Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/nSWPm0cuJTGW5A1hZbED0l5VvDo.roa
File: nSWPm0cuJTGW5A1hZbED0l5VvDo.roa (raw, json)
Hash identifier: uSUy536O2diU8+Qb/E1kDpLeT6yuQSQeRFfqWPglD4w=
Subject key identifier: 9D:25:8F:9B:47:2E:25:31:96:E4:0D:61:65:B1:03:D2:5E:55:BC:3A
Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial: 01856EA6AE2374E8B9EDABE4303DD822D075
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/nSWPm0cuJTGW5A1hZbED0l5VvDo.roa
Signing time: Sun 01 Jan 2023 18:44:55 +0000
ROA not before: Sun 01 Jan 2023 18:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6939
IP address blocks: 185.149.69.0/24 maxlen: 24
185.149.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 17:53:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:ae:23:74:e8:b9:ed:ab:e4:30:3d:d8:22:d0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Validity
Not Before: Jan 1 18:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d258f9b472e253196e40d6165b103d25e55bc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:6d:ba:04:20:40:80:2f:69:c7:00:62:22:
19:77:6d:1c:cd:1b:fa:ea:f1:5e:70:b6:c3:62:42:
a3:31:fc:bc:de:5f:b2:19:34:03:11:dd:fa:09:d9:
1e:08:07:6e:9a:8f:4d:d5:48:ca:c5:18:5a:06:31:
46:4f:b0:c5:cf:13:16:8e:23:3b:5d:b3:0a:e8:a3:
51:1c:ea:a7:5a:81:5f:7b:80:9b:86:13:8f:f4:e9:
2c:db:e4:dc:13:88:a9:c1:6d:df:e9:e8:2a:e6:26:
55:1b:ad:d8:d6:b4:4a:21:d7:82:b6:7a:3c:81:b3:
fe:3d:3b:7b:04:c3:b7:f0:86:db:b0:a7:80:2f:1f:
39:05:98:58:64:ed:ec:f9:a5:d5:62:26:26:d8:2e:
09:b6:17:77:65:67:72:e5:af:35:0a:e5:8c:bd:a1:
b8:a4:4c:d1:4c:b7:ea:f0:a1:24:3e:4d:94:bd:e5:
26:c7:2f:c4:ea:15:53:ae:c8:88:7c:f8:87:3c:1e:
7e:01:ee:ab:a2:e8:a4:72:b4:e8:61:5b:62:18:f7:
87:1e:1c:59:ab:1b:48:5c:0e:d1:17:89:59:0b:19:
10:8c:15:69:21:45:b7:8a:49:5b:38:72:fb:5b:8c:
12:9e:ea:e4:a7:00:67:cd:cf:e4:53:1f:09:11:ec:
42:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:8F:9B:47:2E:25:31:96:E4:0D:61:65:B1:03:D2:5E:55:BC:3A
X509v3 Authority Key Identifier:
keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/nSWPm0cuJTGW5A1hZbED0l5VvDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.69.0-185.149.70.255
Signature Algorithm: sha256WithRSAEncryption
3c:b9:36:29:dc:fa:e2:03:96:1e:74:fa:27:82:68:d2:ab:f5:
26:18:2e:78:42:2e:ad:ac:cc:dc:67:c0:f9:e6:ee:46:ac:51:
3a:7d:df:c5:30:2d:9e:24:8b:0b:d3:c4:aa:cc:d1:97:71:ff:
07:9f:41:78:57:78:6e:ce:13:92:91:59:d2:c6:86:82:5f:50:
31:13:8e:2e:af:63:5c:14:2a:0b:53:88:47:33:75:aa:32:2f:
2c:87:36:27:c8:a4:f9:1a:d4:d4:f2:63:78:98:ba:5f:c5:be:
1c:3c:c1:1c:64:51:88:65:47:83:5e:fb:9e:4b:5b:84:4b:7b:
21:7d:d1:a9:25:2a:5a:2f:0d:e6:ad:76:5b:e3:41:4d:f5:76:
97:c1:4d:91:53:e9:67:dd:9d:24:3b:e8:81:a7:e7:62:f6:e1:
66:85:19:bd:2f:ab:b5:88:5e:15:bf:fa:ed:9a:31:e9:d5:2d:
8a:79:11:ac:72:f5:7d:49:1c:52:18:d6:51:43:e2:7d:54:cd:
c8:24:38:10:7e:c6:a2:13:49:e2:95:cd:3e:dd:e2:5d:bd:f2:
c8:22:7d:ce:64:46:42:a5:35:f6:f1:4c:b4:13:d7:0f:72:2e:
13:94:3b:6a:50:fa:31:07:cf:79:17:47:5c:f3:94:bb:0f:c3:
e7:42:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:11 2024 by rpki-client on console-ams.rpki-client.org