Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/nsj9IyeaRD-jKVMGuurm3ATBvD4.roa
File: nsj9IyeaRD-jKVMGuurm3ATBvD4.roa (raw, json)
Hash identifier: rwq6mX5LLcaAljAqmhaOmp/677sVAouI5Mt/axBy9E4=
Subject key identifier: 9E:C8:FD:23:27:9A:44:3F:A3:29:53:06:BA:EA:E6:DC:04:C1:BC:3E
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 01880B50DF7A5F7AAED4A60DF80292CDFF58
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/nsj9IyeaRD-jKVMGuurm3ATBvD4.roa
Signing time: Thu 11 May 2023 14:57:09 +0000
ROA not before: Thu 11 May 2023 14:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206143
IP address blocks: 185.195.63.0/24 maxlen: 24
185.195.62.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:50:df:7a:5f:7a:ae:d4:a6:0d:f8:02:92:cd:ff:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: May 11 14:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ec8fd23279a443fa3295306baeae6dc04c1bc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e4:15:a0:77:f4:5e:31:19:48:ba:25:c5:fe:
f2:80:f9:fe:ce:f8:28:50:dc:7c:fd:bd:b7:69:17:
24:53:7a:e1:71:c6:93:c1:02:14:88:ef:56:e8:0f:
2b:8a:24:11:eb:a2:93:a6:9d:c9:72:c2:ac:2d:60:
d0:ff:90:09:08:4a:aa:0d:91:3a:55:00:83:d8:7d:
4b:14:33:40:64:eb:65:68:5e:63:c8:b0:47:25:33:
f9:46:82:fb:8b:e1:c5:02:dc:b2:5e:b7:c0:17:b8:
94:fc:26:5f:e7:e7:87:8f:c6:70:19:3c:06:42:0b:
31:3f:36:76:6d:2a:f8:22:ea:54:25:41:b5:20:d0:
90:e3:ef:db:e7:cc:07:13:01:bb:0b:49:60:2e:ad:
de:38:d8:01:51:78:f0:5f:48:1f:05:e8:3e:5d:a2:
90:c5:22:b4:ed:fd:a0:09:bb:de:46:7a:c1:e9:b6:
5a:ad:13:5d:3a:06:fc:be:1b:66:d2:16:de:b4:7d:
6c:6d:13:d8:dc:30:e6:20:c2:52:46:82:66:29:3a:
48:bd:c0:8c:2a:36:2a:7e:9e:cf:65:8f:41:cf:a9:
76:ce:36:7d:52:5b:66:15:fd:68:b6:48:ca:b3:6a:
68:d9:39:5f:04:45:9f:3e:e5:55:f3:09:58:dc:aa:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:FD:23:27:9A:44:3F:A3:29:53:06:BA:EA:E6:DC:04:C1:BC:3E
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/nsj9IyeaRD-jKVMGuurm3ATBvD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.62.0/23
Signature Algorithm: sha256WithRSAEncryption
46:54:f6:14:e0:09:79:e7:40:7d:03:1b:0e:cb:e7:18:c0:c5:
6c:66:2c:03:5c:0d:47:c2:6f:b1:3f:59:38:40:b2:4d:b6:02:
7a:5b:cf:e4:c0:eb:f0:06:7e:16:4d:ab:e0:52:0e:04:6c:d1:
94:1f:52:1c:7d:14:9b:53:63:1a:f6:f4:79:0e:5f:05:72:63:
71:24:30:59:42:ef:e6:48:9f:5b:77:c4:9f:0c:92:69:fd:77:
df:b9:2e:26:62:9a:c1:c7:95:2b:79:3a:39:b6:0c:27:1b:82:
24:6f:e0:70:e7:87:ec:9b:be:17:f9:c7:bc:97:8c:f5:1d:35:
10:d7:8a:a3:33:2a:4a:65:f9:88:47:70:e6:f1:1e:fc:9f:2d:
39:f3:fd:3b:25:ac:59:be:e4:32:67:55:bd:bb:a2:ac:c2:65:
87:31:40:14:9d:ed:e3:7e:66:33:1e:96:7c:bc:25:74:dc:29:
d6:d1:10:09:2a:57:ed:0f:5f:4e:dc:cb:66:05:81:95:66:e8:
97:3c:d7:58:16:e1:41:3f:f5:e8:04:58:f5:42:c9:ad:59:aa:
70:4e:ff:c0:0e:d9:bd:dc:36:67:d6:d0:77:e2:9e:95:8c:8f:
eb:ca:af:b3:9b:e9:c6:9f:53:0e:a8:cc:10:54:5e:01:67:5a:
29:65:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:38 2024 by rpki-client on console-ams.rpki-client.org