Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NNcx_NBUT3-JwVO0hywgrLRpWJU.roa
File: NNcx_NBUT3-JwVO0hywgrLRpWJU.roa (raw, json)
Hash identifier: d53NTxs5XZSLIxmm9sWfYL50jqIDObcmXIlopWv6C7o=
Subject key identifier: 34:D7:31:FC:D0:54:4F:7F:89:C1:53:B4:87:2C:20:AC:B4:69:58:95
Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial: 01856FD53D6B93C36076A731139438827EBB
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NNcx_NBUT3-JwVO0hywgrLRpWJU.roa
Signing time: Mon 02 Jan 2023 00:15:23 +0000
ROA not before: Mon 02 Jan 2023 00:15:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60125
IP address blocks: 89.35.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:3d:6b:93:c3:60:76:a7:31:13:94:38:82:7e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Validity
Not Before: Jan 2 00:15:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34d731fcd0544f7f89c153b4872c20acb4695895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:77:f4:f4:7a:62:94:dd:4d:53:42:a6:1d:06:
8d:d4:6c:b8:27:ae:7c:7a:ce:f4:fd:ec:2e:ba:99:
18:e5:5d:33:e4:ef:f6:55:08:06:62:14:91:9c:1d:
8a:92:aa:ee:10:ed:fe:31:03:80:23:eb:00:53:ce:
5e:fc:b5:98:7c:13:c2:1d:d0:31:89:0d:6f:bd:05:
32:af:6c:7b:9e:f6:d5:df:7e:bb:08:1a:d8:be:63:
d2:03:25:ec:76:f5:fb:56:97:85:b9:ab:c8:74:cf:
89:3c:d4:1e:83:ad:8c:ec:d6:f2:07:51:2f:d3:1f:
56:38:21:38:c6:27:6c:ac:74:21:ec:13:b7:91:a1:
bd:8c:f0:a6:5d:1c:cf:9f:25:19:fe:23:ca:87:d9:
17:dd:0a:e2:f3:b1:a7:27:41:47:5b:dd:c0:5a:9e:
a6:63:20:2a:1f:f3:fc:7d:fa:1a:47:f9:ac:a7:bf:
3b:a3:25:76:eb:99:b3:b1:56:f2:67:62:7b:b4:91:
04:74:37:39:39:e7:0d:66:b2:0b:db:1d:dc:04:52:
1c:bc:6c:69:73:b2:2b:90:e6:81:ec:bb:db:03:d4:
70:6d:8b:e8:8c:c1:2f:06:81:e3:6e:8f:61:f5:fb:
fa:bd:d7:57:07:af:46:1e:d0:f5:0c:63:94:6f:00:
9e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:31:FC:D0:54:4F:7F:89:C1:53:B4:87:2C:20:AC:B4:69:58:95
X509v3 Authority Key Identifier:
keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/NNcx_NBUT3-JwVO0hywgrLRpWJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:a9:08:79:92:f4:1b:a6:ba:74:4b:82:f8:86:12:64:30:e3:
e6:88:27:59:db:cb:8d:55:2e:a8:85:5a:25:aa:84:0e:08:49:
09:25:bb:62:19:e9:e2:d2:25:c4:72:f3:59:fd:c5:ab:0c:6f:
38:cb:64:6c:20:cc:28:f6:ab:83:f9:04:32:40:77:10:2f:2d:
51:37:ba:64:49:61:23:ed:70:f0:4e:e4:82:a4:0d:e0:29:88:
e7:36:1f:ae:1a:4e:49:5d:d0:ea:6e:9f:5d:59:0d:c7:d1:d8:
75:a2:19:a8:9e:b8:50:5f:b0:36:3f:fc:6d:2c:27:22:f2:ea:
76:d5:42:bb:ae:07:a8:3d:d7:69:af:8a:ba:08:6b:b6:f1:f6:
93:d3:b0:08:ae:14:2e:49:54:be:50:c0:1e:d2:b3:b4:4f:df:
ae:ab:b1:42:eb:0c:05:4c:2c:69:cb:c7:d5:6f:c5:62:81:9e:
20:55:91:a0:82:3f:b4:c1:97:8a:4f:d5:c8:51:a6:1e:58:8d:
80:90:ca:c7:b2:34:7e:6e:66:e9:85:16:e5:24:2a:dc:a3:b0:
d9:d6:52:87:11:a8:0c:e8:35:e8:45:30:5b:33:83:bf:17:d6:
2a:1c:11:e1:ad:b5:7e:16:63:1e:8f:09:1c:21:32:22:da:b6:
85:64:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org