Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nUyqG-76WuoGoScAA0s58-ix-pw.roa
File: nUyqG-76WuoGoScAA0s58-ix-pw.roa (raw, json)
Hash identifier: 5sHe13rQBZvyS8edBRiiW8bwPQ+IXQ/gncLYTn5jQxQ=
Subject key identifier: 9D:4C:AA:1B:EE:FA:5A:EA:06:A1:27:00:03:4B:39:F3:E8:B1:FA:9C
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018F81D4E7093B3F5C3D8DC98482F3C9BA0E
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nUyqG-76WuoGoScAA0s58-ix-pw.roa
Signing time: Thu 16 May 2024 14:36:04 +0000
ROA not before: Thu 16 May 2024 14:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 996
IP address blocks: 94.103.189.0/24 maxlen: 24
94.103.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 May 2024 10:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:d4:e7:09:3b:3f:5c:3d:8d:c9:84:82:f3:c9:ba:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 16 14:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9d4caa1beefa5aea06a12700034b39f3e8b1fa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:45:78:5b:cc:e1:d8:f3:2a:95:0a:69:87:12:
02:9e:d7:5f:45:d3:1a:b6:3a:a2:83:2f:95:cf:b0:
8b:cd:ec:c4:db:9a:8b:53:55:2f:a5:cd:35:58:b4:
72:4e:57:ec:3e:16:c5:12:9e:c3:52:cb:0b:b4:59:
03:40:fc:03:40:24:85:9e:41:aa:f6:5a:68:88:2a:
80:01:e9:9c:1d:79:6e:d0:f3:f9:ca:6c:8c:69:f3:
10:6a:9c:be:b4:78:3d:11:71:37:50:44:38:55:72:
99:72:69:ad:9a:9e:d8:7f:c5:e5:24:e2:20:f2:1a:
a1:29:c4:71:e8:fa:0a:eb:d0:e9:62:08:11:1d:05:
65:38:a4:10:f8:85:bd:3a:cc:a0:44:66:25:f7:a0:
0e:11:07:bd:9b:4d:93:a0:06:17:8c:35:2f:d4:67:
25:77:a1:79:22:b2:d6:6d:8c:47:6f:1a:e5:ae:0f:
c2:9f:fa:c3:5c:31:3e:71:1f:68:84:ca:64:1b:c3:
9d:a2:b8:47:bd:63:27:c2:1c:78:12:66:3c:44:16:
1a:88:10:17:2d:1c:9c:3e:e5:81:8f:4d:ce:72:85:
13:69:6c:2f:69:f5:b1:46:bb:50:ac:b7:2c:67:63:
65:02:18:26:3c:5f:d6:87:ea:8d:9e:61:55:f5:66:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4C:AA:1B:EE:FA:5A:EA:06:A1:27:00:03:4B:39:F3:E8:B1:FA:9C
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nUyqG-76WuoGoScAA0s58-ix-pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.189.0/24
94.103.191.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:30:25:18:91:6e:f0:1e:34:4e:ea:55:f8:d2:06:21:9c:35:
44:3f:1b:cb:f2:55:75:d6:db:4b:33:6e:a0:fa:af:8d:00:36:
7d:93:92:f3:33:98:9f:82:20:94:a6:03:d7:3e:f4:4b:ee:84:
4a:2c:fc:84:12:2a:d1:5e:a8:82:5a:7a:c9:9a:ea:33:a5:d3:
cc:9c:b2:24:52:61:66:11:4d:96:80:cc:02:1e:7d:47:65:57:
38:1b:2f:09:e4:af:2b:03:42:9c:df:63:34:19:c6:ad:00:5f:
83:16:15:cd:e5:51:46:b1:a0:78:6e:18:c7:99:14:80:68:ea:
d4:50:d2:f5:19:26:a0:82:e1:af:19:eb:0a:09:8f:e6:c5:10:
79:e2:25:d1:67:99:be:fc:8f:57:44:7a:35:04:13:a9:91:12:
54:59:33:36:d8:e6:87:47:fc:23:3b:18:92:c2:2a:68:6e:c2:
5f:bf:4a:93:f2:10:aa:cc:9c:ab:6c:3a:db:ab:3f:4b:39:17:
c1:f3:7d:f2:13:6c:d6:e2:05:5e:d1:11:1e:67:cd:d0:4e:ee:
21:41:ec:f6:1f:cd:a3:fb:6a:78:0a:12:b4:26:0c:92:8a:67:
e6:59:ac:2a:f3:b2:b8:91:dc:77:9e:2b:d0:b5:29:96:b4:b4:
30:27:9e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 12:54:21 2024 by rpki-client on console-fra.rpki-client.org