Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/nnRyLbyVY2QJaGmny4ULxXWKKG0.roa
File: nnRyLbyVY2QJaGmny4ULxXWKKG0.roa (raw, json)
Hash identifier: M4MuoljRkLKF4fvdsHHkdeDTPN9N2daQBekXaqT9As8=
Subject key identifier: 9E:74:72:2D:BC:95:63:64:09:68:69:A7:CB:85:0B:C5:75:8A:28:6D
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 01858393388C1E0F6E3973D4B51F1C67D6F7
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/nnRyLbyVY2QJaGmny4ULxXWKKG0.roa
Signing time: Thu 05 Jan 2023 20:15:41 +0000
ROA not before: Thu 05 Jan 2023 20:15:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 185.255.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Dec 2023 06:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:83:93:38:8c:1e:0f:6e:39:73:d4:b5:1f:1c:67:d6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 5 20:15:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e74722dbc956364096869a7cb850bc5758a286d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c0:99:46:e7:3c:8b:e8:0e:23:6b:89:7c:a7:
8c:c3:a0:a7:a9:16:ab:f6:73:6a:b7:6c:7e:3f:95:
29:5d:bd:45:90:96:38:fe:67:1b:a7:3f:50:8f:d6:
ff:37:f9:d9:c1:3c:3e:8d:c1:f2:d7:88:53:c3:42:
59:b9:39:13:0d:05:83:8b:de:d0:da:da:ce:19:a4:
27:ad:27:1b:a4:34:bd:2f:e8:62:d3:68:20:86:08:
6e:c4:0e:5f:80:2c:bc:52:c6:dd:14:02:24:a4:d5:
a2:0a:0f:76:a4:99:28:66:6f:d1:cf:bd:9d:40:16:
73:f0:32:aa:5e:e6:ee:55:e1:cd:05:ae:cc:8e:0c:
43:7b:0b:c8:11:b6:f1:46:69:ad:c9:18:6f:df:bd:
e0:8e:e5:21:86:b3:c4:29:0b:0e:15:95:9c:0f:ec:
cb:64:c3:41:51:23:13:04:a7:2c:df:93:ef:ac:5f:
48:f5:2a:21:74:13:73:67:e6:08:ed:02:1b:ad:75:
8d:c5:58:00:fc:8d:d8:6a:d9:f7:91:fe:87:6f:47:
5b:56:91:d2:ae:99:1f:02:46:d9:3a:fd:52:cd:cc:
53:37:00:4d:d4:75:67:bf:7c:fd:4c:9f:ea:8d:22:
f9:2c:e2:ca:a5:d1:26:82:26:ba:fe:97:e0:d4:af:
3f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:74:72:2D:BC:95:63:64:09:68:69:A7:CB:85:0B:C5:75:8A:28:6D
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/nnRyLbyVY2QJaGmny4ULxXWKKG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:07:a7:96:ac:e8:23:12:8b:6d:d5:ac:5d:b9:7c:f6:75:f3:
71:fe:67:b3:6f:da:f9:b5:04:bd:b5:dd:8d:93:ae:11:3e:98:
13:53:47:8d:3b:8d:58:69:be:6a:4a:63:c3:39:6c:7b:e5:34:
bd:0a:40:05:b5:a6:90:88:93:36:25:39:2e:5b:f1:7a:da:30:
2f:ac:37:0d:d9:fa:03:01:77:18:98:10:fa:c2:dd:20:6f:8d:
db:ad:e1:e0:f5:23:2b:54:0b:a0:10:b1:ae:5f:52:72:cc:50:
5e:d3:0b:c5:95:01:80:a7:f2:ca:9a:f1:a2:71:f9:56:88:16:
91:d9:39:0d:b5:1f:db:b7:5c:dc:0d:4d:fa:8c:8f:cf:ee:b3:
f8:23:dd:16:17:31:7b:f5:7d:2e:31:e6:05:f3:e2:3a:06:28:
ab:61:63:40:ce:fb:fb:24:0f:a5:7c:e6:4b:e7:d7:ed:88:48:
e3:2f:2d:3c:9f:49:af:19:c6:51:68:66:25:99:00:0e:5a:5b:
18:b4:7d:30:a3:c5:94:09:5b:de:07:fa:62:73:42:d9:41:42:
0c:de:ab:f7:a1:43:75:75:fc:56:9d:85:8d:d7:53:da:53:2e:
00:5d:14:08:a5:5e:f1:46:a0:2c:67:e5:cf:78:ac:a4:f5:7f:
3b:94:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org