Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/nfPT1iWdjJiv3h3rYIM1PiMR5q0.roa
File: nfPT1iWdjJiv3h3rYIM1PiMR5q0.roa (raw, json)
Hash identifier: TzNDuTYa7SwWTfWwPYhS78mbpqabmw/+cC2DEQoYGJQ=
Subject key identifier: 9D:F3:D3:D6:25:9D:8C:98:AF:DE:1D:EB:60:83:35:3E:23:11:E6:AD
Certificate issuer: /CN=872076f188ea4a6ce5f7767f73176dd4a793941b
Certificate serial: 0189C12B75B27276E053CEDBBF41F7D8FDAA
Authority key identifier: 87:20:76:F1:88:EA:4A:6C:E5:F7:76:7F:73:17:6D:D4:A7:93:94:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/nfPT1iWdjJiv3h3rYIM1PiMR5q0.roa
Signing time: Fri 04 Aug 2023 15:29:58 +0000
ROA not before: Fri 04 Aug 2023 15:29:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 85.193.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c1:2b:75:b2:72:76:e0:53:ce:db:bf:41:f7:d8:fd:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=872076f188ea4a6ce5f7767f73176dd4a793941b
Validity
Not Before: Aug 4 15:29:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9df3d3d6259d8c98afde1deb6083353e2311e6ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:25:18:50:e7:95:be:27:34:99:73:5f:ac:
57:7e:44:dd:45:87:a3:92:90:60:4e:b8:47:88:e7:
66:a6:05:6c:12:a8:da:a1:e6:2b:72:3c:e9:14:24:
84:6c:43:17:ee:55:aa:3d:e4:e4:37:82:af:05:5d:
ec:26:af:1b:c0:ee:0a:36:e6:3a:d3:ce:cd:ac:79:
81:49:b7:b7:35:6e:1e:b3:3f:fd:ae:be:a5:da:57:
7b:bf:fb:32:14:1b:31:b6:b2:e5:71:1c:0a:70:55:
63:48:18:c6:80:32:d9:3b:fe:95:b5:9d:44:ca:9e:
32:3d:e9:76:5d:2e:60:f9:ae:0a:a1:b8:ad:49:92:
37:a2:99:6f:69:19:bd:9c:56:3d:9b:88:18:ee:0f:
96:9b:91:56:92:0a:58:f5:26:5a:89:05:c9:ee:9d:
2e:ce:3f:77:4f:c8:c3:98:6a:4d:3a:d3:63:d2:ee:
a8:d1:82:68:cc:61:50:2e:d2:38:49:28:d0:3a:7b:
85:d5:99:16:4c:9b:7f:52:28:68:3b:21:a3:31:d5:
79:ea:2e:a9:cb:63:cf:f3:5c:53:ce:f6:c9:0d:c3:
c3:20:c2:c4:08:15:e1:b8:0c:43:26:2a:4e:60:f6:
98:e8:75:ba:09:bb:f8:fe:2b:d7:82:53:a2:1f:7d:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F3:D3:D6:25:9D:8C:98:AF:DE:1D:EB:60:83:35:3E:23:11:E6:AD
X509v3 Authority Key Identifier:
keyid:87:20:76:F1:88:EA:4A:6C:E5:F7:76:7F:73:17:6D:D4:A7:93:94:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyB28YjqSmzl93Z_cxdt1KeTlBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/nfPT1iWdjJiv3h3rYIM1PiMR5q0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0038cd-3975-4893-94f6-3e558ac2465e/1/hyB28YjqSmzl93Z_cxdt1KeTlBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.193.77.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:4a:63:f5:c4:9f:2f:f7:2c:7e:1a:ea:5b:65:e4:32:27:64:
b6:3a:cb:73:83:f0:c1:70:55:fc:f7:92:7b:7a:dd:c6:6d:8d:
4e:e3:20:14:c7:9e:a4:c9:a0:9f:f4:e5:12:9d:98:f9:5b:de:
44:84:48:00:b2:c0:f7:c9:46:be:40:34:63:19:21:64:70:2f:
b4:fd:f5:fe:99:32:e0:ca:dc:0a:20:04:18:3e:96:95:a1:16:
cd:a5:46:a2:d1:6c:9e:a7:e0:1e:01:cf:e0:27:5f:42:ba:17:
05:96:68:87:cf:d8:04:35:13:fa:4c:9c:7d:37:5e:0d:74:e3:
0d:4d:f9:ae:1a:91:cf:f8:64:8f:8f:9c:08:7d:64:29:f1:a0:
35:3c:7c:4f:42:2f:1c:39:fd:5d:9a:ae:5d:1c:d8:5c:50:59:
a8:d4:32:06:69:14:ea:66:97:f2:24:eb:6c:f0:0a:43:49:2e:
c9:db:d7:95:72:b1:a0:34:ff:32:86:9c:6b:d9:ce:a0:dd:f8:
69:60:cb:9e:2c:ce:88:8e:b1:80:86:0b:f2:2b:36:d8:27:35:
9d:38:b5:30:6f:64:1e:c3:d7:d4:c7:4b:c8:b4:6e:4e:a4:ed:
3d:c7:f5:ec:f5:64:99:c3:34:3a:56:6a:ff:6d:24:e9:f7:09:
a0:f2:05:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:19 2024 by rpki-client on console-ams.rpki-client.org