Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/nssWwmQBw_MNPXoE9BKV5_r18SE.roa
File: nssWwmQBw_MNPXoE9BKV5_r18SE.roa (raw, json)
Hash identifier: 2nku+WIcZmbPPv3sSGr8hXjmqiZCmgW8wg0EsGP6DAY=
Subject key identifier: 9E:CB:16:C2:64:01:C3:F3:0D:3D:7A:04:F4:12:95:E7:FA:F5:F1:21
Certificate issuer: /CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
Certificate serial: 01856C1C8D39DC91AD4C35611C36EB8BA784
Authority key identifier: 72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/nssWwmQBw_MNPXoE9BKV5_r18SE.roa
Signing time: Sun 01 Jan 2023 06:54:48 +0000
ROA not before: Sun 01 Jan 2023 06:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29305
IP address blocks: 195.225.136.0/22 maxlen: 22
194.177.4.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:8d:39:dc:91:ad:4c:35:61:1c:36:eb:8b:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a759a825025241e1a8e012bf9ecc6f2a7c527b
Validity
Not Before: Jan 1 06:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ecb16c26401c3f30d3d7a04f41295e7faf5f121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:87:f9:90:61:16:65:c1:ac:9f:d7:fd:25:9b:
89:2c:a2:fe:e3:30:1e:5f:82:2e:a5:8a:df:3d:8a:
5d:01:68:4e:0a:b9:d9:17:e0:b7:f4:db:1f:93:48:
b6:02:63:34:b2:6d:38:08:e1:af:9b:b3:22:39:fd:
d7:ee:ba:67:42:44:37:02:3b:05:ee:67:b2:f3:ea:
71:32:16:2d:83:0d:83:02:17:f0:32:d9:e6:26:e8:
f7:62:97:d5:0e:01:32:fc:c0:0d:b5:df:1e:da:2f:
b6:da:b3:4f:99:53:6c:c6:31:28:a4:7a:13:4f:c7:
74:d4:c2:ce:0a:6f:95:b6:cf:41:f0:d4:11:85:24:
e1:02:b2:a1:b7:27:73:8d:a8:c5:42:13:73:43:84:
5e:75:70:28:86:45:03:24:55:72:99:86:64:2c:7e:
b7:ce:f7:69:36:40:20:8f:6e:96:38:fb:95:2b:74:
b8:f0:54:5e:8d:eb:81:ad:eb:af:b3:4a:0d:02:51:
89:5b:aa:2a:e2:5a:c1:93:c1:c3:8e:cc:28:aa:19:
2d:76:27:bb:4e:a1:81:ea:cb:46:71:1d:c4:4a:0e:
7b:97:6e:c3:7d:ea:a6:c7:51:b5:95:54:62:10:e3:
8e:5a:2a:aa:8b:5f:6d:c0:4f:84:90:2e:3f:01:e8:
8d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:16:C2:64:01:C3:F3:0D:3D:7A:04:F4:12:95:E7:FA:F5:F1:21
X509v3 Authority Key Identifier:
keyid:72:A7:59:A8:25:02:52:41:E1:A8:E0:12:BF:9E:CC:6F:2A:7C:52:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqdZqCUCUkHhqOASv57Mbyp8Uns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/nssWwmQBw_MNPXoE9BKV5_r18SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/b29c5c-d7c4-40dd-9639-55731c0a53a4/1/cqdZqCUCUkHhqOASv57Mbyp8Uns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.177.4.0/22
195.225.136.0/22
Signature Algorithm: sha256WithRSAEncryption
83:cf:e6:60:61:48:6b:3a:59:6b:e2:6d:7c:30:cf:19:10:7a:
ed:77:d9:04:0d:f9:6e:bd:e1:45:24:30:47:28:42:4a:93:c7:
ea:21:3e:8c:0d:2a:d8:9a:2b:53:27:f0:c2:5c:8f:89:0e:17:
2b:7e:ac:73:f9:1f:e4:48:f5:81:6a:54:36:8f:e0:fb:35:61:
81:0c:a9:03:6f:d7:a9:3e:87:d8:58:cf:8d:53:71:c1:fa:32:
81:dc:07:bd:34:14:b2:e9:94:ef:9f:d2:92:47:20:a9:8e:ac:
c5:9b:ab:86:e2:8a:05:7d:91:f5:bd:b1:16:60:ac:92:97:73:
93:4b:61:44:a6:9c:a0:01:b5:6b:bb:8a:f0:79:4b:18:f9:3c:
e0:78:0b:74:3c:e9:b8:d7:2a:eb:83:35:4f:58:68:be:da:18:
0e:a9:5e:ac:7d:2d:8b:f9:00:b0:8b:92:d5:1a:3d:51:0d:cd:
34:e4:34:19:23:16:d4:55:a2:7f:18:a4:57:54:c1:a1:55:f9:
71:61:9b:4f:20:01:94:a5:7f:1e:c1:a7:11:4a:30:0c:7b:b7:
0b:e5:17:39:4b:e1:fc:74:2d:42:b8:94:f5:23:07:9a:a6:6b:
c6:56:6c:f2:7c:f2:59:54:e6:08:94:12:5e:97:1b:a3:b1:7a:
c5:78:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:39 2024 by rpki-client on console-ams.rpki-client.org