Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/nAdek-k0vzKZ8nTi6AcuZw2Hhco.roa
File: nAdek-k0vzKZ8nTi6AcuZw2Hhco.roa (raw, json)
Hash identifier: JqvtF/D8AQTHnIR48IyNImUptcI5D+IsUNwIOGpyW6o=
Subject key identifier: 9C:07:5E:93:E9:34:BF:32:99:F2:74:E2:E8:07:2E:67:0D:87:85:CA
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018A1786335341661848B232C5568812E681
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/nAdek-k0vzKZ8nTi6AcuZw2Hhco.roa
Signing time: Mon 21 Aug 2023 09:56:25 +0000
ROA not before: Mon 21 Aug 2023 09:56:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 89.44.241.0/24 maxlen: 24
188.240.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Oct 2023 08:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:17:86:33:53:41:66:18:48:b2:32:c5:56:88:12:e6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Aug 21 09:56:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c075e93e934bf3299f274e2e8072e670d8785ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:b1:c9:81:ee:29:c9:4b:0f:ad:4a:0e:00:
ff:c9:56:6f:ec:df:46:ed:d9:b6:97:ac:bf:1c:eb:
11:d2:bb:cb:b2:d6:27:90:85:a4:fb:87:bf:8e:0a:
d5:85:bc:d8:ae:28:d3:0d:5e:4e:ef:4c:bb:05:c3:
61:62:bf:83:b9:0a:b5:41:c1:70:70:d4:fb:6c:96:
55:b3:f6:50:51:dd:9e:59:39:f1:56:1d:7c:99:bc:
cf:60:74:9f:47:89:d9:7e:72:3c:0f:d7:00:bd:38:
30:d4:2a:93:37:2d:5b:ad:15:da:bc:01:6e:d8:c8:
ca:f3:b8:60:e8:2a:1f:29:78:2f:de:89:c1:f8:e6:
a5:26:a9:57:bb:ac:01:8f:af:ac:3e:ec:90:44:d3:
6b:a2:a9:f8:de:a7:f5:3a:ae:0a:8d:df:f3:3a:28:
68:33:4c:7c:7b:cb:0c:2d:54:dc:a9:ec:8f:0c:31:
9b:1e:52:85:5b:4b:13:24:59:a4:20:aa:03:63:4a:
6e:da:95:a3:50:0e:b5:82:6f:41:05:eb:51:38:d1:
2b:d8:df:f2:c0:48:26:62:fb:49:dd:9a:ed:45:9a:
26:e4:b1:50:87:95:73:5a:eb:26:f6:7c:9d:3c:8e:
37:01:38:a1:21:7c:af:88:80:79:27:ab:94:28:e7:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:07:5E:93:E9:34:BF:32:99:F2:74:E2:E8:07:2E:67:0D:87:85:CA
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/nAdek-k0vzKZ8nTi6AcuZw2Hhco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.241.0/24
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:a9:b0:b4:7f:b0:3d:ad:8d:20:67:ca:0b:1a:fc:db:90:fd:
c1:c2:84:9f:72:9a:b3:3b:2c:de:ce:51:94:1a:6b:5b:d0:cc:
45:a0:5f:6c:8a:24:23:41:57:dd:bd:f8:d5:64:85:07:3f:8e:
10:7e:43:0a:aa:06:44:a5:83:32:30:24:d8:b3:20:7e:4c:d8:
be:4a:e6:5a:5b:de:86:f4:3d:b5:a9:89:f8:a3:b1:82:4b:5c:
f3:8e:6e:f6:15:c3:91:4d:6d:75:98:1b:d9:ea:c0:0c:e0:dc:
ec:dd:f1:a2:35:26:f0:c1:fd:13:dc:07:ad:94:88:12:9a:c6:
46:96:f4:dc:84:19:47:2f:9c:b4:7b:aa:72:e2:ac:b1:f1:bf:
b4:62:bc:2c:ed:82:97:d6:82:91:64:5e:fd:5d:cb:5f:49:38:
9a:26:1c:1a:ed:fc:af:dd:80:c7:08:8a:3b:66:2e:3d:41:2f:
ad:9b:13:c7:71:d6:8f:62:b2:db:bf:94:79:e4:c8:7d:5f:f0:
70:b2:b3:5b:fc:8f:01:ae:bb:92:23:f3:24:87:ba:b5:c3:95:
e8:89:4c:7c:a2:88:94:fd:d9:1e:99:45:c8:cc:83:a7:36:41:
9e:9f:32:59:d6:6b:d2:9a:30:7e:d6:6b:b4:da:86:94:11:d5:
d7:d7:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:51 2024 by rpki-client on console-fra.rpki-client.org