Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/nmv6glqjlDc3rSUQ2KyhbR21owY.roa
File: nmv6glqjlDc3rSUQ2KyhbR21owY.roa (raw, json)
Hash identifier: y17cwvyvtWg3AIkqBxGv8dHXFrXVoajAgkkRkTZRF5s=
Subject key identifier: 9E:6B:FA:82:5A:A3:94:37:37:AD:25:10:D8:AC:A1:6D:1D:B5:A3:06
Certificate issuer: /CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Certificate serial: 018D31532FDE2A936A2E381BDCDC24B16239
Authority key identifier: EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/nmv6glqjlDc3rSUQ2KyhbR21owY.roa
Signing time: Mon 22 Jan 2024 13:19:11 +0000
ROA not before: Mon 22 Jan 2024 13:19:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 212.49.131.0/24 maxlen: 24
212.49.142.0/24 maxlen: 24
212.49.167.0/24 maxlen: 24
212.49.181.0/24 maxlen: 24
212.49.190.0/24 maxlen: 24
212.163.3.0/24 maxlen: 24
212.163.40.0/24 maxlen: 24
212.163.169.0/24 maxlen: 24
212.163.206.0/24 maxlen: 24
213.9.173.0/24 maxlen: 24
213.9.188.0/24 maxlen: 24
213.9.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 10:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:31:53:2f:de:2a:93:6a:2e:38:1b:dc:dc:24:b1:62:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef3e71b96992da3d91c88dd74ef41f9b95b9485b
Validity
Not Before: Jan 22 13:19:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e6bfa825aa3943737ad2510d8aca16d1db5a306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e1:3b:e1:de:ee:72:85:cc:5b:72:a0:bc:2c:
0d:0b:bd:8b:be:72:8f:9d:d9:91:b7:63:99:47:92:
d9:1b:79:b4:61:52:97:89:65:73:4f:55:c8:ca:bd:
70:37:de:6e:a0:a3:1d:f0:e4:2b:eb:cd:64:c2:3d:
91:7d:0e:db:91:21:68:aa:b6:39:27:90:cc:ce:31:
2f:87:67:f7:35:3f:5a:5b:99:cc:6e:15:2a:0b:7a:
54:82:87:2e:52:8d:84:7c:bc:e6:03:17:80:7a:c9:
f8:ab:80:fb:a5:12:31:20:33:dd:b7:57:ba:0d:45:
99:36:d7:42:8f:96:d6:f2:93:83:46:96:70:b0:47:
a8:c3:65:db:75:97:b3:36:a3:28:e2:82:2e:50:1e:
f1:66:6e:a1:47:88:ec:37:82:e4:6c:16:ff:7c:09:
16:5b:92:8a:5b:de:98:2b:82:b7:83:0f:15:4b:04:
2f:cd:29:49:3d:dd:74:8d:52:75:51:75:19:c8:55:
e2:8d:08:4e:d7:a1:cb:ac:68:98:cf:cd:70:1b:01:
9c:42:b8:9a:f1:01:f2:c8:54:18:6d:54:e7:f3:29:
76:11:47:38:d9:3a:d0:39:93:b3:e8:fa:6d:ab:dd:
a8:fa:6c:7b:ff:c8:e1:dc:7d:59:ba:c9:d0:1d:e8:
6a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6B:FA:82:5A:A3:94:37:37:AD:25:10:D8:AC:A1:6D:1D:B5:A3:06
X509v3 Authority Key Identifier:
keyid:EF:3E:71:B9:69:92:DA:3D:91:C8:8D:D7:4E:F4:1F:9B:95:B9:48:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7z5xuWmS2j2RyI3XTvQfm5W5SFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/nmv6glqjlDc3rSUQ2KyhbR21owY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/ad4e57-d901-4485-98d2-9196ce446527/1/7z5xuWmS2j2RyI3XTvQfm5W5SFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.131.0/24
212.49.142.0/24
212.49.167.0/24
212.49.181.0/24
212.49.190.0/24
212.163.3.0/24
212.163.40.0/24
212.163.169.0/24
212.163.206.0/24
213.9.173.0/24
213.9.188.0/24
213.9.232.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:8e:e9:03:94:de:e2:06:25:0a:64:15:77:0e:9c:d2:3f:63:
86:a1:65:60:2c:57:f7:82:67:76:e4:98:40:16:28:74:1e:bd:
18:6e:b0:26:bd:f4:71:dd:76:0a:9b:24:ce:ed:48:ea:04:31:
d1:70:1f:11:0c:19:bc:ed:d1:9e:fb:41:74:73:2c:b3:87:8f:
7e:30:19:ed:09:98:67:a4:1f:dd:51:47:54:8c:e7:8b:fa:04:
96:9c:2f:89:b0:a5:2b:9b:ca:a0:a2:c1:b1:91:4a:71:40:4f:
6e:55:10:48:b9:4c:f5:32:91:dd:eb:21:b1:00:8d:d4:b1:fd:
bb:2a:ff:17:e9:5e:49:5e:e1:7b:36:58:79:c9:dd:fc:7a:fb:
c1:df:08:c4:11:31:ac:52:0b:b2:f4:8f:7f:6f:92:d0:39:aa:
f2:2c:1c:7b:b5:24:ec:5e:98:b2:7b:10:02:42:0f:4e:92:02:
4d:38:bd:40:9e:a6:28:f5:e7:86:6a:23:67:be:7f:2a:f9:ba:
e4:7a:97:18:ee:5d:fd:81:f7:84:a1:d1:6c:a9:4a:b8:0e:a6:
e0:9a:5a:76:e1:45:6e:45:30:e7:b5:74:6e:c9:eb:34:89:4d:
d3:09:42:2f:52:34:c4:4b:84:1d:0a:3c:4e:41:8e:79:84:e5:
82:79:82:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 15:29:04 2024 by rpki-client on console-ams.rpki-client.org