Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/NFwhX9NknyzL-VP3CkALPxByXIg.roa
File: NFwhX9NknyzL-VP3CkALPxByXIg.roa (raw, json)
Hash identifier: zxJDOZ7yygai7JTEg5S0EBzic8Ow8IyggXbTFyQU2WI=
Subject key identifier: 34:5C:21:5F:D3:64:9F:2C:CB:F9:53:F7:0A:40:0B:3F:10:72:5C:88
Certificate issuer: /CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Certificate serial: 018CC4246C712293E1A8003F2EFDA977A45B
Authority key identifier: 79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/NFwhX9NknyzL-VP3CkALPxByXIg.roa
Signing time: Mon 01 Jan 2024 08:29:30 +0000
ROA not before: Mon 01 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58299
IP address blocks: 185.62.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 14:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6c:71:22:93:e1:a8:00:3f:2e:fd:a9:77:a4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ee11d8c4297bec54bd305430ca4772dfac847a
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=345c215fd3649f2ccbf953f70a400b3f10725c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:6b:51:c0:61:8f:5b:40:64:ba:8b:51:68:
eb:81:5a:56:d1:1b:72:06:8f:38:8b:05:8a:10:30:
6d:35:b9:94:fd:04:f4:4f:be:6b:a6:08:17:c2:8a:
31:a2:72:2b:e9:30:91:84:02:60:39:70:f4:3b:8d:
91:16:35:4e:2d:9c:c7:75:76:c2:8c:da:cf:0a:59:
b2:1d:89:57:78:79:ca:25:f1:b0:f2:b5:1a:f8:ce:
50:ae:c4:16:5b:de:f1:50:60:4f:96:7b:5e:fa:f7:
69:8f:03:ec:48:1d:d6:9c:bf:2a:1c:32:c6:b9:69:
74:75:63:5d:2c:40:36:63:51:f9:92:3d:c3:28:c4:
df:94:3a:98:5e:db:7e:6f:ab:5a:8c:c2:cc:71:20:
fc:bd:d6:59:57:fa:57:95:ee:6a:b1:35:c9:36:64:
a5:6e:2a:bb:15:2c:e1:86:1c:b0:80:f3:3a:ef:54:
4a:d2:7c:82:f3:2f:a4:7f:d6:1b:b7:a5:a0:b1:4e:
62:07:40:2d:62:38:bc:cb:85:b0:70:dc:43:44:f7:
8f:fc:53:a2:07:41:95:e6:3c:d4:ef:de:0a:56:29:
cb:3c:67:40:f6:b5:12:f7:8a:a9:98:0b:b5:e2:8a:
1c:1c:5d:62:6d:20:87:eb:00:76:99:d8:bb:b0:77:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5C:21:5F:D3:64:9F:2C:CB:F9:53:F7:0A:40:0B:3F:10:72:5C:88
X509v3 Authority Key Identifier:
keyid:79:EE:11:D8:C4:29:7B:EC:54:BD:30:54:30:CA:47:72:DF:AC:84:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee4R2MQpe-xUvTBUMMpHct-shHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/NFwhX9NknyzL-VP3CkALPxByXIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f85b3d-624e-4b1a-ad33-10a206da7b6b/1/ee4R2MQpe-xUvTBUMMpHct-shHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:37:a6:b9:89:49:e8:29:6a:5c:84:8b:66:9f:46:7b:77:36:
da:0d:a1:d7:e3:1a:46:48:c5:22:87:b7:90:85:85:bb:8b:f0:
db:2e:14:3e:ff:1a:85:41:d3:50:b5:d9:1d:ee:51:ee:cf:53:
f9:12:d7:a2:3b:89:86:77:f3:2f:a2:78:83:70:6d:d2:42:64:
d7:70:ef:6f:76:2e:b2:d6:a5:95:ad:8e:2c:6b:65:1d:bb:8d:
27:09:77:bc:d8:e6:72:a5:58:e7:bc:8e:92:b7:61:52:a9:1f:
fd:5d:dc:1e:84:92:98:da:94:20:7f:fd:5e:56:75:41:9d:3b:
14:33:de:ed:8f:79:ff:8f:2b:a9:b3:9d:27:b0:7c:1c:c7:df:
6a:ab:ce:01:29:03:8b:a6:2d:be:e2:c8:90:fc:f5:66:b3:25:
dc:39:fd:b6:3f:59:8c:95:3d:32:de:ed:19:fe:32:fc:d5:44:
8a:91:c0:db:92:48:40:50:9a:5d:4a:e3:45:e8:7d:46:b6:ab:
cb:0a:21:df:30:98:67:2a:d9:ac:25:d7:ca:47:8c:7c:49:ad:
26:c4:d1:d7:69:71:6e:dd:be:93:18:3c:9b:69:d8:a6:25:09:
55:00:6f:f3:a4:b6:74:bd:b7:34:c6:38:86:de:33:4d:40:22:
5c:e1:5a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:12 2024 by rpki-client on console-ams.rpki-client.org