Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NMnCCLgCSs-zPtgxQ5MIqDLNgf8.roa
File: NMnCCLgCSs-zPtgxQ5MIqDLNgf8.roa (raw, json)
Hash identifier: Fr2WA8pZWP0HXPaGA0ZUOsnUt6LELbm3kc0u5W57CrA=
Subject key identifier: 34:C9:C2:08:B8:02:4A:CF:B3:3E:D8:31:43:93:08:A8:32:CD:81:FF
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E8E2CE0357B1494E2070D886188FD
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NMnCCLgCSs-zPtgxQ5MIqDLNgf8.roa
Signing time: Mon 02 Jan 2023 08:34:54 +0000
ROA not before: Mon 02 Jan 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 212.193.136.0/21 maxlen: 24
194.226.142.0/24 maxlen: 24
194.226.160.0/24 maxlen: 24
212.192.36.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 May 2023 17:45:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:8e:2c:e0:35:7b:14:94:e2:07:0d:88:61:88:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34c9c208b8024acfb33ed831439308a832cd81ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8e:34:22:63:f9:04:55:34:9f:9d:12:16:5f:
5d:51:2d:ee:17:57:46:33:0c:b2:99:66:38:da:27:
ed:0c:61:1a:e5:ef:47:9f:8d:3c:23:80:99:43:a3:
f1:02:1e:94:d0:e7:d5:dd:b7:b2:5e:67:dd:e5:ef:
9d:79:43:68:eb:eb:21:e8:8c:a3:49:ff:90:1a:cb:
50:57:8b:0a:dc:44:86:5a:67:16:6b:d9:29:23:b0:
89:d0:20:cf:ca:d0:cd:be:31:ca:78:03:d8:35:4d:
48:d1:17:59:36:dd:62:81:e3:59:39:82:ab:20:0d:
53:44:7a:82:21:5b:9c:b6:73:5a:62:6a:b6:63:83:
5b:f6:51:27:21:c3:c6:11:e2:e2:2f:6b:6b:c8:88:
b9:bd:0c:aa:6e:c0:72:9c:e3:e2:d7:ec:84:33:48:
c9:73:7c:7a:ae:e1:fa:2a:1a:a5:3f:14:e8:d3:1b:
18:7c:73:a8:18:8e:fa:34:90:c9:fe:a9:53:0a:d8:
2c:f2:03:42:da:38:9c:16:eb:0c:e2:68:29:60:25:
bc:0b:74:f6:18:a3:8e:c9:7c:7d:be:e8:4b:c5:63:
fb:b4:5b:5c:0f:50:f2:5b:78:5a:e6:08:cd:e6:55:
44:e2:40:b1:c5:4f:2b:2f:2d:2f:a2:22:d5:c3:1a:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C9:C2:08:B8:02:4A:CF:B3:3E:D8:31:43:93:08:A8:32:CD:81:FF
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/NMnCCLgCSs-zPtgxQ5MIqDLNgf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.226.142.0/24
194.226.160.0/24
212.192.36.0/22
212.193.136.0/21
Signature Algorithm: sha256WithRSAEncryption
02:f1:78:6b:aa:6b:ea:f5:80:6d:e2:39:3b:fd:04:80:b4:60:
f8:ff:c0:d7:82:71:0e:88:38:b6:52:78:ac:41:30:47:3c:68:
d6:22:8f:23:32:4f:37:92:11:2d:0c:9a:81:2b:d8:c5:ee:2a:
cb:42:87:3e:73:0e:14:fd:b6:83:da:10:31:30:77:8e:f2:8d:
f9:59:d4:92:a4:63:24:52:a8:83:0f:41:6d:1f:05:63:b3:68:
76:66:95:ec:9f:83:00:ff:92:d6:33:f3:6b:21:e1:8e:a9:2b:
92:7b:10:7e:4a:a1:81:a1:bc:08:1d:ab:09:1a:08:97:81:a5:
29:fb:72:56:00:e8:a3:f3:52:3d:4a:5a:31:de:90:4d:01:f8:
ec:d9:88:3e:8f:51:bd:ad:1d:d6:63:3c:f8:e9:e7:6d:be:60:
1f:17:1b:56:60:90:06:2a:97:11:d7:0b:0d:5f:44:73:66:ba:
6b:0d:36:5e:ce:a9:e7:1a:dc:20:6a:b2:8d:eb:7a:ab:bd:e4:
26:77:f2:e9:b8:97:9d:b4:17:50:71:46:2d:e5:f0:8d:93:d7:
6f:46:bd:89:9b:63:9f:be:00:d9:39:8c:92:6d:5e:f2:58:aa:
70:10:2d:35:11:96:a3:e1:1e:7a:af:5b:43:ce:59:b6:26:59:
3e:b3:85:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org