Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/NSEhYNB8lPYeF15S_V7zJX2hkxs.roa
File: NSEhYNB8lPYeF15S_V7zJX2hkxs.roa (raw, json)
Hash identifier: HQ3acbmUhe7fqj4I119vifR65eiRCvg0XAkKhebFEjU=
Subject key identifier: 35:21:21:60:D0:7C:94:F6:1E:17:5E:52:FD:5E:F3:25:7D:A1:93:1B
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 0185E99CEB7FFA9165CA0430DBD84381F1CA
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/NSEhYNB8lPYeF15S_V7zJX2hkxs.roa
Signing time: Wed 25 Jan 2023 15:47:33 +0000
ROA not before: Wed 25 Jan 2023 15:47:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197226
IP address blocks: 176.105.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Feb 2023 19:40:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e9:9c:eb:7f:fa:91:65:ca:04:30:db:d8:43:81:f1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Jan 25 15:47:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35212160d07c94f61e175e52fd5ef3257da1931b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:15:df:b5:48:ec:96:97:1a:61:2e:88:3b:49:
58:ad:6c:b5:99:33:04:92:8f:e7:75:ee:10:23:44:
6b:88:e3:a6:dc:7c:30:90:52:14:3e:39:2b:f5:35:
30:7b:13:f6:0b:29:de:44:a8:3f:b6:c1:5c:1a:2d:
5a:b5:c4:7e:16:8f:47:9e:50:4f:dd:b8:1a:0c:78:
f0:b1:82:1d:04:8e:71:89:a3:7f:25:87:d5:8b:e5:
16:e1:04:6a:1b:91:a3:e1:16:bd:95:2d:90:41:70:
b6:c1:7c:db:68:67:09:68:94:70:53:6f:61:81:46:
96:d3:eb:84:51:e2:c4:9e:31:4a:e1:f8:7c:74:4c:
7e:02:9b:0b:5a:4a:ae:eb:fa:7b:48:bb:99:c8:e8:
14:5d:9f:4f:fa:af:29:a7:33:62:d8:aa:fb:13:78:
d3:05:f9:0c:f1:3f:fe:cb:a9:9c:5c:52:23:98:d8:
2a:97:da:27:db:d8:24:c1:5c:a4:16:07:78:e5:50:
8a:da:7f:b9:d0:be:5d:f3:4d:6f:53:19:d5:f2:21:
b6:40:a9:ce:41:01:24:f5:e0:18:33:47:47:8c:02:
6b:0b:56:05:fa:d2:7a:5f:d4:77:fc:e1:8f:08:0b:
5f:9c:a8:4e:33:69:3b:6b:96:2e:7f:8b:00:e7:d6:
93:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:21:60:D0:7C:94:F6:1E:17:5E:52:FD:5E:F3:25:7D:A1:93:1B
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/NSEhYNB8lPYeF15S_V7zJX2hkxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.253.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:fd:ac:56:45:85:62:ba:90:3a:ba:91:5b:b3:bc:ee:bb:08:
41:85:39:01:fd:d5:f4:f5:c5:df:89:20:f9:a9:f7:96:67:0a:
24:ab:83:85:16:c7:22:f3:ad:cf:e6:c4:ac:cc:b5:8f:05:57:
d0:64:05:90:a1:76:f0:c9:82:34:d6:bc:47:1f:3a:4a:52:54:
26:23:18:1b:6d:8f:2a:d9:64:9f:e6:45:55:9b:f2:0e:b9:7c:
79:10:64:8e:98:3d:3d:e4:55:12:7d:bf:39:de:3e:23:c9:3f:
29:99:1e:d1:36:4c:c5:79:cf:af:a0:5b:2c:ae:30:01:c3:c7:
23:3c:b2:9e:64:ee:98:09:a7:63:09:9b:02:77:a9:d0:fb:8d:
38:11:9f:68:85:fd:01:99:9b:61:62:c0:27:cd:75:e1:c4:a5:
17:0e:1e:46:0f:f2:b9:26:3a:63:98:06:db:56:af:eb:e9:de:
12:1c:36:ce:14:41:be:96:57:54:dd:57:9f:cc:9b:7a:67:37:
7e:71:30:3d:b8:68:15:2e:d3:73:d4:60:79:63:c4:c6:d3:95:
0a:c4:c5:ad:fb:04:99:a1:34:e0:b2:e3:e4:0f:86:07:02:5c:
f8:5f:27:ab:7b:45:e8:54:d2:7c:9f:65:89:16:1a:b6:44:ec:
ab:c4:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org