Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Ns__NJIy44uT6N6N-8qR2iC1CJQ.roa
File: Ns__NJIy44uT6N6N-8qR2iC1CJQ.roa (raw, json)
Hash identifier: eaCPoLYq2SELfdZRTTV9Z2X9B08fkPKKsABsz6sIlr8=
Subject key identifier: 36:CF:FF:34:92:32:E3:8B:93:E8:DE:8D:FB:CA:91:DA:20:B5:08:94
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A9988BDA06A546164113E375CDA38F4CB
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Ns__NJIy44uT6N6N-8qR2iC1CJQ.roa
Signing time: Fri 15 Sep 2023 15:49:50 +0000
ROA not before: Fri 15 Sep 2023 15:49:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 89.251.8.0/22 maxlen: 24
82.115.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 16:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:99:88:bd:a0:6a:54:61:64:11:3e:37:5c:da:38:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Sep 15 15:49:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36cfff349232e38b93e8de8dfbca91da20b50894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:e4:74:cc:f3:9b:ee:3b:00:a1:0b:11:e0:
c0:43:75:2c:b4:8f:ff:c4:a6:e4:52:4a:4c:ab:6b:
4c:ea:2e:2e:3a:75:95:25:89:fa:86:20:27:91:b7:
c2:e0:8b:cf:b3:ba:45:cc:5b:49:36:ca:6b:e1:38:
b4:77:9c:05:7b:81:bc:67:f7:27:dd:75:a2:21:c7:
ea:d0:3f:47:e0:e5:16:83:31:ab:b3:21:b9:0e:71:
e1:20:3f:ee:e9:db:2f:c4:44:0f:d4:72:05:4f:0c:
d7:a1:64:98:d5:82:89:ff:e7:c7:ed:80:86:74:2b:
61:e0:c3:c6:4d:07:55:c8:34:44:20:25:fb:a3:97:
28:aa:52:98:c3:ae:d9:4e:d5:24:78:02:cd:b7:11:
4d:9a:cd:8b:91:bf:09:18:a7:fc:46:93:b7:31:95:
6c:ef:35:fe:e9:5f:b4:18:ce:cc:19:24:35:ff:83:
68:6a:1f:f1:0a:65:2a:cb:74:21:7b:0d:54:26:43:
b6:aa:15:ba:5e:2a:60:6e:78:a2:c0:6c:63:c1:f6:
b2:c8:90:95:e1:5b:13:2b:df:29:aa:6f:da:f5:e8:
a6:ce:91:17:5e:ea:21:5e:b1:2d:b6:6c:b3:4b:01:
95:3f:92:50:23:41:61:84:8b:39:04:44:b5:30:9f:
87:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CF:FF:34:92:32:E3:8B:93:E8:DE:8D:FB:CA:91:DA:20:B5:08:94
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/Ns__NJIy44uT6N6N-8qR2iC1CJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.8.0/22
89.251.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:02:db:43:f3:53:fd:9d:dd:ab:af:72:10:f6:17:71:bb:b4:
97:0a:e5:8e:be:44:82:77:c5:05:84:c1:39:83:7b:ad:29:4f:
df:c3:b2:f3:8f:1c:26:95:43:e8:c1:7a:91:81:92:a2:1b:45:
3c:9b:a9:3a:49:23:90:1c:9b:3a:4f:2f:6a:03:94:2b:a7:d4:
ad:1d:ad:6d:c0:28:d9:a4:fe:1e:b5:73:3b:6b:33:80:c7:d3:
ab:9a:ff:b9:00:66:df:72:a2:63:67:04:d7:6e:2f:9c:5b:d5:
49:2b:94:70:4b:00:8f:72:09:aa:51:bc:b3:6c:f2:c8:3d:e0:
b7:a1:96:36:d1:4f:e5:5b:f6:12:0c:17:79:27:f0:22:0a:b4:
79:be:b0:7b:23:04:9f:f8:4f:f0:8d:fb:af:82:d0:f1:56:5d:
7d:b5:d3:b4:85:c6:84:53:59:e1:e8:92:ac:32:1c:e1:9f:f4:
8d:f4:7e:2f:9a:8e:b1:00:31:bd:9c:3f:b3:a1:aa:c6:6b:07:
4a:37:bf:04:c3:65:40:bf:76:1f:40:c7:8d:0b:c5:8c:aa:57:
2b:dd:99:17:3d:f7:6b:06:22:16:a5:4d:d2:7f:bc:79:11:e3:
71:23:d6:fa:ce:18:de:3f:1c:80:bc:93:f4:3c:ae:44:6a:1e:
c8:42:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:35 2024 by rpki-client on console-fra.rpki-client.org