Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/NLmnt8_Xd6lpIzRwU8MaKU8Kkig.roa
File: NLmnt8_Xd6lpIzRwU8MaKU8Kkig.roa (raw, json)
Hash identifier: gODxWVv6xKZM3mpC7a6ZLo1V1Dtn5fbTzPa8nPIq9fI=
Subject key identifier: 34:B9:A7:B7:CF:D7:77:A9:69:23:34:70:53:C3:1A:29:4F:0A:92:28
Certificate issuer: /CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Certificate serial: 018572C392A8CDDDF4E39E5C5D189C1BD9D4
Authority key identifier: 1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/NLmnt8_Xd6lpIzRwU8MaKU8Kkig.roa
Signing time: Mon 02 Jan 2023 13:54:57 +0000
ROA not before: Mon 02 Jan 2023 13:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210771
IP address blocks: 185.252.6.0/24 maxlen: 24
185.252.7.0/24 maxlen: 24
185.252.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:92:a8:cd:dd:f4:e3:9e:5c:5d:18:9c:1b:d9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aa0a328c6fe0f1bca5e6599042dff59e513b25d
Validity
Not Before: Jan 2 13:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34b9a7b7cfd777a96923347053c31a294f0a9228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:3c:20:0b:cf:19:14:fc:d0:cc:80:21:8c:
b2:86:f8:f5:be:27:a2:d1:65:81:77:9b:c5:c0:60:
f2:a2:83:ff:2c:d6:18:9f:88:ac:4b:cf:21:bc:6b:
7e:49:1a:91:b4:e4:57:c8:3f:82:47:8c:a6:4b:05:
e2:d6:2a:0a:b9:81:2c:fb:7a:93:4a:6b:1b:88:77:
09:8f:3e:9a:44:2c:cd:93:30:ab:29:58:71:60:d4:
c3:37:4c:9b:77:ac:63:80:89:11:3b:86:86:c0:f9:
74:86:62:1f:d9:2b:19:72:fe:37:e0:4b:9c:f5:31:
f5:dc:d7:c4:43:16:89:97:ef:9b:60:ac:94:c8:48:
05:47:7e:90:bf:18:ad:c0:b1:64:da:20:74:0f:67:
8d:07:1b:2f:63:98:81:fb:32:21:f0:ed:34:5a:18:
7f:c5:f3:7e:00:79:62:f1:1c:45:f7:0b:72:0e:bc:
ca:27:20:45:16:39:0d:7f:e8:df:f9:2b:89:61:a0:
e6:41:0f:75:a0:af:21:6a:c4:fd:65:b9:a1:8b:c7:
06:c6:0b:9d:bf:ed:75:63:68:c9:b7:ce:23:42:1d:
87:9c:26:a2:9b:11:44:a3:28:f9:04:43:87:ad:e7:
b6:22:ee:0f:24:a6:b4:59:8f:62:60:f4:bd:32:20:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:A7:B7:CF:D7:77:A9:69:23:34:70:53:C3:1A:29:4F:0A:92:28
X509v3 Authority Key Identifier:
keyid:1A:A0:A3:28:C6:FE:0F:1B:CA:5E:65:99:04:2D:FF:59:E5:13:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqCjKMb-DxvKXmWZBC3_WeUTsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/NLmnt8_Xd6lpIzRwU8MaKU8Kkig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/344d24-2e11-466d-8ade-38e846148c78/1/GqCjKMb-DxvKXmWZBC3_WeUTsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.5.0-185.252.7.255
Signature Algorithm: sha256WithRSAEncryption
5c:e9:65:49:74:be:79:89:e8:49:c9:f9:35:1e:2b:89:e2:f8:
81:16:55:29:76:54:be:ee:86:10:a5:e5:9c:f8:de:22:7c:dd:
57:90:a3:b4:12:c9:1e:9d:99:b4:05:11:f3:80:8b:42:9f:bd:
0c:51:46:df:0e:30:0d:1e:a7:90:39:8c:18:70:da:49:b1:34:
20:de:65:a8:7a:a9:e1:8c:92:06:a0:2e:60:db:9f:a5:27:97:
f5:79:65:39:2c:bb:7a:f5:f5:94:f3:83:f5:bb:be:d4:a7:7d:
7f:23:f2:1a:9f:a5:1a:a3:72:7c:13:ba:6a:e1:65:e7:c0:ee:
c9:de:70:fe:6c:b0:06:51:eb:3c:7b:e8:cf:45:cc:35:c1:e7:
ac:29:95:98:68:eb:6d:a8:be:01:b1:9e:2f:8f:0d:56:d8:52:
e8:de:06:9c:bd:d1:50:44:ad:5f:cd:ab:75:31:ac:7b:b3:e2:
4f:cc:11:dd:94:e3:4d:8a:22:9f:90:f8:0b:52:aa:60:fe:2b:
8b:cf:0a:36:e1:f2:8b:05:e9:d6:44:39:f8:bb:b1:b2:fb:e1:
a5:31:a2:99:ca:4b:78:9f:42:fa:77:aa:27:17:d9:44:b7:fc:
5b:b5:9f:b0:dc:f3:82:ab:dd:6d:dc:f6:29:df:79:6b:74:8e:
85:34:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:00 2024 by rpki-client on console-ams.rpki-client.org