Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nAKetL5AnIlaKmPouX7J6VZ-ugA.roa
File: nAKetL5AnIlaKmPouX7J6VZ-ugA.roa (raw, json)
Hash identifier: AFQ5U0w1TyZdCTSmoyTuaCWjChOfJyas+Iz9WcyCXqg=
Subject key identifier: 9C:02:9E:B4:BE:40:9C:89:5A:2A:63:E8:B9:7E:C9:E9:56:7E:BA:00
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018CC8020695BCFB0962104B1808B272D026
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nAKetL5AnIlaKmPouX7J6VZ-ugA.roa
Signing time: Tue 02 Jan 2024 02:30:24 +0000
ROA not before: Tue 02 Jan 2024 02:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42548
IP address blocks: 83.239.112.0/20 maxlen: 20
178.34.224.0/19 maxlen: 19
85.172.176.0/20 maxlen: 20
85.173.160.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 16 Apr 2024 10:09:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:06:95:bc:fb:09:62:10:4b:18:08:b2:72:d0:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 02:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c029eb4be409c895a2a63e8b97ec9e9567eba00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:54:6f:63:f5:41:93:57:3c:90:43:f8:44:40:
ac:6c:33:83:fd:f6:b8:eb:6b:f3:2c:8f:04:c2:e9:
47:2b:d4:82:a3:c8:ed:d9:ea:6d:73:23:dc:3f:4d:
ab:3e:51:74:eb:d7:85:ad:35:cd:5e:b4:a0:14:f9:
62:9f:f5:a3:a8:4d:1e:df:7a:21:5e:5d:30:d3:56:
e1:71:6a:5d:c1:99:d7:5d:37:c0:a4:6d:e8:59:2d:
36:e5:95:dc:b8:97:3f:72:1a:67:99:4a:99:97:d3:
12:a0:6d:07:81:76:1f:c3:59:2d:9a:56:88:db:86:
52:72:8a:4e:f3:2d:c7:27:35:2d:70:a2:cf:8f:3e:
9b:f2:db:94:0a:3b:ad:af:74:69:e2:be:76:13:66:
93:d2:bb:e6:ca:3d:2f:b5:16:98:e3:10:d7:e7:1a:
3b:93:a2:0b:06:e3:08:5c:7f:cf:b9:78:0e:65:2e:
24:45:36:71:c2:ca:8a:71:16:04:40:fc:f5:f0:37:
7d:df:96:62:b2:4a:f7:c0:43:90:dd:57:d5:76:d7:
39:b5:9f:e4:a7:5d:fa:3c:4b:30:66:8d:ca:cf:d7:
02:b1:6f:75:8e:e4:d9:18:90:c8:47:22:43:74:88:
36:0b:bb:3c:85:5a:1a:20:d8:16:4a:45:a9:dc:c9:
d6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:02:9E:B4:BE:40:9C:89:5A:2A:63:E8:B9:7E:C9:E9:56:7E:BA:00
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/nAKetL5AnIlaKmPouX7J6VZ-ugA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.239.112.0/20
85.172.176.0/20
85.173.160.0/19
178.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:15:fb:43:be:06:60:15:99:e7:7a:49:04:75:f8:18:20:1b:
6a:d5:9f:cc:52:7d:66:51:41:c7:00:48:bd:41:d0:46:71:b3:
6e:d9:a1:91:9a:23:1b:5c:a5:f6:c5:d4:da:bf:b7:1e:3d:45:
6b:57:4e:91:5e:7f:7c:e7:3d:0c:7d:d1:88:ad:62:a6:af:cc:
d0:21:9d:f8:d8:56:90:19:d5:c9:26:18:68:10:a6:21:a5:87:
55:39:71:2b:41:ee:84:ba:2a:a0:f1:68:30:d6:44:29:7d:fc:
64:a1:df:6b:30:df:23:c3:07:af:fb:49:84:38:46:b8:f6:13:
64:75:77:98:d7:ad:0f:d9:73:c7:e1:df:f4:0f:99:ef:b4:0e:
c1:6f:40:93:cb:d7:cd:e3:cd:32:19:57:83:1e:db:48:da:67:
68:3e:3c:a7:fa:f9:cd:95:04:ad:ea:8c:4b:ba:ce:53:d6:8d:
12:ba:6d:4f:28:d6:52:88:76:cc:64:0a:d6:c7:f4:b8:73:19:
21:b9:17:6a:95:3d:eb:11:01:f4:a5:cf:d7:e7:06:d5:33:44:
c2:f9:c4:9f:ae:c5:3c:22:59:2a:04:de:a9:d3:4d:1c:74:10:
ce:35:dc:74:c5:38:46:1f:ad:e0:c7:99:a1:c8:0c:37:9f:9b:
81:74:14:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:56 2024 by rpki-client on console-fra.rpki-client.org