Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/NI0946H-P3lvWl5bYMwfzFBZSXE.roa
File: NI0946H-P3lvWl5bYMwfzFBZSXE.roa (raw, json)
Hash identifier: WB40nNWXWj6NkU6wy3vzIEFdA9JM7OAnPrrFAdDaLdQ=
Subject key identifier: 34:8D:3D:E3:A1:FE:3F:79:6F:5A:5E:5B:60:CC:1F:CC:50:59:49:71
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 018A37D4117F63685AC87C19C29A773D8CB3
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/NI0946H-P3lvWl5bYMwfzFBZSXE.roa
Signing time: Sun 27 Aug 2023 16:29:19 +0000
ROA not before: Sun 27 Aug 2023 16:29:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206683
IP address blocks: 194.8.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:37:d4:11:7f:63:68:5a:c8:7c:19:c2:9a:77:3d:8c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Aug 27 16:29:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=348d3de3a1fe3f796f5a5e5b60cc1fcc50594971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e6:b0:4f:9c:7c:06:d0:0e:97:7b:24:8a:0b:
fa:b6:dc:89:df:e6:be:f2:91:25:62:a0:dc:43:a7:
e2:39:6a:ba:5b:de:cb:f9:49:3b:f6:81:de:1c:6f:
f3:90:5e:ad:5e:1b:a3:58:16:ec:76:91:0e:2c:4f:
2f:8b:25:bc:2b:de:a3:44:bc:9d:63:56:07:38:b5:
02:4c:68:43:7f:a7:e6:94:16:9e:6d:06:bb:9c:90:
5e:92:a1:08:9c:5a:a4:30:b6:26:54:e5:58:66:42:
ae:c8:f9:17:d6:c5:d9:9d:2d:fb:14:a8:67:9d:ec:
aa:17:cc:c3:59:73:4e:a9:1d:a5:53:b4:60:ea:f6:
ec:17:b8:54:6a:b7:bb:80:67:7a:bf:71:10:b7:24:
9f:cd:89:1e:2d:ee:40:04:5e:1e:ea:45:b8:28:5f:
e4:8d:00:02:4e:e6:2d:e2:dc:10:17:8b:a9:15:50:
68:2e:7b:db:07:c3:a3:a8:17:85:03:d2:61:e1:89:
62:6f:a7:2c:cb:59:c2:17:61:4b:a4:b0:38:4f:7c:
3b:65:1a:32:6f:dc:95:44:1f:b9:f3:6c:59:25:2b:
cc:d4:61:96:ad:4b:f1:e0:14:5b:2c:cd:a5:d3:83:
17:55:0f:7e:8a:7b:a2:bb:c4:3d:da:d3:2b:e0:df:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:3D:E3:A1:FE:3F:79:6F:5A:5E:5B:60:CC:1F:CC:50:59:49:71
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/NI0946H-P3lvWl5bYMwfzFBZSXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.238.0/24
Signature Algorithm: sha256WithRSAEncryption
77:27:34:27:db:be:af:57:43:49:76:70:1d:36:47:e7:cc:b1:
6d:81:d6:5d:32:ec:34:2a:7b:92:66:5c:60:f1:7e:88:32:46:
96:55:a0:91:b4:fc:6d:51:f5:9f:10:4c:cc:47:2d:84:ad:70:
6c:57:53:c4:ea:40:b8:72:57:08:24:50:b9:50:2d:d0:8f:e1:
7d:7b:e3:17:e5:29:e5:81:78:ea:fc:5c:73:80:e2:5c:93:9f:
4d:bf:a4:4b:0f:55:cf:34:59:5a:f7:05:ce:c7:d5:9b:dd:89:
a3:26:60:5f:27:ba:f9:22:19:48:e4:67:a5:8e:e2:41:29:88:
df:98:de:19:39:b1:73:56:1a:5e:ce:13:73:d6:f0:05:3f:df:
42:18:28:26:c9:00:94:72:af:3d:3e:74:07:ad:cd:50:cf:98:
4a:55:5d:26:cb:02:25:f3:39:b5:2f:b0:42:0b:b9:a1:a1:09:
28:59:5f:be:b6:b8:c1:3e:17:d8:b1:f6:b2:ef:45:60:7c:43:
ec:bf:3a:de:79:58:35:e1:12:85:39:cd:02:75:58:81:a4:7f:
82:cf:31:d5:98:0c:ab:be:f3:f3:f6:06:94:5a:df:65:c3:b4:
6a:20:f7:fe:9c:9a:6b:30:75:a6:08:f0:bd:c0:bc:8b:c9:f2:
39:32:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:34 2024 by rpki-client on console-fra.rpki-client.org