Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/NuXfOr1Odk5dZoTwFtJAa_xR4z0.roa
File: NuXfOr1Odk5dZoTwFtJAa_xR4z0.roa (raw, json)
Hash identifier: VB8IwK+n6etNH3PndTHJ9QiAJ6HyDqe8T7dZ8YclRlo=
Subject key identifier: 36:E5:DF:3A:BD:4E:76:4E:5D:66:84:F0:16:D2:40:6B:FC:51:E3:3D
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 018BE1DD0AD2BAB9D0E56A954314CF1EC4A1
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/NuXfOr1Odk5dZoTwFtJAa_xR4z0.roa
Signing time: Sat 18 Nov 2023 09:57:21 +0000
ROA not before: Sat 18 Nov 2023 09:57:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42846
IP address blocks: 104.247.162.0/24 maxlen: 24
104.247.161.0/24 maxlen: 24
104.247.160.0/24 maxlen: 24
104.247.165.0/24 maxlen: 24
104.247.164.0/24 maxlen: 24
104.247.163.0/24 maxlen: 24
104.247.166.0/24 maxlen: 24
104.247.169.0/24 maxlen: 24
104.247.168.0/24 maxlen: 24
104.247.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e1:dd:0a:d2:ba:b9:d0:e5:6a:95:43:14:cf:1e:c4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Nov 18 09:57:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36e5df3abd4e764e5d6684f016d2406bfc51e33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:15:8f:b4:34:0d:60:c6:06:16:d2:cd:07:d9:
32:ae:f5:28:3b:04:49:01:66:cc:d5:f2:35:50:a2:
7e:5b:0e:6e:44:5b:d8:f9:ad:4d:21:b5:1c:bd:08:
e8:de:af:3f:85:28:51:7c:c2:e1:6b:c7:84:0f:a7:
7e:12:a6:c3:67:c2:82:7f:f7:b7:e2:5b:16:12:48:
41:1f:c5:2d:5b:7b:ee:be:11:97:be:e4:6c:d6:1a:
4a:e9:12:c8:67:08:be:3b:af:14:98:e9:84:a6:47:
e8:b1:a0:45:ad:96:3a:06:7b:72:df:35:be:a4:69:
4e:33:db:38:73:0c:ac:c8:0e:5b:53:36:29:33:26:
5e:4f:06:d3:1d:e7:d7:49:b4:04:ab:f5:ef:06:47:
98:8c:7a:71:64:75:f1:2a:2f:f7:10:27:3e:18:01:
e7:4d:c6:0b:c8:b0:2b:bd:32:71:ea:bf:b5:1e:bd:
e1:81:db:56:a9:07:c5:f6:cc:07:a9:52:42:61:76:
79:53:05:50:0f:71:78:c6:80:96:66:b1:0c:f3:0b:
d5:7b:22:15:f2:31:f9:6c:83:ea:3d:f2:4d:a4:1c:
b3:86:c1:3d:f7:86:7f:d9:75:f3:93:40:be:9c:8b:
25:ea:12:92:98:0a:a8:a3:f5:b9:d9:c4:62:3a:51:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E5:DF:3A:BD:4E:76:4E:5D:66:84:F0:16:D2:40:6B:FC:51:E3:3D
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/NuXfOr1Odk5dZoTwFtJAa_xR4z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.160.0-104.247.169.255
Signature Algorithm: sha256WithRSAEncryption
51:a9:f4:6e:54:bc:ff:f9:b5:a2:aa:b2:50:47:64:ab:25:b6:
b3:72:c9:a0:03:22:38:32:de:37:f1:3c:ed:59:bc:5c:e8:a4:
48:68:44:a9:15:32:70:59:d1:14:af:c7:d7:b6:7d:42:a7:3a:
b0:04:e1:e8:29:3d:4c:3e:a1:f9:cd:3e:43:9e:35:8b:d5:5a:
01:b3:8d:04:28:d9:9a:73:a8:5d:c1:f8:e1:93:17:17:b4:0a:
4c:b7:76:31:7a:26:14:47:31:29:09:93:1c:02:ff:64:23:d0:
5a:ca:6b:f5:9a:47:80:7e:5e:9c:f6:c7:cd:b5:4e:93:94:c4:
5a:47:47:33:aa:18:01:e5:39:cb:b2:fa:a8:37:45:14:1a:f0:
0f:78:ab:01:af:e7:5d:28:0a:47:36:93:38:f3:1a:5f:f0:a1:
5b:2a:b3:74:9d:88:36:d1:d9:90:02:90:4d:bd:b6:a6:98:11:
fd:53:6d:44:d7:a0:09:bc:aa:0f:b2:09:0c:5e:75:ee:86:e4:
43:f3:3b:1f:d7:2e:40:b1:25:d1:5a:19:60:30:4e:71:d7:5b:
4e:c2:19:2b:84:21:75:51:17:4e:48:6c:84:e0:de:49:73:1e:
d3:fc:c3:54:4e:6d:d9:d3:60:f8:c4:8e:3c:38:2f:1a:df:ce:
e3:be:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:55 2024 by rpki-client on console-ams.rpki-client.org