Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/NBfA00BWIVd0Sf3worAM5sQVg_g.roa
File: NBfA00BWIVd0Sf3worAM5sQVg_g.roa (raw, json)
Hash identifier: vWMCvJDiNWsOJ2fFxzjyiOr+V6HuxmcScCGVQJb2REU=
Subject key identifier: 34:17:C0:D3:40:56:21:57:74:49:FD:F0:A2:B0:0C:E6:C4:15:83:F8
Certificate issuer: /CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Certificate serial: 018858188FF014B661B661D12079DDA13E48
Authority key identifier: 99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/NBfA00BWIVd0Sf3worAM5sQVg_g.roa
Signing time: Fri 26 May 2023 12:46:24 +0000
ROA not before: Fri 26 May 2023 12:46:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12349
IP address blocks: 212.64.225.0/24 maxlen: 24
164.59.128.0/23 maxlen: 24
164.59.130.0/24 maxlen: 24
164.59.136.0/21 maxlen: 24
164.59.144.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:18:8f:f0:14:b6:61:b6:61:d1:20:79:dd:a1:3e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99d3a2d6fad651678e96d24e24d19d71fe380409
Validity
Not Before: May 26 12:46:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3417c0d3405621577449fdf0a2b00ce6c41583f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:93:e1:63:ce:17:d1:f6:8c:2f:a2:38:24:
5d:46:b0:75:f5:47:57:e6:83:98:96:6c:c1:42:7a:
c6:63:bf:d0:50:5f:91:45:07:22:8a:d1:1c:df:6a:
cc:8b:c0:17:33:73:50:28:7d:3b:e2:94:3a:0e:df:
0e:26:d2:25:2e:5e:d6:eb:1d:d4:6d:3c:68:fb:55:
27:20:b0:7c:0b:bf:48:e6:0a:37:17:bd:86:f1:b7:
c1:c3:03:ef:8c:a0:16:7a:51:26:a4:52:66:ba:8f:
a0:ae:f8:28:ed:ae:75:23:eb:fd:c0:c2:f5:19:ff:
b1:78:9d:68:af:d2:18:00:69:17:b3:95:47:f0:b6:
23:5d:ce:4c:45:48:b0:ac:c7:46:10:55:72:16:66:
83:ba:02:ba:b7:7c:61:68:07:15:9e:1e:2c:83:df:
a3:5a:a8:d2:f0:65:85:9e:13:d9:94:1a:68:fd:7d:
38:da:32:55:06:fc:ea:91:fa:ec:45:c5:88:73:89:
92:72:79:bb:8f:f7:16:c6:6c:a4:4d:fe:6c:7c:45:
e1:e7:7a:64:9e:da:10:9c:c5:43:b5:e4:69:f0:91:
20:41:d7:9a:1a:d3:42:82:6b:3c:37:69:46:79:84:
d7:04:17:bc:9c:e9:38:db:19:5c:55:9f:fa:f4:9b:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:C0:D3:40:56:21:57:74:49:FD:F0:A2:B0:0C:E6:C4:15:83:F8
X509v3 Authority Key Identifier:
keyid:99:D3:A2:D6:FA:D6:51:67:8E:96:D2:4E:24:D1:9D:71:FE:38:04:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdOi1vrWUWeOltJOJNGdcf44BAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/NBfA00BWIVd0Sf3worAM5sQVg_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/410d94-af78-4397-adfe-48d738c5947d/1/mdOi1vrWUWeOltJOJNGdcf44BAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.59.128.0-164.59.130.255
164.59.136.0-164.59.145.255
212.64.225.0/24
Signature Algorithm: sha256WithRSAEncryption
41:d0:98:e8:a9:49:af:4e:85:24:e7:24:9c:98:5c:fe:c5:2b:
fd:2f:71:3d:00:4e:b7:ae:35:98:b0:02:ed:15:53:72:80:e5:
94:05:fe:8a:c9:06:77:44:9e:29:20:04:27:10:30:1b:1a:69:
0a:b5:99:34:cf:2b:d8:15:dc:c0:57:49:fd:06:7d:08:52:45:
d4:90:ce:e2:78:2b:08:2b:9d:2d:54:29:b0:fc:16:79:00:9c:
f4:57:6c:89:a2:75:60:12:f6:52:31:54:c0:09:75:6f:4a:a9:
46:37:85:e7:74:49:9d:4f:54:2e:5e:eb:18:a4:a8:85:c3:f8:
e8:02:29:e3:9f:7e:c1:3b:22:58:c2:b0:fa:0b:04:95:6e:ff:
18:3b:a5:dd:ff:6b:01:f3:96:ea:75:0d:da:da:b0:fb:72:46:
4e:ea:30:cd:29:7d:76:07:18:c4:d7:60:00:03:a4:db:33:fe:
30:62:57:d7:a9:9e:1c:c6:e7:3f:8b:4c:46:fe:a6:4b:9f:60:
30:c0:22:12:4f:20:dc:d7:80:95:0a:39:3d:f7:ef:39:e6:6b:
22:28:50:fb:03:f0:d1:99:d8:34:7d:07:53:05:cb:90:30:35:
84:09:57:7f:be:40:16:51:4e:97:24:e4:ab:06:ee:2b:8d:78:
fe:2f:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:40 2024 by rpki-client on console-fra.rpki-client.org