Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/NhWDdo6AdbC0Jr-9zp6KLVbl7ZE.roa
File: NhWDdo6AdbC0Jr-9zp6KLVbl7ZE.roa (raw, json)
Hash identifier: YFlp10KGFH6y5irp3/Gq/oX+jCEig6sFyYSCsPxGqw4=
Subject key identifier: 36:15:83:76:8E:80:75:B0:B4:26:BF:BD:CE:9E:8A:2D:56:E5:ED:91
Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06
Certificate serial: 018573160E4B2A526EFD2362CE39BD4FCA9D
Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/NhWDdo6AdbC0Jr-9zp6KLVbl7ZE.roa
Signing time: Mon 02 Jan 2023 15:25:03 +0000
ROA not before: Mon 02 Jan 2023 15:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25003
IP address blocks: 192.115.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:16:0e:4b:2a:52:6e:fd:23:62:ce:39:bd:4f:ca:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06
Validity
Not Before: Jan 2 15:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=361583768e8075b0b426bfbdce9e8a2d56e5ed91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4d:c7:bc:85:be:10:89:c4:39:f7:18:20:08:
30:a0:89:dd:ff:ce:1f:3a:d0:57:82:b2:c9:ee:5a:
11:97:bc:4e:46:c4:ea:85:7a:65:20:34:95:63:80:
b9:ba:9e:95:4f:fd:9c:ec:51:ce:7c:a4:55:f3:32:
b4:a4:9e:41:e8:e8:7a:21:b9:cf:70:12:e6:26:75:
bb:aa:94:e7:2e:8b:7d:f7:b2:f7:8f:e5:52:5d:c3:
fa:bc:6a:66:cd:da:b3:b5:e6:1d:bc:e0:8c:b0:d2:
4a:3e:85:80:2c:04:b8:66:7d:59:2e:a3:11:ae:1a:
6c:57:11:19:29:20:55:80:ed:92:e1:bb:36:3e:b9:
50:96:39:ed:60:03:dd:7b:be:e1:db:65:95:b3:cc:
d7:2e:23:d0:33:1a:f3:ab:92:36:a8:b5:85:b6:14:
6a:6d:bd:e2:86:24:0e:10:f7:ad:70:ca:9b:2a:32:
22:15:6c:33:43:22:7b:1a:70:cc:2f:01:0c:e4:c7:
7f:76:57:c2:1a:aa:f9:81:43:a6:62:12:ed:9f:94:
f3:0e:11:87:d9:c8:d6:20:8a:c3:df:e6:03:ef:5c:
62:38:c7:44:73:ae:b3:b7:c9:77:02:2d:a2:63:aa:
c0:cb:94:d6:78:13:3c:52:9c:af:44:9a:74:13:3b:
41:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:15:83:76:8E:80:75:B0:B4:26:BF:BD:CE:9E:8A:2D:56:E5:ED:91
X509v3 Authority Key Identifier:
keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/NhWDdo6AdbC0Jr-9zp6KLVbl7ZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.115.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:39:f8:d6:c5:48:6d:2c:ce:9e:87:7a:9b:41:89:d8:1b:95:
28:d1:ef:1d:8b:53:6f:f5:2f:89:2d:b0:56:5c:15:e0:ff:4a:
b7:f7:49:25:3d:ca:20:ac:3e:73:95:04:9a:6b:bc:ba:e6:2f:
dc:29:4f:14:22:96:7b:c3:e1:10:6b:1c:53:41:35:99:cd:a7:
28:04:21:b0:2c:53:2c:2f:a0:96:0c:fa:b9:5e:33:6e:44:d6:
c6:db:84:32:06:75:3f:12:c3:9b:0d:34:e2:02:72:fd:59:e8:
f8:1a:d6:10:f1:f0:39:d0:da:01:e0:cf:68:2f:c4:3e:2e:0b:
f7:07:98:9c:65:0a:3d:9d:18:ad:d3:d8:b2:13:05:2a:69:8b:
44:12:84:ca:f0:82:8a:7e:14:4c:ac:22:8b:8f:75:d1:d9:9c:
59:52:ef:a2:0c:3c:d9:00:1d:22:7b:97:1a:b5:95:25:95:71:
36:aa:9d:30:aa:d6:40:b0:8a:33:60:f6:77:0a:d4:71:5d:b0:
11:5f:ed:c7:0a:61:76:e8:c8:7b:7e:cf:97:09:f4:7e:3f:0d:
2e:25:3a:9f:0e:65:91:67:b7:04:df:ec:1a:33:fc:06:68:3f:
83:5c:b1:f3:7e:8d:db:4c:0b:5d:2d:5a:16:53:78:38:b3:b5:
f0:ad:d6:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:31 2024 by rpki-client on console-fra.rpki-client.org