Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/Njz8OeUbNDVA_3ArPxy2z4aWaiI.roa
File: Njz8OeUbNDVA_3ArPxy2z4aWaiI.roa (raw, json)
Hash identifier: 3J26kQVMqXoEBxQML7ndpceTGYP/0j73JA2WLd1ALQA=
Subject key identifier: 36:3C:FC:39:E5:1B:34:35:40:FF:70:2B:3F:1C:B6:CF:86:96:6A:22
Certificate issuer: /CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Certificate serial: 01856F4B81A557CA911FA4AF6D49F469CA9C
Authority key identifier: B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/Njz8OeUbNDVA_3ArPxy2z4aWaiI.roa
Signing time: Sun 01 Jan 2023 21:44:57 +0000
ROA not before: Sun 01 Jan 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213245
IP address blocks: 185.204.230.0/24 maxlen: 24
185.204.229.0/24 maxlen: 24
185.204.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:81:a5:57:ca:91:1f:a4:af:6d:49:f4:69:ca:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b292094d691df4a7c38f16b75557e9c26d4ac692
Validity
Not Before: Jan 1 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=363cfc39e51b343540ff702b3f1cb6cf86966a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:81:ca:06:e7:90:f0:a7:50:6d:6b:92:b0:
bf:df:38:ee:7b:00:6e:7c:f3:eb:82:26:24:7a:f9:
4a:bf:01:f3:4d:19:bf:b2:3b:a8:df:f6:75:c7:27:
d6:6d:9f:d2:73:89:2c:e4:47:7d:c8:2b:eb:84:e4:
99:4d:23:be:b9:b8:dd:af:e1:46:55:2e:6d:84:b8:
23:3d:6b:0a:b8:cb:9b:a4:67:93:f6:22:3b:ea:b8:
25:de:c8:be:b2:fb:7b:ac:b3:c3:28:f0:85:ac:f4:
43:f9:ea:a4:81:df:0a:70:da:a5:f2:9c:5d:2d:0c:
4c:ee:5f:4d:36:6e:05:09:21:a3:14:45:54:9f:51:
69:d0:97:3a:54:12:06:2a:77:f3:ad:6b:5f:89:7b:
de:b9:f9:e8:43:5d:da:a9:99:bd:a2:3f:7f:f0:09:
47:cd:dc:4b:4e:23:c8:53:18:73:e9:e3:3f:a1:5b:
94:a9:3c:6c:61:99:96:85:6e:ed:b6:ad:06:b3:9f:
a2:dc:a1:10:c7:77:f5:fc:38:f3:c0:32:bd:f9:1c:
5a:94:ef:0a:db:a4:10:c9:e0:0a:b0:7e:36:08:56:
47:44:fb:a4:22:f6:b7:6e:16:0c:af:09:b1:92:74:
86:d3:19:54:2c:59:af:4c:2e:f7:6f:9a:8c:f2:19:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3C:FC:39:E5:1B:34:35:40:FF:70:2B:3F:1C:B6:CF:86:96:6A:22
X509v3 Authority Key Identifier:
keyid:B2:92:09:4D:69:1D:F4:A7:C3:8F:16:B7:55:57:E9:C2:6D:4A:C6:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/spIJTWkd9KfDjxa3VVfpwm1KxpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/Njz8OeUbNDVA_3ArPxy2z4aWaiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e7b932-fc21-4a61-aef0-15a093e2bb8f/1/spIJTWkd9KfDjxa3VVfpwm1KxpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.229.0-185.204.231.255
Signature Algorithm: sha256WithRSAEncryption
1e:c6:8f:48:04:4a:02:0d:f2:ed:ea:76:a6:0a:9a:9a:00:d5:
cd:a4:7b:a3:75:c2:b1:8c:2f:1f:64:ac:d7:79:39:3e:33:65:
89:fb:3d:59:67:89:d4:f8:48:93:9b:1b:54:c2:3e:d1:42:cc:
e6:b8:be:44:21:8a:fc:df:8a:de:65:4e:80:fe:d1:27:19:c1:
83:9e:a0:0b:5c:c4:82:09:66:ad:e7:5a:13:d1:6d:7d:e4:02:
02:65:48:53:d4:e1:07:50:05:fa:9f:ac:c4:6e:a2:74:82:12:
7d:c6:46:b2:d1:4a:02:b7:15:54:03:2c:da:24:69:d3:32:59:
fe:12:3a:fa:a7:12:db:d0:1d:1f:ed:f0:4e:f8:9e:56:fd:d1:
4c:90:c9:04:c4:4b:42:81:11:08:85:16:ba:be:7d:4c:43:ea:
cb:f7:83:8f:88:37:a0:4e:92:91:94:83:fe:72:d3:82:d8:f7:
48:01:43:a9:bc:ba:4c:c2:b3:1f:5b:8e:e1:8f:1b:e8:88:27:
14:4f:c6:d2:a7:09:4c:0a:a8:78:f3:e8:1d:e9:5f:4f:cc:c5:
8e:39:b0:d7:79:a5:1b:f3:e2:47:d2:47:c5:31:f4:95:07:65:
d0:22:63:78:39:05:a9:39:13:4e:f6:3a:92:79:38:85:11:5f:
c5:f6:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:53 2024 by rpki-client on console-ams.rpki-client.org