Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/NRC3kpZNpFW-9xXw8yZPm9233ZY.roa
File: NRC3kpZNpFW-9xXw8yZPm9233ZY.roa (raw, json)
Hash identifier: Ud0faCVAqXUOah3bJcQpYaiA/RJyWnn1fmxuCIjeQTA=
Subject key identifier: 35:10:B7:92:96:4D:A4:55:BE:F7:15:F0:F3:26:4F:9B:DD:B7:DD:96
Certificate issuer: /CN=51618df006d548d1d87ed6419550662db6fc0606
Certificate serial: 018CC3B6DCD310AFFA4ECFE6EC4DC2E2244F
Authority key identifier: 51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/NRC3kpZNpFW-9xXw8yZPm9233ZY.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31257
IP address blocks: 176.116.160.0/21 maxlen: 21
176.116.160.0/20 maxlen: 20
176.116.168.0/21 maxlen: 21
176.116.177.0/24 maxlen: 24
176.116.178.0/23 maxlen: 23
176.116.182.0/23 maxlen: 23
176.116.180.0/22 maxlen: 22
176.116.180.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 28 Jan 2024 23:37:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:dc:d3:10:af:fa:4e:cf:e6:ec:4d:c2:e2:24:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51618df006d548d1d87ed6419550662db6fc0606
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3510b792964da455bef715f0f3264f9bddb7dd96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:f6:cf:dd:8e:58:47:de:61:b7:af:3b:f1:
57:dc:fd:66:6b:e7:4b:7a:0e:ef:73:16:bf:e2:3a:
e7:c0:33:5f:21:4e:dc:18:a5:02:ee:bf:9c:47:67:
51:44:87:d9:99:60:47:c3:4d:09:48:6b:b3:70:f6:
5d:74:56:84:52:15:7a:23:8b:de:24:0c:bc:1b:f7:
ef:c7:7d:54:95:e2:53:8f:26:76:c2:09:20:21:8f:
73:ef:ff:65:c1:2f:5d:53:b0:21:f8:a0:4c:0e:c2:
85:bd:97:33:8a:de:63:36:9a:fc:6e:1c:b8:b7:e8:
ee:a0:4d:8f:d3:d0:0b:18:ba:ed:52:68:00:1b:9b:
5a:a8:f3:39:d1:34:4c:3c:93:1b:fa:60:d7:dc:29:
c0:9e:7c:af:c7:d8:59:ba:3f:1d:2a:85:11:4d:24:
a0:89:20:23:31:30:e5:17:ea:cc:cb:ab:bc:cf:79:
1e:ce:ad:fb:81:9a:91:c5:4f:3a:b2:24:8f:9e:36:
fa:34:03:80:17:96:70:91:eb:c7:c3:55:94:4b:e3:
9c:b5:fa:cb:70:56:8a:2c:8d:4e:6e:49:97:52:3e:
c8:f3:d3:73:39:b0:f1:82:5e:48:eb:8e:dc:29:0e:
1d:c0:78:ac:e7:0c:25:69:f4:f8:6d:6d:21:4f:0f:
90:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:10:B7:92:96:4D:A4:55:BE:F7:15:F0:F3:26:4F:9B:DD:B7:DD:96
X509v3 Authority Key Identifier:
keyid:51:61:8D:F0:06:D5:48:D1:D8:7E:D6:41:95:50:66:2D:B6:FC:06:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWGN8AbVSNHYftZBlVBmLbb8BgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/NRC3kpZNpFW-9xXw8yZPm9233ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d5ffe7-3b48-4f80-8d6a-317c2fb0a35b/1/UWGN8AbVSNHYftZBlVBmLbb8BgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.160.0/20
176.116.177.0-176.116.183.255
Signature Algorithm: sha256WithRSAEncryption
84:b4:ea:81:6b:76:e1:79:09:aa:bd:b0:f5:b4:0d:e4:93:73:
44:05:01:ac:bc:de:b7:4e:63:1e:25:c7:90:79:30:72:b5:29:
85:43:09:98:58:2e:7b:8c:ba:a4:77:bf:f5:10:ee:df:61:32:
5b:5a:b1:6c:49:ff:bf:1e:90:31:7e:b0:de:65:40:2a:d6:8c:
78:32:17:a9:48:03:93:70:ff:22:ad:3a:cd:45:62:4d:1a:c2:
44:5e:97:ed:3e:10:9c:e2:c8:c6:4f:b7:39:34:b8:b8:13:88:
5b:6d:d9:52:d5:65:cd:b3:54:26:be:7b:cd:73:2d:0c:1b:78:
2b:a3:bf:47:56:0e:72:a0:35:67:38:b8:d6:56:a9:c2:0c:6a:
fc:47:6b:61:3c:10:84:36:38:1d:39:a6:00:a0:16:b6:a0:cb:
e2:34:0c:67:74:16:bc:ee:09:df:8c:c4:84:9e:44:1b:61:e4:
a4:21:ec:c9:d6:0d:5d:50:9e:ea:22:6e:fd:61:f0:d7:de:58:
55:e1:dd:cc:f8:67:0b:48:d5:bc:36:21:04:7b:ac:1d:41:14:
6a:e3:a2:b9:31:ca:17:27:81:49:9a:a6:8b:48:c5:ca:7c:0f:
83:74:8b:e8:ad:ef:05:2a:e8:11:7c:3f:f7:6d:64:02:22:92:
ff:3d:af:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:58 2024 by rpki-client on console-fra.rpki-client.org