Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/nbiml7_AzEOcRD2Hoz4xv1mQ55c.roa
File: nbiml7_AzEOcRD2Hoz4xv1mQ55c.roa (raw, json)
Hash identifier: cLG7kgRQcDZVnFtead6k8l98oREoAPaGKmqyxGSycJo=
Subject key identifier: 9D:B8:A6:97:BF:C0:CC:43:9C:44:3D:87:A3:3E:31:BF:59:90:E7:97
Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b
Certificate serial: 01879EE184E2F2BCBBA59569B7A1BCEDB245
Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/nbiml7_AzEOcRD2Hoz4xv1mQ55c.roa
Signing time: Thu 20 Apr 2023 13:36:32 +0000
ROA not before: Thu 20 Apr 2023 13:36:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 77.91.96.0/24 maxlen: 24
77.91.112.0/24 maxlen: 24
77.91.115.0/24 maxlen: 24
77.91.114.0/24 maxlen: 24
77.91.113.0/24 maxlen: 24
77.91.118.0/24 maxlen: 24
77.91.117.0/24 maxlen: 24
77.91.116.0/24 maxlen: 24
77.91.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:e1:84:e2:f2:bc:bb:a5:95:69:b7:a1:bc:ed:b2:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b
Validity
Not Before: Apr 20 13:36:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db8a697bfc0cc439c443d87a33e31bf5990e797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d1:86:5a:2c:b3:86:76:7a:bb:e2:71:ad:83:
6c:b3:d2:31:6c:6e:42:98:2d:be:f1:8e:e4:6c:11:
93:23:e9:c8:01:11:5b:33:28:22:15:14:48:52:27:
ef:d8:68:f0:55:8c:39:0f:e7:2c:04:78:2a:91:04:
75:09:b2:5a:62:bf:c1:b8:10:fd:78:89:37:cf:c8:
53:31:4a:e7:f6:d9:83:20:ea:a3:1d:b7:a2:72:2c:
2d:a9:d9:86:9f:25:a8:5a:91:1e:c1:c7:83:fa:63:
e5:6e:63:3d:c4:c4:18:95:c2:bf:ac:fc:07:a2:43:
48:ec:28:b8:37:b0:a4:2c:88:26:1c:05:88:af:b4:
39:94:bc:8b:a6:7b:20:ff:d8:a5:dd:41:2f:3d:d9:
3a:c7:00:52:47:4c:41:da:e7:98:71:d3:46:10:4b:
03:43:02:c8:57:fe:51:ab:68:93:55:a4:cf:8a:b9:
ce:5b:61:8b:2c:97:c5:dd:cd:1b:30:7b:99:db:a2:
03:72:51:9c:e6:a6:9c:dc:37:ad:7a:ab:7c:14:47:
81:95:4c:1b:a2:fd:4b:8e:9c:89:99:7e:83:91:7f:
cb:50:a8:ec:00:37:c2:c3:34:bd:4d:be:f1:d0:9f:
70:e3:31:58:d2:08:6a:a0:4b:e8:83:71:79:46:34:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B8:A6:97:BF:C0:CC:43:9C:44:3D:87:A3:3E:31:BF:59:90:E7:97
X509v3 Authority Key Identifier:
keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/nbiml7_AzEOcRD2Hoz4xv1mQ55c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.96.0/24
77.91.112.0/21
Signature Algorithm: sha256WithRSAEncryption
77:0f:ad:78:99:19:f0:d0:06:0c:12:34:f5:57:2b:d5:a5:a1:
46:9a:2c:60:2b:a6:cc:fe:a9:48:c3:9d:67:e2:02:e9:ee:ee:
94:98:df:22:d7:44:2d:f1:31:21:72:db:2a:14:bb:a1:d1:e4:
39:bc:6c:bb:97:ac:b4:0b:cd:ba:d8:0f:73:08:b2:01:66:ba:
3b:6b:1a:63:77:b9:47:fe:03:2d:ab:7d:f0:e6:ff:d7:c4:b8:
4b:98:1b:65:66:97:93:cb:d6:3b:29:4e:f3:80:1f:f2:ae:47:
70:22:9f:b1:c5:a8:9a:12:ef:83:fb:59:8b:c0:70:d7:35:fa:
3f:ba:5a:c2:e0:61:fd:98:0f:c3:b5:51:81:51:47:30:9d:65:
53:bb:89:eb:45:b5:16:64:9b:1c:f1:e2:73:c6:76:a3:be:c9:
e5:63:1e:97:f6:b5:b0:d8:5c:f4:be:17:fd:ec:ea:83:7a:89:
25:dd:2d:77:01:73:e9:88:db:7c:44:62:47:5d:3b:17:79:af:
ab:03:1b:e4:16:e7:1b:25:28:ac:19:46:51:7e:67:a9:a2:d2:
e6:07:00:ae:7a:90:61:ac:e1:ec:89:bc:79:19:76:e0:ee:f3:
d8:51:0f:92:b2:af:08:2d:9b:4c:dd:79:52:cc:5a:45:29:9f:
45:bf:77:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:25 2024 by rpki-client on console-ams.rpki-client.org