Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/NEFNnEDhFdCUOelbmxePFv5XD3U.roa
File: NEFNnEDhFdCUOelbmxePFv5XD3U.roa (raw, json)
Hash identifier: 73G+B0kX61NQoSKsgLQYuotEhhWqHpfB0FJfWWM0Enw=
Subject key identifier: 34:41:4D:9C:40:E1:15:D0:94:39:E9:5B:9B:17:8F:16:FE:57:0F:75
Certificate issuer: /CN=08018478914871aab0e1c0036d3626ebad6e20cc
Certificate serial: 018CC2DAB344F2ADB6EA96D04D10C529A0A6
Authority key identifier: 08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/NEFNnEDhFdCUOelbmxePFv5XD3U.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212650
IP address blocks: 185.190.88.0/24 maxlen: 24
92.61.172.0/22 maxlen: 22
92.61.168.0/21 maxlen: 24
2a10:6540::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 30 May 2024 15:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b3:44:f2:ad:b6:ea:96:d0:4d:10:c5:29:a0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08018478914871aab0e1c0036d3626ebad6e20cc
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34414d9c40e115d09439e95b9b178f16fe570f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c9:c1:01:d5:7d:50:a1:c2:6d:6c:cc:f2:45:
74:7b:81:5d:bd:a2:ff:1a:2d:fe:44:fe:1e:2b:c0:
b5:99:e6:47:da:5c:ad:06:6a:a6:bf:b6:b6:2f:dc:
2b:aa:d4:6c:70:e0:a3:11:f6:8f:3e:24:84:b9:8c:
8d:3f:cc:8e:ae:59:ef:34:58:db:c0:9d:13:f3:8d:
ca:c1:2c:8c:65:96:5e:97:9f:26:2b:63:70:86:fc:
14:12:01:5f:26:de:18:ee:18:55:48:f2:60:f9:04:
81:9f:4b:ad:93:09:62:e3:2c:70:ee:5a:db:11:0a:
2d:c6:21:b3:bd:db:d9:4c:cf:19:d9:11:31:3d:71:
10:94:a1:cf:9c:d9:4c:42:30:b0:0e:41:5c:59:29:
66:77:0a:50:e9:18:ba:7e:53:4b:38:e5:7c:af:50:
46:ed:49:95:80:6e:fa:4f:c1:cf:24:ea:19:98:c5:
54:cc:85:f2:be:ae:16:b0:1e:d8:a9:4f:12:9c:46:
56:78:f1:c7:e2:6c:20:bb:92:4f:9b:53:d6:00:20:
68:98:73:12:a2:ad:06:a2:aa:85:cf:98:36:b5:90:
02:46:4b:80:b3:b8:6d:7b:1a:e2:8f:83:4a:8a:aa:
9c:09:ac:e5:4b:29:b5:a3:36:e2:7a:78:bb:45:65:
f9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:4D:9C:40:E1:15:D0:94:39:E9:5B:9B:17:8F:16:FE:57:0F:75
X509v3 Authority Key Identifier:
keyid:08:01:84:78:91:48:71:AA:B0:E1:C0:03:6D:36:26:EB:AD:6E:20:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAGEeJFIcaqw4cADbTYm661uIMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/NEFNnEDhFdCUOelbmxePFv5XD3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5f83c4-640d-4ff3-9cf4-60627e115269/1/CAGEeJFIcaqw4cADbTYm661uIMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.168.0/21
185.190.88.0/24
IPv6:
2a10:6540::/29
Signature Algorithm: sha256WithRSAEncryption
03:b3:8d:eb:e9:ef:ab:30:e1:54:61:a0:af:1c:70:46:b8:27:
f3:2a:74:8b:15:dd:f4:47:2a:5c:c6:ef:cf:69:2d:87:ef:ff:
1b:78:d1:23:4e:0a:de:6c:7f:44:13:aa:88:e3:68:24:db:99:
e9:d0:3f:37:02:68:6b:c3:85:a5:b3:91:dd:2b:8b:e3:09:be:
7a:54:a4:d8:04:88:71:ed:6f:10:e4:d1:db:30:1f:30:a6:38:
2a:07:cd:64:67:61:f8:66:d0:cf:7a:a3:b5:8e:66:5a:d7:22:
c5:36:f8:05:7e:99:8c:2b:37:2c:06:3d:b5:ab:46:1f:5a:68:
30:d9:eb:27:bf:72:5a:18:79:28:3d:75:ba:6e:a9:c2:dc:29:
f1:2b:97:56:6a:94:7f:d8:50:90:e0:cc:69:59:33:9a:bd:78:
1d:43:66:2a:16:3f:ae:ee:62:b3:d8:37:55:60:7f:7a:41:71:
41:e3:7d:b9:7d:6f:87:19:50:65:63:78:11:2c:91:75:3c:46:
44:2f:a2:e3:5b:50:58:87:79:63:a7:ef:4b:f8:a4:9a:5b:26:
b7:ee:89:a0:0b:90:b3:b6:99:68:55:1e:07:76:36:d4:31:4a:
f6:3d:f3:91:64:1e:9a:6e:aa:05:00:84:ab:b3:44:39:13:81:
26:cf:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:39 2024 by rpki-client on console-fra.rpki-client.org