Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/NNzkf-XDmb7M9j5pmRLdWHIIYqA.roa
File: NNzkf-XDmb7M9j5pmRLdWHIIYqA.roa (raw, json)
Hash identifier: Ly8R2x2+m2opRuR/8F6tucfM540xF8OyLw6odfZxNMg=
Subject key identifier: 34:DC:E4:7F:E5:C3:99:BE:CC:F6:3E:69:99:12:DD:58:72:08:62:A0
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 01916992A1545581EE5EA9F3D397F2FC5636
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/NNzkf-XDmb7M9j5pmRLdWHIIYqA.roa
Signing time: Mon 19 Aug 2024 07:38:22 +0000
ROA not before: Mon 19 Aug 2024 07:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 91.199.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 13:48:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:92:a1:54:55:81:ee:5e:a9:f3:d3:97:f2:fc:56:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Aug 19 07:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34dce47fe5c399beccf63e699912dd58720862a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c7:dc:ad:61:b0:a4:4a:97:f6:9d:5e:04:66:
49:29:d1:b1:a2:7d:38:4e:f2:85:54:d0:eb:60:2e:
8c:c4:1b:a5:6f:c9:0d:e1:bd:e3:b9:59:71:31:2f:
44:c8:00:68:71:f4:d7:c2:a4:cc:ac:f7:a0:e6:8d:
2b:5d:3f:2a:e0:4b:3c:29:44:e5:40:2f:d8:0e:51:
f8:40:17:65:be:d1:2d:c2:31:26:36:1a:23:25:00:
64:8c:96:18:1a:e1:9a:42:62:9c:eb:7b:7d:8f:67:
2b:6c:f7:5b:8a:7e:b2:0d:60:a7:c6:62:1c:8c:1f:
b7:ce:4a:90:84:36:42:4a:f8:27:92:c8:ab:b1:bf:
8e:98:59:dd:19:89:44:e5:98:09:53:58:1d:23:c3:
0b:cc:23:dc:63:d0:ba:54:57:cd:c9:3a:03:6b:20:
69:f6:8c:8f:37:e9:64:76:f6:f9:8a:89:e6:98:6f:
cf:31:1b:3c:5d:48:ef:eb:01:7f:78:ad:98:0b:b3:
93:7b:89:8e:48:6b:ac:0d:08:c6:f0:ab:15:21:c7:
1a:92:73:8c:a8:bc:d3:c8:8c:7a:24:0c:d1:ee:5a:
09:f5:42:69:c6:63:91:5c:d2:f2:1d:0d:14:d4:3e:
07:6a:3c:08:1e:ca:cf:03:26:1a:1b:88:ef:ec:26:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DC:E4:7F:E5:C3:99:BE:CC:F6:3E:69:99:12:DD:58:72:08:62:A0
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/NNzkf-XDmb7M9j5pmRLdWHIIYqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.42.0/24
Signature Algorithm: sha256WithRSAEncryption
06:33:59:41:d6:e6:39:54:b1:3c:e9:dd:68:84:c6:a8:bc:61:
9f:bd:18:83:1c:ec:1e:ff:6f:9b:a5:1d:40:28:08:87:b8:4b:
0c:da:a8:70:1d:8a:bc:87:61:af:35:bd:e3:b8:07:33:da:90:
77:cf:ae:d8:cf:bd:f6:bb:c4:bc:42:ca:7c:ea:ee:dd:da:9e:
17:a9:1c:da:6b:3d:7e:db:53:14:b3:0b:7b:dc:ce:05:86:90:
1b:37:91:36:15:17:86:ee:4b:c8:8a:91:2c:59:aa:de:78:2a:
f5:ab:ad:7c:a7:d5:46:43:c9:37:cf:f2:47:59:00:c9:ca:b1:
77:ca:c7:b8:ef:9e:cf:52:4f:fe:aa:b5:73:24:1a:8a:a1:df:
39:03:51:a1:ab:44:8f:00:1e:78:d7:36:b5:ff:7e:15:29:e4:
19:4b:60:00:72:eb:8c:30:c2:aa:5e:bf:aa:c6:60:6d:38:ed:
54:73:8e:c5:ed:7e:17:71:b8:4c:76:33:47:12:27:2f:55:8a:
1a:07:34:62:d8:ba:fb:70:6a:fc:17:cb:b4:15:3d:2a:a1:1b:
34:8b:54:6d:ea:01:ad:cf:f9:cd:0c:15:aa:ea:24:9b:05:ae:
cd:ee:d3:72:d9:71:b6:a8:78:7d:f0:b0:8b:45:b2:51:78:46:
96:88:3b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 17:20:31 2024 by rpki-client on console-fra.rpki-client.org