Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/nhuI6cvDm11YF6m3OlueKO2vlTA.roa
File: nhuI6cvDm11YF6m3OlueKO2vlTA.roa (raw, json)
Hash identifier: 6nUpWsSN462otlfccdddSm50yCQBmPA7eh9f930HxuI=
Subject key identifier: 9E:1B:88:E9:CB:C3:9B:5D:58:17:A9:B7:3A:5B:9E:28:ED:AF:95:30
Certificate issuer: /CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Certificate serial: 018CC79541E02F92030A3232C185F25E604F
Authority key identifier: A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/nhuI6cvDm11YF6m3OlueKO2vlTA.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134094
IP address blocks: 185.190.16.0/24 maxlen: 24
185.190.17.0/24 maxlen: 24
185.190.19.0/24 maxlen: 24
185.190.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Sep 2024 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:41:e0:2f:92:03:0a:32:32:c1:85:f2:5e:60:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a43b5322b8ea38a7a044dcb0671a75dba1043d7e
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e1b88e9cbc39b5d5817a9b73a5b9e28edaf9530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c4:d4:ea:bb:48:63:44:c8:e1:f3:21:6b:64:
f4:8b:83:18:9c:34:8c:69:2d:af:81:88:23:ac:c7:
7e:d1:86:a6:a3:1d:6d:b1:4b:eb:a1:34:12:d8:9e:
ef:ff:e5:99:6b:59:43:9b:e0:28:1a:74:5e:9c:68:
3c:64:5d:f5:91:37:32:7a:f2:96:62:78:e2:d9:37:
a3:9a:e4:35:85:e5:27:e6:ed:59:38:be:89:45:80:
1b:a5:18:66:7e:7d:1e:3f:70:ad:74:56:74:05:5b:
16:37:7d:63:1e:23:5b:e3:1f:92:bf:33:11:fa:c8:
eb:38:7c:8a:eb:65:38:94:b0:ac:34:73:38:6a:3e:
8d:50:6d:ed:a4:49:d8:20:1b:9a:bc:78:6e:d7:ff:
a8:13:2b:7a:59:4f:5b:fd:9a:cf:e4:a8:8f:c3:0f:
e8:d3:c4:1b:f9:da:5c:7f:af:af:67:df:9b:8d:eb:
7f:a5:3e:5e:91:a8:df:68:6c:32:23:df:9c:eb:a6:
77:e5:56:5c:0e:ef:81:5d:cd:04:45:d0:d4:76:e0:
51:d2:21:5a:b8:23:cf:0e:d7:44:75:59:f1:50:10:
bc:57:b6:b9:9f:93:ea:4a:8f:ac:5c:cb:e5:a3:ff:
80:f1:cf:24:ae:16:d4:ae:6a:30:f3:22:1d:9b:49:
50:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:88:E9:CB:C3:9B:5D:58:17:A9:B7:3A:5B:9E:28:ED:AF:95:30
X509v3 Authority Key Identifier:
keyid:A4:3B:53:22:B8:EA:38:A7:A0:44:DC:B0:67:1A:75:DB:A1:04:3D:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDtTIrjqOKegRNywZxp126EEPX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/nhuI6cvDm11YF6m3OlueKO2vlTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ae5206-c843-4bd5-8860-71e95b04b3ec/1/pDtTIrjqOKegRNywZxp126EEPX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.16.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:e8:76:b7:32:8a:10:5f:3b:55:ef:6d:f6:e2:87:81:27:22:
7e:00:e6:74:a7:3d:1e:bb:4c:9b:27:bd:23:40:ee:38:f1:75:
24:97:b4:67:15:fe:4f:9e:b5:f7:27:7d:a6:49:7d:1d:fe:43:
0f:16:1e:dd:f1:f8:38:f6:03:23:25:d8:61:a6:ad:74:dd:16:
af:ce:8b:87:fa:c2:fc:7a:ff:bb:72:3e:9b:96:b4:33:65:22:
68:92:61:3e:4e:d7:3d:5a:dc:3b:4f:f9:7f:9e:b6:d9:76:33:
30:0d:ac:83:04:fe:05:95:73:52:b4:2d:3a:98:66:50:a8:5e:
29:47:9c:6e:53:0a:89:8c:6f:da:8a:61:e0:63:fd:1f:9a:69:
44:1c:2f:98:8a:df:fb:eb:0d:ec:12:fa:e4:98:33:e5:98:cd:
f9:62:dd:da:ea:50:f6:8b:31:3e:68:96:cd:16:6f:92:d4:a6:
ca:69:5b:62:c7:a7:84:c5:43:72:bf:20:7d:8a:ee:da:6b:b3:
38:7c:8b:60:b6:e3:29:17:26:fd:36:3c:b3:c8:47:05:56:2c:
14:01:62:9e:88:3a:e4:33:53:d2:86:65:53:a5:8a:90:40:77:
d3:dd:90:00:51:09:c3:67:8a:9d:b9:69:1c:4d:8e:68:b7:c6:
1f:d7:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 15:35:04 2024 by rpki-client on console-ams.rpki-client.org