Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Nmaqco9ADDftLciQDublC8z-MZU.roa
File: Nmaqco9ADDftLciQDublC8z-MZU.roa (raw, json)
Hash identifier: 0W6R+FHWW4q4uVvWFhpmHl6gSWB1Mq4o0JxtpPi2jH4=
Subject key identifier: 36:66:AA:72:8F:40:0C:37:ED:2D:C8:90:0E:E6:E5:0B:CC:FE:31:95
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 018585E2A70B9F2E4CB1FEE3E98D1DBBB76F
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Nmaqco9ADDftLciQDublC8z-MZU.roa
Signing time: Fri 06 Jan 2023 07:01:41 +0000
ROA not before: Fri 06 Jan 2023 07:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201814
IP address blocks: 77.73.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 05:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:85:e2:a7:0b:9f:2e:4c:b1:fe:e3:e9:8d:1d:bb:b7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 6 07:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3666aa728f400c37ed2dc8900ee6e50bccfe3195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:f6:a1:69:fc:90:26:6d:9a:a4:47:34:6f:
ef:05:c0:92:37:03:46:80:65:61:0b:d6:08:78:1d:
e4:80:e8:64:d8:0d:0b:ff:3b:06:15:c6:a3:13:69:
95:19:3d:01:6a:6a:86:f6:4a:11:9c:a9:09:ed:20:
af:3a:c9:23:25:dd:a9:a7:2f:a2:ab:95:e1:da:44:
ce:de:20:be:87:81:18:80:45:97:4f:5a:ee:b0:3f:
37:8d:fd:80:5f:80:c9:58:5d:b3:f7:94:df:c1:a0:
f9:6e:0b:1b:e9:c6:4f:fd:f3:6e:e7:3a:6a:bd:f3:
3f:6c:91:38:6b:9e:9a:d6:de:46:3a:9c:1f:82:cf:
0d:fc:af:9b:0d:ff:1a:bf:cd:2f:38:71:30:20:53:
a9:18:af:c5:85:fa:5d:f2:d4:aa:4f:f6:4e:50:aa:
69:f8:aa:a0:30:84:4a:16:d2:69:94:ce:63:12:67:
d0:9a:82:81:9d:7c:7e:20:09:38:de:55:67:be:87:
e8:ed:9b:7b:08:c9:1a:c8:ba:97:e4:b5:43:c5:26:
c5:b5:4e:87:8e:96:bd:e6:38:2c:cf:0b:9c:3c:85:
9c:f6:53:c0:c1:55:a8:b7:c8:19:db:da:e4:28:60:
3a:47:4a:bf:99:9c:c0:dc:35:cb:f5:83:71:03:ac:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:66:AA:72:8F:40:0C:37:ED:2D:C8:90:0E:E6:E5:0B:CC:FE:31:95
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/Nmaqco9ADDftLciQDublC8z-MZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.73.129.0/24
Signature Algorithm: sha256WithRSAEncryption
15:41:ae:1e:ae:9a:cd:93:c6:f4:01:f4:c5:9d:22:fe:12:f7:
48:52:70:12:91:2c:83:66:4f:73:e6:8f:35:fd:f8:bc:e6:5e:
d1:dd:44:55:4d:db:ed:6d:e6:59:25:f4:09:00:d0:c3:d4:4d:
53:db:56:89:0c:2b:bc:41:1c:27:bf:74:97:08:ac:a0:8e:3b:
01:ce:07:74:95:c4:d5:24:3d:a9:e6:f3:f0:7b:cb:ba:04:69:
d7:80:1f:03:62:b2:5c:81:93:0c:64:5e:13:db:c5:ea:1a:f5:
ae:8d:8c:cb:b8:e1:3f:af:27:76:30:16:53:33:f5:dd:df:5c:
e3:da:c5:d4:6f:d8:32:9a:a4:5c:42:fa:bd:ea:fa:66:50:56:
6b:4e:e8:74:f8:06:a0:be:4a:a2:ee:74:f4:e8:f2:3a:c0:f4:
14:52:d6:6a:f9:bf:fb:72:c7:38:80:62:34:8e:f9:a7:aa:18:
f9:31:93:60:3c:f5:8d:9f:3f:18:c7:50:20:b8:83:c6:d1:ec:
ec:fa:7c:00:dd:76:47:d3:5f:3a:fb:70:4a:86:4b:ef:ee:b0:
5a:34:87:8a:05:3f:54:b9:5e:2b:68:5b:af:01:b9:b5:4d:38:
63:fd:0b:f0:2c:1e:98:c5:14:03:66:a3:66:b4:dd:c7:89:d5:
5c:87:32:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-fra.rpki-client.org