Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nxw1_PJpMkPhTLnyvt9mHUFji-Q.roa
File: nxw1_PJpMkPhTLnyvt9mHUFji-Q.roa (raw, json)
Hash identifier: TrJWI+L9S4V4UF82/lZaon3OVX8VcfxZKIM3jCpvats=
Subject key identifier: 9F:1C:35:FC:F2:69:32:43:E1:4C:B9:F2:BE:DF:66:1D:41:63:8B:E4
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 018EF5D8BDB61D31DC4093D0D644BE786668
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nxw1_PJpMkPhTLnyvt9mHUFji-Q.roa
Signing time: Fri 19 Apr 2024 10:13:25 +0000
ROA not before: Fri 19 Apr 2024 10:13:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 62.169.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 13:04:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:d8:bd:b6:1d:31:dc:40:93:d0:d6:44:be:78:66:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 19 10:13:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f1c35fcf2693243e14cb9f2bedf661d41638be4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6c:b6:c5:f1:c5:bc:aa:12:81:85:0f:ca:83:
21:d5:c6:e7:56:2e:db:2c:9f:15:e1:54:58:13:95:
8f:b2:94:f6:ab:99:d1:c3:03:07:e5:72:59:07:0b:
8e:b1:e8:5d:4c:ea:ee:ce:ce:3a:2b:59:4a:d0:48:
32:06:0e:f2:57:1f:73:9f:2b:03:28:75:65:da:dd:
94:03:e4:7d:98:39:b4:01:0e:21:6a:a0:56:d5:b2:
16:e8:7a:2a:64:04:c1:d9:b1:27:ea:47:c8:39:85:
f2:a7:0c:5c:a0:e1:cb:91:94:31:ab:50:7b:b0:92:
70:63:cc:45:d2:e9:5a:dc:5d:d9:29:ac:e9:4c:8a:
2b:5e:f5:32:b1:2f:85:14:14:45:2b:61:6a:e0:bb:
0b:4e:56:a1:d5:c7:0f:cc:6c:18:64:4a:57:19:57:
23:0f:77:31:9d:f0:5e:e8:f9:fb:39:38:f8:07:26:
b3:5a:a3:3e:55:2a:4d:31:71:34:72:67:49:c6:a5:
ac:ac:dc:d0:88:73:85:22:c8:ae:49:20:84:1f:a5:
e2:26:b6:80:f5:c7:ae:4f:75:16:18:52:7f:5a:ac:
d9:f2:1c:76:5c:5e:40:15:63:a0:1e:02:9f:04:c2:
eb:13:a6:d4:40:3f:6c:1f:a7:e0:5f:1f:95:e4:73:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1C:35:FC:F2:69:32:43:E1:4C:B9:F2:BE:DF:66:1D:41:63:8B:E4
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/nxw1_PJpMkPhTLnyvt9mHUFji-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.152.0/24
Signature Algorithm: sha256WithRSAEncryption
81:b9:d4:ec:68:ba:a3:1b:7f:b6:f2:00:c4:7c:d6:87:97:e8:
01:96:9e:6d:06:84:9e:22:ea:0f:8e:e2:36:6d:4c:93:6d:48:
ac:86:95:57:27:9e:d2:41:eb:c1:d7:1c:10:1e:5f:35:a7:91:
5e:0a:f6:be:f3:7a:d4:f6:f1:be:bb:09:5a:fa:a9:2a:9a:b5:
c7:09:d5:f9:d3:50:d0:f6:ee:c8:45:d1:9c:30:96:46:96:31:
df:36:60:ef:68:85:cf:47:7e:f1:34:8e:03:ad:8d:6c:f3:59:
d2:03:7f:97:bd:48:4b:4a:a4:a8:a5:12:6c:bc:28:dc:6b:67:
81:0c:63:12:48:6c:af:18:1e:c7:af:b9:8f:47:12:09:14:b3:
83:a9:b3:fd:89:a0:65:a1:f9:f2:b1:f4:c3:96:f9:8a:dd:36:
e6:e2:f6:e9:4c:13:26:0d:46:db:bf:b5:a4:82:51:88:05:85:
c1:63:1c:85:d4:d2:bf:1b:39:87:1a:0a:9d:f9:fc:db:3f:79:
ff:a6:ca:dc:2c:6d:a1:d4:e9:6b:ad:95:c2:10:7f:b9:02:cb:
19:76:a1:4b:c5:da:bf:6b:b1:5d:d3:83:37:2a:1d:df:7d:4e:
73:08:62:0d:83:5e:2d:02:1d:16:8d:e5:5b:c0:80:fb:01:8d:
98:16:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:44 2024 by rpki-client on console-fra.rpki-client.org