Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/nxJj-KL-UlLwqKhg18RijzkdyWg.roa
File: nxJj-KL-UlLwqKhg18RijzkdyWg.roa (raw, json)
Hash identifier: XQY2p2atD3D/VSh8Hj5AwTHWU4kqmcvM65h0zVvi7Gw=
Subject key identifier: 9F:12:63:F8:A2:FE:52:52:F0:A8:A8:60:D7:C4:62:8F:39:1D:C9:68
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01857054CF2A9A3E204252DA1AE8BE592C25
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/nxJj-KL-UlLwqKhg18RijzkdyWg.roa
Signing time: Mon 02 Jan 2023 02:34:44 +0000
ROA not before: Mon 02 Jan 2023 02:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 194.110.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:cf:2a:9a:3e:20:42:52:da:1a:e8:be:59:2c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 2 02:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f1263f8a2fe5252f0a8a860d7c4628f391dc968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:da:17:3d:2c:3b:12:c1:14:0b:8c:17:18:8a:
72:47:89:5b:3e:d1:5d:8e:86:29:c9:52:38:4a:13:
2c:9b:ca:fd:c5:ce:40:03:d8:49:13:75:da:62:6d:
8a:77:a8:18:28:3f:d5:6b:f9:a6:f1:ff:80:bb:37:
3d:51:f2:bc:cc:00:d5:5c:c9:4b:64:45:d2:7b:a6:
92:45:65:8e:44:0b:33:58:5f:a4:cb:d7:66:65:69:
5d:cb:88:2f:10:81:0a:56:04:70:5a:27:5c:62:97:
a0:23:57:9f:64:20:e3:dd:8f:b7:86:55:2e:43:06:
2b:70:eb:55:04:5f:56:05:6b:07:c8:3e:3a:61:6c:
e2:d8:f4:78:eb:87:0b:05:f8:eb:05:a4:78:f3:29:
d1:49:6f:e1:35:06:d2:71:96:3e:df:c4:b3:16:e0:
4f:21:a8:62:33:ab:3d:96:f6:f4:6e:34:5b:ab:ee:
ac:03:50:69:b9:1a:66:00:ed:cf:70:ac:21:18:29:
91:fc:5f:15:89:59:53:0e:22:3b:97:e3:34:39:f8:
33:05:97:0d:97:0e:4f:2a:48:e4:4c:17:59:0e:26:
bb:72:e4:16:7b:40:2e:b5:43:89:05:17:17:16:71:
2f:e9:60:c1:bc:f5:bf:55:93:3e:3c:2e:95:5f:58:
39:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:12:63:F8:A2:FE:52:52:F0:A8:A8:60:D7:C4:62:8F:39:1D:C9:68
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/nxJj-KL-UlLwqKhg18RijzkdyWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.247.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c2:2a:91:52:34:b7:ba:48:78:c3:63:f2:f1:95:40:88:a5:
50:ab:28:49:a0:c5:1b:29:d1:ce:fd:fa:2e:cf:04:00:d8:88:
57:02:91:03:a9:5c:df:05:b8:30:72:8c:d4:67:c0:01:37:92:
a7:19:24:f4:53:9b:af:52:a2:ae:b3:f1:99:ce:3a:d2:3b:bf:
02:d4:fd:a6:42:a0:2a:0c:99:a5:23:50:25:5d:81:d5:59:73:
98:dc:09:36:39:65:df:0f:95:13:95:9e:12:00:13:5b:17:1b:
a0:6c:c4:b5:a3:82:cf:9d:ac:8f:62:79:62:9c:37:e9:a5:0c:
e7:e5:d7:89:35:1f:65:68:89:aa:70:45:80:f3:c9:22:d3:11:
25:7e:cb:74:3c:de:a6:13:3f:0c:53:c3:ca:b3:da:a3:6b:f6:
c4:0c:df:6c:3a:8d:1b:14:84:1a:02:9f:98:cb:74:6d:44:89:
65:af:f4:5e:82:fd:53:f7:ab:4b:c5:0c:48:f7:5a:91:a5:4d:
6c:91:9c:a0:4a:b0:86:85:47:c5:ae:06:f2:90:9a:d8:b3:18:
f0:41:b9:5c:28:50:e4:e1:21:86:a6:92:3e:44:26:fc:ac:6e:
01:f4:21:ad:a2:a4:2c:c1:0d:bb:af:fd:58:c0:5c:d7:86:cd:
d0:ae:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org