Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWWGLMXe_0L44d2z3zg3b1ffPSk.roa
File: NWWGLMXe_0L44d2z3zg3b1ffPSk.roa (raw, json)
Hash identifier: nIdwBecRVh5nN/sZDoXBO+qPwYT0w0c+yLFrn15ECCQ=
Subject key identifier: 35:65:86:2C:C5:DE:FF:42:F8:E1:DD:B3:DF:38:37:6F:57:DF:3D:29
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018964D5609A994E066CFD484FF50E583ADC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWWGLMXe_0L44d2z3zg3b1ffPSk.roa
Signing time: Mon 17 Jul 2023 17:10:52 +0000
ROA not before: Mon 17 Jul 2023 17:10:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210993
IP address blocks: 194.87.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:d5:60:9a:99:4e:06:6c:fd:48:4f:f5:0e:58:3a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 17 17:10:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3565862cc5deff42f8e1ddb3df38376f57df3d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:05:22:40:1e:0b:01:fc:93:ff:5d:68:c7:
01:30:46:83:8d:45:a3:a1:57:7c:a8:9c:ac:16:a9:
85:35:e9:83:25:e5:b1:3e:60:d8:c4:dd:21:fe:08:
78:69:85:19:ac:d1:a4:f3:ed:1e:65:ea:0d:c7:e0:
49:01:05:f6:32:16:3c:60:36:9b:bd:07:7f:c3:fd:
0f:1f:f7:66:54:61:08:22:cf:90:75:74:d0:8d:1a:
80:e8:18:a8:d7:30:35:ea:34:55:13:30:fa:2d:53:
54:d4:59:3a:53:9c:ba:b2:30:ff:dc:da:cd:0b:f7:
87:fa:ff:fd:ff:af:b2:b2:f9:68:76:33:48:bb:55:
cc:87:82:61:39:fe:d0:14:7f:a9:fe:8a:bc:ad:26:
01:dd:b4:4e:c6:82:f8:d4:42:ed:93:ce:48:5b:50:
a8:29:97:01:b7:08:bb:59:d4:b6:2d:83:c4:b1:d2:
24:63:b2:ef:41:89:6a:72:55:54:61:87:a6:1d:ca:
c6:2e:e4:32:87:9e:67:2a:8b:42:b2:d6:8f:2a:3d:
4a:48:f0:c5:f9:0d:27:2d:20:a5:0d:f2:e0:c6:6c:
a8:10:c8:98:58:dd:cd:f0:c4:4d:e6:dd:09:6d:d3:
f7:98:6f:82:81:67:c7:2f:41:82:cb:43:da:65:44:
ac:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:65:86:2C:C5:DE:FF:42:F8:E1:DD:B3:DF:38:37:6F:57:DF:3D:29
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWWGLMXe_0L44d2z3zg3b1ffPSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.209.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a3:60:36:5c:82:e7:9f:c0:3d:7d:96:06:a0:8a:64:d7:f5:
90:44:6d:b3:a8:64:07:0d:12:80:ed:e2:ba:17:c3:14:33:a5:
2e:3f:76:06:28:ae:60:07:ac:4d:65:7b:35:75:ba:aa:42:44:
56:99:bc:3d:3e:7d:c0:ee:51:e8:0c:2b:b9:ea:08:b3:27:94:
99:8a:83:36:8f:04:9c:51:48:80:ed:5f:04:9f:0b:0b:e3:2c:
df:e2:66:55:71:b3:83:3b:c8:89:a0:9f:4f:8e:a9:59:77:ef:
de:22:4b:89:5b:27:15:82:ce:94:be:13:32:b8:d4:59:e5:2e:
ee:45:a3:8d:82:7a:0c:45:ad:c7:9e:e7:a5:0a:6d:df:c9:06:
90:d8:e5:c3:4c:9b:ab:78:7b:4d:4b:d2:db:b7:95:15:31:30:
88:0d:17:2d:b8:2c:71:f4:55:b7:5d:ae:e8:24:de:27:8f:b7:
1b:e4:40:36:78:c5:54:b0:2f:a1:e5:0d:75:0c:37:c4:7c:71:
1b:c4:5a:09:7d:7a:be:c5:61:eb:47:91:48:14:94:9a:7e:c3:
9f:76:75:88:d8:04:f8:85:17:f4:7d:e8:0d:dd:02:0a:7c:b2:
c3:d4:f0:bb:72:56:10:38:95:dd:48:8c:7c:95:fa:b8:81:c3:
fe:14:78:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:20 2024 by rpki-client on console-fra.rpki-client.org