Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/NRTGQ9WTvKZTpicsoxe82f6H2G4.roa
File: NRTGQ9WTvKZTpicsoxe82f6H2G4.roa (raw, json)
Hash identifier: B21mK0vNYHwr/Z4F+8cE9jqZxWEbx+mqMPed/GQCSh8=
Subject key identifier: 35:14:C6:43:D5:93:BC:A6:53:A6:27:2C:A3:17:BC:D9:FE:87:D8:6E
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 018A456D96ED8CF5566EAC325490285EC2FF
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/NRTGQ9WTvKZTpicsoxe82f6H2G4.roa
Signing time: Wed 30 Aug 2023 07:52:04 +0000
ROA not before: Wed 30 Aug 2023 07:52:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8823
IP address blocks: 185.240.72.0/22 maxlen: 22
94.154.2.0/24 maxlen: 24
193.35.80.0/22 maxlen: 22
2a07:2680::/29 maxlen: 29
2a0d:6140::/29 maxlen: 29
2a0c:7580::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:45:6d:96:ed:8c:f5:56:6e:ac:32:54:90:28:5e:c2:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Aug 30 07:52:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3514c643d593bca653a6272ca317bcd9fe87d86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:8a:56:a6:48:86:b2:da:32:32:1b:9a:4c:
ea:bf:1b:31:b4:5f:da:50:9c:a1:ae:04:69:c3:ab:
e6:6b:36:95:57:2f:80:42:b2:08:f0:8d:78:30:16:
f3:99:24:94:7c:ce:91:15:06:4a:e9:9c:fb:43:ff:
e9:9b:e5:4c:81:3b:62:94:b1:01:b7:72:05:a2:5f:
e7:0b:8a:79:8f:cb:f7:80:f7:d4:99:6d:88:cb:a8:
bc:5d:c7:87:e9:cb:92:34:37:83:56:44:76:f1:33:
a8:f6:94:29:0c:ce:bc:76:f4:b8:3f:c0:c3:76:84:
bb:bf:af:8e:16:7f:21:5b:b2:58:a2:51:fd:39:73:
86:82:d5:86:c1:31:21:29:78:33:e8:53:15:71:b9:
28:91:51:5a:dd:27:88:c4:ee:91:d5:59:6d:96:e7:
92:cd:67:4b:36:54:d1:53:ad:a3:0f:c8:37:20:b1:
6f:c3:e0:88:12:62:42:4f:aa:96:2a:c5:0f:de:a0:
62:2e:47:52:1d:bc:e2:2e:82:8d:9c:af:3b:47:d9:
cf:3e:44:58:1c:b0:dc:3d:2e:ca:eb:d4:5a:6a:e4:
e8:f8:06:60:3d:55:57:f2:e5:06:ef:8c:42:f3:ed:
f4:31:b7:88:de:bb:93:11:7a:28:c8:ea:3c:77:a9:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:C6:43:D5:93:BC:A6:53:A6:27:2C:A3:17:BC:D9:FE:87:D8:6E
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/NRTGQ9WTvKZTpicsoxe82f6H2G4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.2.0/24
185.240.72.0/22
193.35.80.0/22
IPv6:
2a07:2680::/29
2a0c:7580::/29
2a0d:6140::/29
Signature Algorithm: sha256WithRSAEncryption
1d:fa:c2:cc:e5:cd:0d:5a:14:c0:33:66:2b:dc:f0:b7:8a:ca:
bc:8e:00:30:52:e9:a3:2e:49:b5:d6:ce:2d:d1:50:ae:c9:d8:
e4:05:f9:20:85:6c:c1:f6:9c:bb:40:7c:34:42:3f:24:2a:16:
c2:30:a2:c2:bc:16:7e:5e:ad:c4:01:c3:95:f6:77:01:8e:74:
96:02:38:77:c5:31:c2:7e:e0:b0:93:97:02:8b:d4:56:4c:00:
2a:65:65:77:7a:8e:9e:f2:27:57:1d:6a:f4:53:da:df:00:b4:
79:81:4a:a2:05:58:ba:ef:ea:5d:ee:13:56:20:6d:1b:7a:ce:
d7:88:9d:9e:6c:87:e3:17:c2:27:3f:54:55:7d:ee:f5:c0:7d:
c5:82:f1:4b:4d:93:a1:c0:aa:62:d2:bf:2c:cd:c7:16:9b:eb:
37:6d:74:71:89:86:41:29:01:48:53:bc:50:5b:6e:74:e6:cd:
f5:65:f5:fd:ad:6f:93:9c:45:0d:09:67:66:fe:c6:6b:99:6c:
ab:48:17:a9:18:da:96:63:09:76:a6:f2:fd:ca:5c:e9:1d:ac:
20:10:58:11:4d:37:2f:bd:79:86:23:17:f8:b1:75:3b:c4:9a:
c3:54:99:c4:ae:d7:3d:c1:cf:01:0f:28:94:c9:fd:9f:bd:48:
b2:f8:c0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:00 2024 by rpki-client on console-ams.rpki-client.org