Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Nzd_Tgok2--C202JTUEtp3EwIN4.roa
File: Nzd_Tgok2--C202JTUEtp3EwIN4.roa (raw, json)
Hash identifier: IAiGp4ge+gJgFK69NO/fKw82EU6R5TV0aVlLU7BL+4Q=
Subject key identifier: 37:37:7F:4E:0A:24:DB:EF:82:DB:4D:89:4D:41:2D:A7:71:30:20:DE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E73672EB849C8318BD780FD1DB7BBF61D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Nzd_Tgok2--C202JTUEtp3EwIN4.roa
Signing time: Mon 25 Mar 2024 02:18:45 +0000
ROA not before: Mon 25 Mar 2024 02:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.14.166.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
93.123.119.0/24 maxlen: 24
212.87.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 Apr 2024 00:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:73:67:2e:b8:49:c8:31:8b:d7:80:fd:1d:b7:bb:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 25 02:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37377f4e0a24dbef82db4d894d412da7713020de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:36:0f:83:f9:8d:8d:f4:e7:11:78:85:ec:dd:
fb:cf:5a:90:1a:6b:b6:b2:0e:49:0f:7c:88:0d:34:
24:00:d0:80:15:ce:d9:93:82:31:de:31:f8:4a:be:
5a:91:d8:08:07:43:79:6f:3f:b2:f0:c8:6b:c7:4c:
c3:4d:e7:db:95:50:20:54:86:f2:09:af:bc:a1:be:
39:8f:f8:78:f8:6f:70:6f:02:6f:ea:ef:cc:82:db:
90:8c:9a:5a:3b:b8:91:3a:27:66:f3:a4:14:69:e8:
55:89:d2:4d:50:20:8a:94:00:e6:61:f4:ae:40:e1:
b9:f1:25:27:02:88:02:e5:c2:c9:fe:12:27:1f:1a:
7a:6d:11:80:1e:7d:5a:c5:a7:72:f7:f2:b5:12:a7:
a5:84:8e:1a:0a:57:0e:0f:f7:10:c8:05:f2:80:86:
4b:7e:cc:25:d6:dd:e3:db:a2:2f:14:6f:47:0a:df:
44:37:b2:60:3f:6b:f5:41:a3:8b:b6:0a:b5:a6:47:
84:e8:5f:e0:b7:cb:72:bb:58:30:77:4e:50:2a:36:
d7:f6:aa:d1:aa:da:e7:6f:9d:ac:72:8a:e4:f3:4c:
2b:c3:6b:17:86:d0:e2:e2:37:7c:28:81:35:fe:71:
18:35:f1:17:8c:a2:86:78:32:c5:da:18:43:c5:9d:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:37:7F:4E:0A:24:DB:EF:82:DB:4D:89:4D:41:2D:A7:71:30:20:DE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Nzd_Tgok2--C202JTUEtp3EwIN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/24
93.123.74.0/24
93.123.119.0/24
212.87.205.0/24
Signature Algorithm: sha256WithRSAEncryption
92:5e:43:59:81:89:05:49:37:ef:d6:cc:e0:90:43:e0:01:10:
4b:af:2d:b3:11:64:66:c3:8c:00:4e:4c:85:34:d6:fd:c9:a2:
53:49:20:65:82:77:d4:29:92:ad:7d:fa:68:59:32:fa:5a:e5:
88:b5:33:f6:d0:12:e7:7a:3b:f1:75:6b:f0:0c:a9:20:53:c4:
ac:f2:69:10:dd:e2:5f:4e:cd:0b:38:79:9e:21:02:73:1f:2f:
52:29:4f:56:70:b8:5f:16:dc:00:29:6a:45:38:2d:dc:4d:2f:
9f:53:89:0a:2e:ed:bd:58:1d:a0:5c:78:89:cf:57:80:94:e2:
22:f5:9f:16:85:7d:fc:17:7a:fd:c6:b4:08:db:1a:33:ff:67:
24:d0:72:8a:fb:5d:0e:1e:c3:08:f2:c2:88:81:13:1c:cd:08:
9f:63:0a:24:73:d1:01:31:48:08:13:c3:d9:f3:76:64:fd:13:
35:bd:f7:9e:5b:68:42:18:d6:fe:4f:52:e9:5b:69:bf:8a:f9:
49:91:a7:d9:ed:5a:de:6f:43:39:76:74:9b:9b:ea:3a:fb:b0:
36:ab:d6:70:16:1f:a9:85:a4:0a:72:f6:52:2f:e7:37:67:a4:
de:bb:3b:5b:39:4d:66:dc:94:bb:7f:30:a9:01:52:c8:66:cc:
3e:50:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 12 01:07:43 2024 by rpki-client on console-ams.rpki-client.org