Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NERYC-AT6to9H31u5SLzc7oSdAU.roa
File: NERYC-AT6to9H31u5SLzc7oSdAU.roa (raw, json)
Hash identifier: i2ol8A5B8RKpE3lgvyXUod5dRJrsNx5Up5s84GcRhWc=
Subject key identifier: 34:44:58:0B:E0:13:EA:DA:3D:1F:7D:6E:E5:22:F3:73:BA:12:74:05
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 0188760B2FB2BF1DFD8802B09703623E3E46
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NERYC-AT6to9H31u5SLzc7oSdAU.roa
Signing time: Thu 01 Jun 2023 08:20:24 +0000
ROA not before: Thu 01 Jun 2023 08:20:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2518
IP address blocks: 84.32.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 08 Jun 2023 09:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:0b:2f:b2:bf:1d:fd:88:02:b0:97:03:62:3e:3e:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jun 1 08:20:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3444580be013eada3d1f7d6ee522f373ba127405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:0b:83:99:5f:ee:9c:da:ba:da:e1:15:06:
85:41:cd:b4:c5:42:d4:f6:e5:15:9c:46:76:ea:91:
04:8e:9c:4a:7c:e2:69:36:18:f4:65:62:ed:90:ec:
80:e5:da:41:6d:bc:43:37:18:f2:fa:e4:8d:f5:a7:
21:9a:93:01:3f:2f:3d:4c:e8:26:a6:8e:55:ef:a4:
94:b2:7b:fe:a9:c8:af:32:d7:40:56:f9:6e:3e:dd:
1a:76:dd:b2:8c:78:97:d5:72:cd:78:1e:05:f3:5d:
a6:f6:18:9a:e3:b4:f3:cb:b3:47:f7:a7:92:06:41:
80:55:39:e0:c1:97:8a:5c:84:92:04:3d:62:2f:a7:
4b:78:f5:13:8e:17:e6:47:c2:fa:f0:83:bd:91:fc:
43:a7:ea:fd:54:81:a1:af:3c:df:37:2f:1b:e6:0c:
5f:5d:fc:2b:df:1a:e0:7d:2f:e3:e9:0c:db:1c:51:
8f:38:62:b7:5e:6f:76:e4:ac:e3:90:84:38:e3:a5:
b4:3b:fb:b6:23:74:ce:be:ad:60:82:69:00:10:6f:
41:98:b4:14:7f:b4:b4:f8:c7:55:89:6d:8f:da:3d:
97:b3:13:10:4b:ed:d2:62:28:93:ea:98:de:7e:89:
6f:22:7d:8b:ab:88:02:8e:a9:bb:c6:b9:49:7e:e5:
d7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:44:58:0B:E0:13:EA:DA:3D:1F:7D:6E:E5:22:F3:73:BA:12:74:05
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/NERYC-AT6to9H31u5SLzc7oSdAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.225.0/24
Signature Algorithm: sha256WithRSAEncryption
91:78:95:0a:e5:54:8e:68:ca:26:df:8f:51:a1:f5:46:6b:e9:
cb:8f:10:11:8b:57:77:ff:ea:e3:5a:9b:e3:bf:9e:b4:43:2d:
ec:1f:1b:3c:11:fb:68:b9:ab:d7:38:ee:d7:eb:f1:f1:25:c0:
69:5b:9f:4b:b1:94:4f:f0:28:3b:cb:c2:3a:11:35:72:a7:45:
cd:9d:8f:4c:79:4f:06:4c:3c:cc:72:15:26:68:2a:c0:2e:cd:
b9:ac:1a:ee:4b:67:a6:3c:0c:88:8a:e0:3f:4f:cf:4a:2b:9e:
05:8c:b2:3a:a6:30:74:c7:c6:38:7f:f1:b4:64:e9:58:9a:44:
3f:a2:af:e6:49:bc:c9:fd:a7:55:e6:91:05:9d:ec:d4:9c:21:
55:0d:d9:ba:86:32:dc:66:46:2d:36:15:d2:a2:bc:bb:c5:70:
fb:cf:5a:c0:cf:77:39:fe:71:82:18:b5:2a:88:c9:cc:f6:af:
99:af:23:c4:c8:2f:f8:96:50:48:7c:e5:9c:2a:6f:cc:7b:68:
39:17:b3:cf:d9:25:9a:ad:2c:16:ae:c6:b0:c8:c8:15:10:1b:
bd:fc:96:69:3c:31:73:d5:db:c3:f0:1a:74:eb:48:e7:a6:3f:
e8:8d:6e:c5:33:e7:d0:f4:0e:f0:43:6f:10:f7:15:c4:d3:9d:
b7:c5:69:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:32 2024 by rpki-client on console-fra.rpki-client.org