Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ntRF9oSR4rQnNEDqbQWlAQnEyC8.roa
File: ntRF9oSR4rQnNEDqbQWlAQnEyC8.roa (raw, json)
Hash identifier: EwDll5yswSre7hpfPG/JOPG33iGN1mQPGjC9fS3QVPU=
Subject key identifier: 9E:D4:45:F6:84:91:E2:B4:27:34:40:EA:6D:05:A5:01:09:C4:C8:2F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E2D86E4F907CB4516652187863DBE537F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ntRF9oSR4rQnNEDqbQWlAQnEyC8.roa
Signing time: Mon 11 Mar 2024 12:39:58 +0000
ROA not before: Mon 11 Mar 2024 12:39:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 192.124.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Mar 2024 13:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:86:e4:f9:07:cb:45:16:65:21:87:86:3d:be:53:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 11 12:39:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ed445f68491e2b4273440ea6d05a50109c4c82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:24:b4:90:f6:ac:b2:22:35:15:c1:d5:7f:
3c:0a:e6:a4:2e:02:e8:01:5c:7b:f2:ea:e1:4f:e5:
fc:8e:53:fb:e0:18:ee:2b:bb:f8:5d:52:fc:2e:6b:
a7:74:63:41:e8:d2:a0:c9:1b:a7:1e:79:98:63:2d:
86:2b:de:95:79:9e:0b:d6:30:db:69:ae:39:55:7a:
54:de:6b:67:a3:1b:0d:5b:24:12:b0:f8:bd:31:ce:
d1:3c:02:41:83:a3:38:29:d4:ea:e7:d7:fd:d3:b9:
9c:e7:33:aa:18:a7:02:cb:9b:61:73:25:3f:f4:b1:
b5:0e:02:af:32:88:f2:68:df:a4:6e:0e:1c:8b:fb:
c9:b4:75:fe:af:ff:22:8b:fe:ff:1a:bf:69:e9:b5:
92:ed:ca:37:3d:b6:99:49:14:ee:72:ab:11:95:41:
22:63:b0:82:f9:62:c6:a9:d7:7a:d3:0d:f4:80:54:
5f:d7:d2:10:f8:a0:b9:b1:56:2e:2c:f9:c2:fe:9f:
db:30:ca:af:13:2f:32:3f:87:0c:ef:47:3e:36:45:
fd:4a:2f:87:ce:50:5a:c6:0b:e8:5f:ec:60:70:a1:
96:8a:13:db:a7:e9:56:8d:2c:67:2c:f3:92:98:5e:
b9:1f:27:96:5a:1f:00:9b:a5:86:40:8e:6d:ec:74:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:45:F6:84:91:E2:B4:27:34:40:EA:6D:05:A5:01:09:C4:C8:2F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/ntRF9oSR4rQnNEDqbQWlAQnEyC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.172.0/24
Signature Algorithm: sha256WithRSAEncryption
10:07:4f:3a:15:27:c9:74:32:a8:bb:ba:d3:5b:95:03:be:72:
4f:1a:b3:9f:d4:56:66:05:48:d4:64:d4:61:47:d0:f6:11:a2:
73:23:30:6c:8d:77:c6:14:64:a8:d1:a4:c3:92:0a:7e:83:9f:
10:b7:d9:da:c4:f0:ad:9e:e6:2e:cc:97:84:a4:af:1f:41:58:
6c:6f:17:75:29:14:1f:2d:62:e7:b1:4d:7e:18:11:fc:ca:f2:
59:5a:8b:97:07:e3:f6:5d:83:b3:f0:91:f9:03:19:37:a0:56:
06:d3:57:d9:9e:8f:f7:27:05:47:4b:80:27:ab:06:96:41:f5:
d6:52:83:67:bf:47:68:3e:da:1a:d7:54:2c:6c:fb:39:cd:85:
4c:cd:08:46:81:c6:d0:15:e9:6e:c5:3a:bc:1a:8d:28:a4:63:
5f:c9:13:68:60:38:8b:c3:ed:71:23:dd:7d:25:04:07:99:88:
10:3b:11:18:12:5d:f8:55:96:19:29:f1:c2:15:48:fd:d3:c4:
5b:ab:ed:8c:6b:b6:53:0f:82:90:59:d6:cb:17:ad:d4:fc:6b:
67:ee:66:68:e6:2f:1d:cc:08:39:58:72:bd:ac:26:e8:8e:6d:
d0:8c:46:31:65:9d:69:9c:a1:25:64:be:08:c9:1e:2a:7d:14:
0a:b4:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:46 2024 by rpki-client on console-ams.rpki-client.org