Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nMZ7CzKqoVw5OY0icIBEZP_KZdY.roa
File: nMZ7CzKqoVw5OY0icIBEZP_KZdY.roa (raw, json)
Hash identifier: xImrjXYjCjDCuiOD9oQCPtyvY6xFWYUgw/xJJCuRJsk=
Subject key identifier: 9C:C6:7B:0B:32:AA:A1:5C:39:39:8D:22:70:80:44:64:FF:CA:65:D6
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0186B61C1B93E0E924AAF1F87FE74A1DC2F7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nMZ7CzKqoVw5OY0icIBEZP_KZdY.roa
Signing time: Mon 06 Mar 2023 08:49:00 +0000
ROA not before: Mon 06 Mar 2023 08:49:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 212.111.211.0/24 maxlen: 24
212.111.218.0/23 maxlen: 24
77.47.180.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:1c:1b:93:e0:e9:24:aa:f1:f8:7f:e7:4a:1d:c2:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Mar 6 08:49:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cc67b0b32aaa15c39398d2270804464ffca65d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b1:69:e1:5c:e8:a5:b4:1b:da:56:3a:b1:c2:
f3:b0:25:84:32:7d:d0:bb:c0:3c:39:bd:79:fc:b2:
fe:dc:64:bb:a7:e8:30:6d:2b:d2:cb:06:36:ca:20:
52:bd:e8:66:d0:03:ea:23:b4:6f:6a:b0:9e:9d:de:
44:1a:87:92:57:cb:74:62:57:81:50:2e:0b:a2:d7:
d0:c9:1e:d9:71:dc:6a:de:52:66:fc:7b:5e:4f:8d:
15:86:62:0c:a7:db:1e:c7:91:36:0c:63:13:ab:d8:
b9:11:c8:c8:5e:a0:98:f0:7f:08:f7:66:25:dc:e8:
c6:6c:e5:4f:65:0b:4e:bb:fe:8b:f4:01:ab:c9:c4:
c0:d2:65:3b:55:a6:76:cb:7e:fd:32:fb:07:ca:85:
f3:76:1e:f1:ac:14:00:4c:f9:af:fa:ea:2a:a7:be:
03:95:d6:8a:3d:c8:b9:a1:5d:5c:62:00:d4:26:92:
16:c7:90:65:13:49:77:5e:31:8d:04:70:fe:7f:b9:
96:91:7d:cd:ec:b5:32:7e:c6:b5:de:e1:6b:e4:ee:
bd:3e:b3:f1:82:86:a4:9b:99:c1:ef:de:a2:9e:56:
dc:93:18:cf:58:b2:90:40:dc:ec:64:8c:24:c8:9e:
02:a9:5b:f6:36:1f:7a:a3:f5:76:b7:bb:3c:37:49:
94:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C6:7B:0B:32:AA:A1:5C:39:39:8D:22:70:80:44:64:FF:CA:65:D6
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nMZ7CzKqoVw5OY0icIBEZP_KZdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.47.180.0/22
212.111.211.0/24
212.111.218.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:27:bf:23:cd:46:11:de:68:24:d3:f4:c1:df:61:7e:a5:d9:
08:c2:c3:ef:8e:70:d3:95:28:74:c7:82:dc:7d:aa:dc:1e:c4:
4d:c2:e3:18:d5:3d:0a:3a:58:a7:b6:53:a7:09:24:3e:e4:90:
c6:eb:30:b7:3b:4c:85:48:2a:7b:88:d7:6e:5b:5c:63:4b:87:
50:64:5d:71:f9:3a:70:2b:14:bf:d6:df:81:63:96:23:ed:b8:
0b:64:46:ef:31:c3:93:19:86:aa:ea:cb:c9:70:ea:3a:83:fb:
7a:6b:55:b0:f8:b2:b8:63:81:82:c0:f1:45:f1:95:01:cd:0a:
23:f1:ae:e0:97:49:26:f1:de:4d:e2:e7:2a:66:a2:00:07:d9:
9b:72:bf:9f:03:85:04:25:1d:00:97:38:c9:31:28:4d:d2:d9:
66:f9:f0:9c:14:30:ac:c9:05:bc:50:e2:ee:0d:3f:58:9c:f0:
5c:26:79:a2:7c:a8:06:17:fc:9e:a7:07:0f:78:71:2c:bd:45:
00:84:83:96:f1:ec:f4:1e:3b:ae:8b:0a:23:80:c4:3e:d2:6f:
89:7e:8e:8e:aa:f1:5e:32:6b:1f:81:5e:4c:e3:b4:87:e7:47:
b3:fe:0a:03:c8:22:3b:4c:d1:08:d1:e0:8b:8c:9d:0b:3d:72:
58:3e:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org