v3 Authority Key Identifier:
keyid:50:1C:10:57:BC:B9:D1:E0:D1:57:48:B7:F3:2C:59:F8:C7:B7:2A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBwQV7y50eDRV0i38yxZ-Me3Kk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/nuTPlaucaRFccZRRihd4aen7WXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ba3fa1-f9d0-4097-bdc9-d717e4dfcb3d/1/UBwQV7y50eDRV0i38yxZ-Me3Kk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.64.0/22
185.162.136.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:24:64:6f:a2:e3:d9:46:44:84:a6:67:e3:6a:cb:62:92:a3:
82:cd:59:8d:75:81:c2:e1:81:52:3f:0c:a7:87:9d:61:7b:e3:
0b:88:7b:06:13:e6:47:fd:5e:91:a2:67:6a:a5:69:32:3d:1c:
b2:5f:10:0c:e0:16:8b:5b:e3:30:ec:1c:47:a9:29:9d:c1:f0:
b3:45:29:da:78:41:92:e4:bf:1a:d7:cb:0b:f9:61:4d:a3:5e:
ea:70:60:f7:99:ac:12:02:c1:fc:6b:2b:b5:da:61:8d:8b:4f:
6b:76:8f:ea:2f:d6:b1:e5:41:05:39:a0:9c:40:55:15:00:bd:
dc:af:fd:e7:f1:1c:83:c8:2b:b9:4e:20:3b:53:03:ef:3f:f6:
56:c1:03:2c:69:23:43:aa:74:ee:da:5d:33:48:4b:a8:c6:59:
0c:32:12:70:05:a5:1f:da:5f:75:33:9e:5f:62:8f:88:9b:e4:
b0:d8:77:8d:94:a4:c2:82:d6:d8:e0:64:c3:58:fe:8e:36:f6:
9e:f3:53:a3:40:d5:e9:98:f1:6b:8f:da:0d:61:a4:1c:90:ae:
2f:9f:96:70:a0:25:3c:df:34:1d:44:17:c9:b3:bb:e2:99:a8:
e5:af:9c:59:91:87:7d:bf:91:51:ee:c5:2e:c5:56:eb:30:c1:
13:da:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:25 2024 by rpki-client on console-ams.rpki-client.org