Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/NGDg9q99YisDUvskwzaz35y587w.roa
File: NGDg9q99YisDUvskwzaz35y587w.roa (raw, json)
Hash identifier: TZEdHYSQzT6VG3hEdds5rN5QbP58ds7B14PPTcGtOhM=
Subject key identifier: 34:60:E0:F6:AF:7D:62:2B:03:52:FB:24:C3:36:B3:DF:9C:B9:F3:BC
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0187FA7710E76C37CB7F118B0DD6A192DF12
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/NGDg9q99YisDUvskwzaz35y587w.roa
Signing time: Mon 08 May 2023 08:25:19 +0000
ROA not before: Mon 08 May 2023 08:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.28.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
45.80.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 13:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:77:10:e7:6c:37:cb:7f:11:8b:0d:d6:a1:92:df:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: May 8 08:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3460e0f6af7d622b0352fb24c336b3df9cb9f3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:dc:4c:81:27:04:be:1d:4f:23:7e:12:77:
ba:20:be:6a:32:96:08:75:52:00:d3:e0:0d:dd:84:
fe:72:ce:93:0d:93:bd:24:9c:72:b0:85:79:0a:0c:
1b:b0:8b:1a:62:9d:98:85:c6:2a:ef:ed:fc:b4:a5:
46:d1:ba:7e:f9:d4:d1:62:97:9b:c9:fb:29:35:c4:
04:72:0b:81:9b:dd:41:4b:90:0a:bc:1c:52:ec:4f:
23:21:7a:ab:50:8b:3c:81:f5:46:7d:6d:8b:d6:11:
6c:e5:b4:6f:de:d5:23:72:d2:c0:8d:08:7a:c5:a4:
26:1a:52:00:2e:e9:4b:88:91:38:b8:2d:ad:14:25:
9c:db:f0:ff:c9:30:04:d3:ba:26:69:ae:f9:ec:f4:
25:e4:d9:da:0b:88:c4:cb:3f:c7:4c:3d:1b:87:d3:
21:5d:47:31:68:6f:b9:bd:b6:8b:16:d7:e9:3b:5d:
2f:9b:a3:8b:9d:f3:26:b1:54:36:bc:76:fe:ea:47:
4e:47:a7:83:93:a4:85:18:fc:b4:c0:10:dd:c8:d2:
09:4f:4b:ed:90:70:3f:69:cc:4e:b8:c3:e3:c5:11:
62:60:e4:dd:50:ef:f5:a2:e8:7a:6c:70:3d:d9:e8:
46:69:51:c9:40:4d:86:f5:79:35:43:b1:fc:fe:08:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:E0:F6:AF:7D:62:2B:03:52:FB:24:C3:36:B3:DF:9C:B9:F3:BC
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/NGDg9q99YisDUvskwzaz35y587w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.30.0/24
86.62.28.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:15:d1:2f:e9:a2:2d:d4:46:7e:93:06:80:52:00:4c:39:14:
bb:72:9e:b3:4a:46:c1:14:5b:71:85:e5:5d:f0:a4:af:b7:bf:
c8:15:8b:00:d3:1d:3c:7f:f5:75:3d:85:d5:e0:04:59:cd:9a:
90:e0:cf:fc:79:eb:f9:ac:f6:40:51:7a:57:fd:11:28:77:d7:
b6:6c:54:61:4a:8c:42:d4:bc:c7:4c:0f:2e:84:e2:c2:06:22:
84:72:53:63:06:cf:af:9f:77:37:27:b5:e6:32:6e:6a:8e:31:
21:e4:fb:6a:3c:a5:3a:0a:a9:2f:8f:a0:74:0d:99:f5:47:12:
67:9e:f8:21:42:06:4c:95:ed:4a:96:b2:ba:7b:43:30:b5:f6:
6a:a6:b5:b3:6f:74:8c:57:fe:c0:41:26:c0:32:37:94:94:c3:
a4:65:28:57:db:ec:aa:0d:53:88:a8:56:f5:6c:2f:9a:4f:36:
c7:ec:88:ff:65:b9:2f:f0:31:f4:77:89:ba:d6:5a:2c:c3:e2:
22:22:83:49:cf:46:82:c4:1f:f4:d8:d0:72:24:c9:c2:86:e3:
6a:78:a5:d8:30:45:f6:98:17:11:4e:99:bc:b0:37:d6:ab:56:
94:49:e2:60:4e:96:83:64:d3:28:2f:7c:f9:34:83:4d:aa:93:
70:8f:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org