Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nbC3BR2OPNsvYjp4agySC39N96o.roa
File: nbC3BR2OPNsvYjp4agySC39N96o.roa (raw, json)
Hash identifier: FDvE537Lt8VoyG6Yp5Rr+UQXj/HTJl4xIlBeYwTffjg=
Subject key identifier: 9D:B0:B7:05:1D:8E:3C:DB:2F:62:3A:78:6A:0C:92:0B:7F:4D:F7:AA
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D7A931628674C3E35E611DA9A3B686DFB
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nbC3BR2OPNsvYjp4agySC39N96o.roa
Signing time: Mon 05 Feb 2024 18:41:16 +0000
ROA not before: Mon 05 Feb 2024 18:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 194.32.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 14:36:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7a:93:16:28:67:4c:3e:35:e6:11:da:9a:3b:68:6d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 5 18:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9db0b7051d8e3cdb2f623a786a0c920b7f4df7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4b:d5:80:16:e4:9f:4d:04:a6:4e:53:72:d5:
53:f8:af:94:3c:68:a4:f8:fe:e9:00:f7:bb:ba:0d:
ed:f0:35:c9:54:98:07:a4:75:59:86:bb:af:dc:da:
f0:54:9b:6a:82:67:70:a8:a6:47:3e:59:ae:6e:58:
45:1e:a6:5b:75:8c:27:c9:5b:a0:9d:5d:99:29:fb:
43:df:18:8d:0c:04:3e:e9:8c:91:c9:9b:12:05:73:
cd:3f:aa:8c:95:79:b4:48:e7:00:9b:51:73:b1:7d:
ce:41:43:47:83:b7:8b:ce:1e:5f:38:64:8e:65:68:
7d:53:53:73:67:e6:64:88:d1:ee:f1:f7:94:fc:45:
15:b9:26:61:d1:9f:e1:78:59:8a:72:f8:45:40:d7:
cb:63:bd:ff:bf:37:8c:74:18:aa:d2:4e:5d:fa:b8:
18:b6:d3:84:cb:60:5f:b5:51:6f:ca:e8:61:43:a6:
81:71:d2:cd:9c:bb:a2:0e:8f:0e:7f:cc:bc:1e:71:
dc:d8:c7:3c:2d:04:03:32:53:b4:9f:e3:7e:f3:f3:
c9:5f:7f:8f:cd:8d:9f:12:4e:10:21:21:6d:42:f1:
f0:54:b2:4b:87:bf:4d:2d:cb:51:cb:95:fc:aa:16:
d5:15:a1:b7:96:df:0e:53:fc:1a:25:7a:86:83:3d:
52:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:B7:05:1D:8E:3C:DB:2F:62:3A:78:6A:0C:92:0B:7F:4D:F7:AA
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/nbC3BR2OPNsvYjp4agySC39N96o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.242.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0f:a0:a6:c8:02:b2:f7:a5:3c:d9:eb:c6:b7:55:1d:06:34:
16:34:e2:d6:d2:82:46:fd:a1:b8:02:f3:cf:6e:1a:4a:a5:c8:
7c:4a:45:32:8b:09:ab:4b:68:3f:31:69:03:db:ef:a8:a3:ba:
03:a4:a4:1e:ed:0a:36:75:93:89:9f:12:77:23:2c:81:3b:69:
7e:71:4d:35:ee:89:d7:e0:83:62:4e:48:62:e5:ac:be:8b:90:
ff:d2:ef:ef:8f:3f:05:c8:a8:0f:29:af:0f:cf:ef:51:5c:10:
36:26:8e:2b:f7:0a:fc:93:c0:d1:b8:2d:5b:0b:0a:a7:fd:4a:
ce:01:69:8a:47:b8:6e:ea:e7:51:c7:63:35:e6:30:85:e6:47:
ff:88:39:09:55:82:7f:e0:60:9a:d7:26:d9:4f:29:1b:62:fa:
01:2a:7e:b5:49:58:ff:b7:22:57:87:b9:2e:d6:48:36:44:61:
3a:b5:c7:13:54:a9:1a:6e:69:77:d8:dd:7f:5f:f3:71:d3:14:
32:08:7e:43:ca:0c:d7:43:0c:d9:a4:c0:47:1e:0e:ef:cc:82:
ae:14:f2:f9:00:05:26:2b:b1:92:6e:4c:d2:83:3a:bb:d1:63:
02:9a:db:e4:c1:bb:93:84:75:57:26:99:ca:75:16:a1:55:f4:
c0:10:3d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:23 2024 by rpki-client on console-fra.rpki-client.org