Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nicgk_rHXF6WgqdP-uw0z__bFTw.roa
File: nicgk_rHXF6WgqdP-uw0z__bFTw.roa (raw, json)
Hash identifier: 01G3BHJrrx49SRjwcIWqIrKYWrsEAsG3DMUuM3wDyNc=
Subject key identifier: 9E:27:20:93:FA:C7:5C:5E:96:82:A7:4F:FA:EC:34:CF:FF:DB:15:3C
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 0189B0AE68641E0E73AA8DA6F1CD81AEFADB
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nicgk_rHXF6WgqdP-uw0z__bFTw.roa
Signing time: Tue 01 Aug 2023 10:39:27 +0000
ROA not before: Tue 01 Aug 2023 10:39:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 195.178.143.0/24 maxlen: 24
195.178.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:ae:68:64:1e:0e:73:aa:8d:a6:f1:cd:81:ae:fa:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 1 10:39:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e272093fac75c5e9682a74ffaec34cfffdb153c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:52:72:6c:ce:b0:ac:b8:dd:16:2b:7f:b1:86:
b3:8e:c4:2e:68:5c:9a:16:70:d7:79:84:40:4c:cd:
07:ca:82:4b:bd:4c:ab:c2:3b:4e:81:20:8b:cc:38:
50:ec:a8:37:27:42:08:83:75:e0:21:a5:5e:4b:7d:
89:c3:14:5f:86:d9:40:89:0e:c4:7e:6a:ab:cb:0d:
f1:e3:a0:78:b4:22:42:d8:ea:8f:39:ee:72:89:5f:
30:be:66:cf:b9:93:26:a0:4a:db:9b:39:f7:f1:b2:
78:e4:90:31:1c:74:3c:fd:f9:a7:82:68:a9:84:a2:
10:b6:b5:15:d0:39:fd:49:97:46:d7:9e:d0:5d:8b:
b1:ef:36:8a:a7:be:be:42:d2:f8:e1:b6:88:57:fc:
8c:14:22:74:33:f2:d0:08:71:98:77:9a:75:7e:fd:
8a:bb:3e:35:b5:b9:f4:e9:b9:4e:d7:48:4a:99:8b:
ef:3d:a4:7d:73:d4:9d:7f:1f:a9:63:de:8e:62:d9:
97:3f:5f:ba:11:0d:df:8e:ca:4a:19:55:88:80:a7:
48:52:55:67:be:d2:c9:06:cf:dd:92:f1:55:ef:db:
f2:6f:55:78:e6:32:53:46:63:15:74:97:b9:b9:4c:
20:46:fa:d9:0e:2e:ce:d1:31:d2:17:92:c6:47:dc:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:27:20:93:FA:C7:5C:5E:96:82:A7:4F:FA:EC:34:CF:FF:DB:15:3C
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/nicgk_rHXF6WgqdP-uw0z__bFTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.142.0/23
Signature Algorithm: sha256WithRSAEncryption
77:86:3a:fb:fb:fa:8d:11:42:cf:48:4c:d7:7e:33:0c:6c:fa:
22:24:3e:a3:58:9f:cf:ab:43:70:42:d5:6a:09:3f:fe:23:85:
12:95:58:26:71:6a:fa:6a:d5:0e:ff:48:61:ab:18:42:3e:4b:
64:51:66:44:6f:4d:c6:35:59:7d:bd:04:51:e8:cf:f8:24:8c:
10:75:e6:fb:a4:f6:52:bd:4a:09:d3:58:10:95:3c:05:8a:d1:
65:d6:2e:df:2e:d7:f3:98:ec:af:40:7f:be:ff:34:69:31:bc:
4e:2a:bf:9d:e7:c3:02:fc:52:1f:34:2d:44:d1:99:c0:21:1a:
7b:1a:29:c9:43:3f:1b:c1:f2:cb:92:b5:0d:bf:2d:80:6d:c7:
dd:a5:30:a2:63:00:bf:81:9e:95:16:06:bb:e1:b4:77:1c:61:
c4:ad:e9:f8:0c:89:2a:34:aa:51:73:9d:7f:6c:c1:ee:1b:a6:
fb:41:e7:44:88:20:26:d6:b7:87:17:7b:fe:d5:f6:ed:9f:b2:
f2:87:4e:e5:d3:06:31:ab:be:6a:fd:73:6c:48:18:7f:04:a7:
0b:67:a8:61:27:87:e5:60:59:41:23:ac:3c:ac:9c:2c:94:87:
1a:95:0b:1f:d5:d7:79:24:de:3d:f2:b0:51:a6:71:f5:43:d2:
1e:21:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:43 2024 by rpki-client on console-fra.rpki-client.org