Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/NIC5T3ajgunFSpj8tiIZOIZoJmA.roa
File: NIC5T3ajgunFSpj8tiIZOIZoJmA.roa (raw, json)
Hash identifier: GP84/DM0suMaijuvduvAgcELlb5ePOviA9RSVOpYOws=
Subject key identifier: 34:80:B9:4F:76:A3:82:E9:C5:4A:98:FC:B6:22:19:38:86:68:26:60
Certificate issuer: /CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Certificate serial: 019210878103EAC911EA33168A58F3A9A3D9
Authority key identifier: 29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/NIC5T3ajgunFSpj8tiIZOIZoJmA.roa
Signing time: Fri 20 Sep 2024 17:42:48 +0000
ROA not before: Fri 20 Sep 2024 17:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 37.77.28.0/24 maxlen: 24
37.77.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 17:37:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:87:81:03:ea:c9:11:ea:33:16:8a:58:f3:a9:a3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29993007c7c92df6178e7cb43183fd7f52a526d8
Validity
Not Before: Sep 20 17:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3480b94f76a382e9c54a98fcb622193886682660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:71:4c:42:6c:d5:42:7d:8c:cf:6d:d4:f3:
9f:2b:04:a4:20:8d:48:32:26:56:d1:2e:9c:ef:7d:
40:a1:e9:46:1b:c6:4c:a5:68:48:0a:82:0c:77:ff:
b3:0d:7b:b5:7c:c3:d0:a3:40:7d:75:f6:ed:e0:7a:
0e:05:31:e6:8d:87:ea:94:ce:02:85:04:f2:e2:5d:
3d:ed:d2:de:13:3b:c8:e5:26:e0:a9:73:c0:98:79:
38:33:57:38:26:89:b8:cb:f3:2a:8c:25:32:07:56:
eb:5a:d0:d2:aa:40:6b:26:21:5c:8d:cf:7c:d3:c9:
5f:f5:34:62:15:36:4c:b7:d9:fc:dc:3e:0c:73:31:
54:fd:7e:6e:10:31:62:a2:47:96:0a:b4:88:19:77:
42:16:da:ad:bc:ab:90:64:c4:63:08:ec:ce:79:54:
93:a8:4c:e6:1f:af:73:84:ac:e2:d4:f5:dd:de:a2:
c6:c6:3c:60:9c:77:73:22:e8:b6:dd:40:76:5f:1d:
ce:5d:1f:73:a6:b0:ea:5b:a7:0a:0c:82:ab:d9:7a:
cc:4f:cc:06:69:a0:dc:be:d4:d5:b4:74:37:88:bd:
ca:e4:c7:46:93:8a:04:c2:22:44:05:b1:9c:f6:2c:
4e:a6:23:90:d7:c9:69:a2:f3:e1:0c:54:6d:14:f6:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:80:B9:4F:76:A3:82:E9:C5:4A:98:FC:B6:22:19:38:86:68:26:60
X509v3 Authority Key Identifier:
keyid:29:99:30:07:C7:C9:2D:F6:17:8E:7C:B4:31:83:FD:7F:52:A5:26:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZkwB8fJLfYXjny0MYP9f1KlJtg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/NIC5T3ajgunFSpj8tiIZOIZoJmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dc9b6f-3a6d-449f-8b89-1e829ffa1c3a/1/KZkwB8fJLfYXjny0MYP9f1KlJtg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.28.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:df:f9:ed:32:ce:de:ad:d8:c2:19:a2:7f:65:2f:05:dd:65:
70:45:06:9a:6d:8e:60:ca:ec:ab:13:6a:7f:d4:50:1c:c5:9d:
78:bf:7d:e9:0c:e3:75:21:11:0d:06:42:05:25:52:89:e4:2a:
92:ec:0a:83:f3:74:a4:2f:2f:1b:e5:c7:dd:4f:e9:1b:26:b4:
b0:fd:a4:fe:df:05:fb:1c:51:db:16:84:0e:0d:0f:f8:da:ba:
a1:c3:0e:00:6c:99:ac:37:0e:d9:1d:c3:9f:25:0d:3e:73:5a:
1a:92:3c:74:f8:b4:14:a9:09:92:2e:ae:81:40:19:67:6e:d5:
6f:6b:1f:c7:88:be:f7:81:c1:0e:23:57:d8:ec:27:d8:6f:aa:
7f:5d:13:73:7f:ee:a6:d1:96:d6:a7:64:61:6f:0d:24:8a:5b:
53:d9:83:23:a9:a9:6d:6e:7d:80:c9:1c:63:ea:c1:09:ac:10:
81:10:50:d8:23:0a:42:41:7a:aa:a0:40:ab:90:7a:ea:c4:70:
ee:30:9d:7b:3c:16:50:88:86:ce:27:b2:e1:2b:c8:3d:cd:1c:
20:63:d7:1a:25:a8:c4:7e:44:42:b0:4e:3d:00:db:d1:28:1a:
4d:d6:ea:07:b5:ca:c3:51:d4:70:85:57:f1:34:b0:0f:85:6f:
61:1d:8e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 20:31:13 2024 by rpki-client on console-fra.rpki-client.org