Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Nc1KS1_QiwcIixv7Dl5wUBLUIi0.roa
File: Nc1KS1_QiwcIixv7Dl5wUBLUIi0.roa (raw, json)
Hash identifier: 0VdM8AUMhmi/IGlrBLqNse1lpXyVMPHlJVuD7xmNgPE=
Subject key identifier: 35:CD:4A:4B:5F:D0:8B:07:08:8B:1B:FB:0E:5E:70:50:12:D4:22:2D
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0192D965728FECE44E5CE9A0D09EE5E22B7A
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Nc1KS1_QiwcIixv7Dl5wUBLUIi0.roa
Signing time: Tue 29 Oct 2024 17:49:17 +0000
ROA not before: Tue 29 Oct 2024 17:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 147.185.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 13:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d9:65:72:8f:ec:e4:4e:5c:e9:a0:d0:9e:e5:e2:2b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 29 17:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35cd4a4b5fd08b07088b1bfb0e5e705012d4222d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:44:11:05:88:ee:91:3f:39:4f:0c:31:ea:
09:6a:f2:03:65:0a:0a:33:e4:0a:78:34:87:e5:46:
20:3a:a3:ea:6d:4a:7d:82:0f:d5:94:70:86:55:d3:
72:81:67:eb:d4:e6:e6:bf:1e:7c:73:4f:96:54:97:
03:ef:d0:ff:30:f0:b4:03:81:29:49:f0:be:b5:60:
e5:89:6c:3c:a2:98:cb:52:dc:09:f5:5c:a7:c4:03:
15:79:f8:6b:71:6d:6c:f8:30:29:20:24:30:a6:b2:
de:5f:de:41:9f:d8:14:09:51:93:b6:b4:c1:93:3f:
55:8e:9d:54:4e:d5:d1:b3:34:30:3e:c1:c8:e2:71:
cd:29:b8:29:b1:70:17:08:39:cf:c7:c3:8a:8f:d1:
7b:5a:75:de:b9:05:4a:f3:06:11:cd:12:3e:9e:a5:
88:09:d0:69:a5:2d:39:ca:e7:f1:89:0c:d1:3b:d5:
2b:a1:7c:e0:75:a2:e1:7b:3c:b7:a4:1f:c4:0d:9a:
28:fb:b1:30:5d:cd:23:98:fa:e4:08:66:d7:c3:6e:
d4:9b:a9:1b:02:f1:00:2d:a2:6b:dd:be:0b:b2:05:
81:3b:5f:ea:b6:3c:d9:87:b8:15:e9:fd:1c:89:51:
c3:fc:47:88:ae:1d:9a:5e:8a:82:05:91:29:c2:f2:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CD:4A:4B:5F:D0:8B:07:08:8B:1B:FB:0E:5E:70:50:12:D4:22:2D
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/Nc1KS1_QiwcIixv7Dl5wUBLUIi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.207.0/24
Signature Algorithm: sha256WithRSAEncryption
09:17:e6:7b:5e:a6:66:56:b3:6a:6d:55:ec:7d:67:e4:ea:9d:
9b:97:c5:ad:4c:cc:4d:8a:25:77:da:3c:7e:71:60:2e:56:82:
ca:64:51:93:47:05:ea:55:fe:9b:72:3c:47:07:74:e6:2f:ce:
3f:fb:f6:03:0b:5e:39:bd:c7:34:ef:6c:e9:ea:4c:7c:c2:30:
e5:9d:e7:00:3b:57:ee:e5:a3:c4:e1:53:a3:41:6f:e2:43:2e:
36:93:37:4b:f0:20:57:6e:5c:9d:b6:ee:a4:de:ac:25:76:72:
02:62:7e:89:c3:5b:0a:b8:83:85:1e:dc:0a:06:03:61:d6:a3:
2d:b1:59:a9:97:93:7c:ce:63:07:03:0d:45:7a:f4:96:12:90:
15:88:0b:f8:dc:3d:bf:89:30:fe:22:cb:ed:29:a3:99:3b:70:
37:c8:ab:5b:2a:9c:be:db:b1:7f:8b:64:7a:4a:18:90:f8:b6:
53:85:15:1f:82:85:17:f3:31:e8:c1:3a:45:3b:9e:88:9e:9b:
3f:84:aa:7a:41:ae:58:66:7d:37:37:ae:cf:6b:50:39:ed:6e:
55:ac:ad:f6:00:cf:84:af:8d:ad:17:b9:ee:8a:c9:45:f1:ea:
4e:a4:7f:87:6d:3c:33:ee:a7:f8:a4:5e:53:5a:b9:3f:d7:7e:
5e:a0:80:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 18:26:16 2024 by rpki-client on console-ams.rpki-client.org