Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/NAZM_k0twRw7K9gSN5gpizpxY7g.roa
File: NAZM_k0twRw7K9gSN5gpizpxY7g.roa (raw, json)
Hash identifier: f5g7+gaElJ9v2eRC6+OoTc0vHYWR4LOKg9Vgbt4H7+w=
Subject key identifier: 34:06:4C:FE:4D:2D:C1:1C:3B:2B:D8:12:37:98:29:8B:3A:71:63:B8
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 0186C4982F6D6595D2C1AE86A5B82C83A505
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/NAZM_k0twRw7K9gSN5gpizpxY7g.roa
Signing time: Thu 09 Mar 2023 04:19:13 +0000
ROA not before: Thu 09 Mar 2023 04:19:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 163.171.89.0/24 maxlen: 24
148.253.245.0/24 maxlen: 24
148.253.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c4:98:2f:6d:65:95:d2:c1:ae:86:a5:b8:2c:83:a5:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Mar 9 04:19:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34064cfe4d2dc11c3b2bd8123798298b3a7163b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:c5:62:66:d1:4e:24:db:04:07:46:0a:15:
31:3d:78:85:07:02:95:5b:02:07:3f:4f:a5:1b:c0:
b7:f5:49:c8:bd:0d:df:2c:1c:2c:58:23:98:16:c2:
03:2b:03:a9:27:ba:26:94:58:39:b0:ce:95:8d:cb:
f3:91:e7:8c:d0:99:2d:b9:e5:3e:8c:88:0e:ac:59:
76:b5:bd:3d:dc:53:a8:a5:f5:80:0c:88:65:a2:40:
c4:61:d4:91:87:db:72:57:3d:29:a9:93:2b:dd:ae:
d2:51:05:b0:92:e6:71:82:d6:f4:39:2c:77:11:51:
65:71:0e:d4:05:20:25:b8:73:56:8b:83:c2:f9:f7:
1e:04:d7:c1:0c:06:6c:2c:30:0b:61:11:ff:38:6f:
53:3b:88:e9:45:1d:ac:05:1b:56:2e:05:8d:35:cb:
55:e6:fb:e3:89:8c:ef:20:e0:2f:06:e4:14:92:0d:
af:a9:1c:e3:0c:d2:82:08:45:25:52:64:c7:49:fb:
9d:7e:45:0c:a8:ba:d0:cf:79:75:e7:5d:cf:7e:55:
38:2c:3a:12:ac:b0:5f:a8:23:c1:26:e5:7d:62:0c:
60:f5:31:a5:f7:62:15:a4:ce:ac:9f:6f:7d:53:06:
c6:1b:52:a4:d6:55:d2:1c:03:b2:24:e2:a9:0f:7a:
37:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:4C:FE:4D:2D:C1:1C:3B:2B:D8:12:37:98:29:8B:3A:71:63:B8
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/NAZM_k0twRw7K9gSN5gpizpxY7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.253.244.0/23
163.171.89.0/24
Signature Algorithm: sha256WithRSAEncryption
30:c1:56:60:4f:47:73:3a:cf:38:07:49:ca:79:0a:c0:88:96:
24:8e:7b:f9:9d:72:1f:e9:1d:50:8b:3d:87:4d:18:c1:b0:f9:
8e:a4:9e:6b:e0:c3:69:a2:91:dd:a7:d7:e6:57:f0:3f:6a:e5:
2a:3e:d4:68:f9:5f:f8:f6:1e:9a:a1:e9:8b:87:bd:dd:41:fd:
64:52:d4:88:cd:03:11:69:04:50:4f:4a:5c:20:d0:95:8d:0a:
6f:06:f5:8d:ff:1b:dc:f8:65:87:31:ae:de:fe:44:c0:2c:72:
b2:48:50:6c:59:f8:34:5a:81:9d:b2:57:97:fe:c6:cd:10:20:
d4:b5:15:8a:a8:c0:38:9d:13:ee:f4:df:60:33:61:ba:44:54:
10:f7:f3:02:4e:2b:b5:91:a8:34:e1:32:f8:9d:1b:ac:7f:0c:
85:59:01:04:49:bb:16:da:54:8c:a5:a2:23:b0:47:aa:ac:bc:
1f:b1:95:5b:9a:b2:13:6e:0d:99:99:13:86:c2:80:09:b7:0b:
f7:d5:18:55:3d:d1:a8:49:20:7a:9f:ae:ee:a4:16:d2:78:fb:
8f:00:02:f4:13:9e:65:5b:70:1f:fe:92:6e:c0:b7:e8:56:90:
2b:43:be:67:0c:58:f2:db:cc:8e:93:78:82:4b:d0:ae:f5:87:
16:83:18:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org