Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/N1B6yKtfNArlT9Dx-OexBigA5zI.roa
File: N1B6yKtfNArlT9Dx-OexBigA5zI.roa (raw, json)
Hash identifier: rrYi3IU84g0GD6MFHuJN6h8iZuX38MQeEv4opvMbYag=
Subject key identifier: 37:50:7A:C8:AB:5F:34:0A:E5:4F:D0:F1:F8:E7:B1:06:28:00:E7:32
Certificate issuer: /CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Certificate serial: 018571B0EC9E3737E3A063D93CBCC354B8F2
Authority key identifier: 36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/N1B6yKtfNArlT9Dx-OexBigA5zI.roa
Signing time: Mon 02 Jan 2023 08:54:58 +0000
ROA not before: Mon 02 Jan 2023 08:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25595
IP address blocks: 185.104.128.0/24 maxlen: 24
2a06:3080::/30 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:ec:9e:37:37:e3:a0:63:d9:3c:bc:c3:54:b8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=360a9d26dbb3ea5dfaae83b61908add8fc6dd36f
Validity
Not Before: Jan 2 08:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37507ac8ab5f340ae54fd0f1f8e7b1062800e732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e1:21:bd:17:8d:bf:fb:5f:7c:ec:22:29:7b:
31:2d:88:fc:c4:bb:db:e6:14:7a:ac:c0:15:16:01:
b1:95:47:c0:ff:f1:00:a9:85:a0:82:8b:af:da:fb:
e4:32:ed:37:fa:fe:23:9e:46:47:80:48:64:36:f6:
7a:09:28:a4:95:0d:61:0f:72:8e:16:23:e6:c7:2e:
ae:e1:c7:bc:38:84:f4:8a:f9:32:be:32:e3:68:15:
c2:e5:77:db:db:d7:64:dc:a6:e5:5b:79:81:f6:85:
f7:c3:3c:24:44:68:c0:bc:ff:62:90:f1:14:9a:dd:
cd:b2:aa:9e:1c:17:50:c8:7e:a1:f8:7c:a9:a4:92:
e4:75:3d:89:8b:a5:b9:2e:a3:cf:00:ed:02:64:dd:
54:e5:e4:26:b6:a0:7e:ae:8a:89:f9:fe:d5:ef:83:
ce:26:ef:1b:b7:c6:eb:34:77:fb:5c:c7:7a:55:25:
33:0e:66:d1:a4:4c:09:ac:0a:de:71:6b:6a:d7:21:
54:2a:40:03:f8:7e:27:dc:c2:a5:f5:c6:a6:06:eb:
79:de:6f:99:e1:4e:5d:4a:97:9f:2c:9d:3f:c1:b2:
bd:57:56:e3:55:b9:75:8d:8c:85:00:4c:15:10:96:
37:68:ad:64:50:d3:67:b9:3a:71:86:c7:9a:e9:42:
dc:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:50:7A:C8:AB:5F:34:0A:E5:4F:D0:F1:F8:E7:B1:06:28:00:E7:32
X509v3 Authority Key Identifier:
keyid:36:0A:9D:26:DB:B3:EA:5D:FA:AE:83:B6:19:08:AD:D8:FC:6D:D3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NgqdJtuz6l36roO2GQit2Pxt028.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/N1B6yKtfNArlT9Dx-OexBigA5zI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/27e29e-c894-4d39-ac23-12e96ba235d8/1/NgqdJtuz6l36roO2GQit2Pxt028.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.128.0/24
IPv6:
2a06:3080::/30
Signature Algorithm: sha256WithRSAEncryption
9c:01:9c:64:c3:7d:7d:78:5d:55:7b:f7:47:bb:3b:f2:aa:fb:
eb:b0:ab:b5:27:d2:39:db:28:a6:89:f7:de:a1:45:7e:76:d8:
b0:ba:58:90:53:68:ca:77:1d:bb:48:be:85:f0:5a:34:46:b3:
4b:88:6a:67:27:fa:72:58:ed:2f:6b:a0:13:5e:83:b6:4d:85:
5c:cd:6c:4f:0b:4d:17:11:8b:1d:22:2d:8d:01:b8:48:ee:47:
16:15:8a:fa:2b:25:89:37:14:11:cc:82:f5:9c:5f:97:bf:d5:
26:26:d3:b9:71:ed:17:81:26:69:7d:31:c1:68:09:41:ca:dd:
2c:54:64:d4:e9:04:16:d2:ed:61:45:4a:f9:d9:51:48:92:8f:
16:47:7a:37:f8:77:9b:19:fa:50:54:3b:1d:3f:d4:a3:1d:bc:
36:d4:c9:60:c9:c7:f5:12:ee:6e:7f:84:cd:0c:79:ca:3a:fd:
f5:6d:7d:25:d9:e0:54:f7:40:11:31:63:d3:9c:83:f7:dc:cf:
4a:2c:32:6e:34:74:16:54:21:6d:cb:9e:f8:06:15:8b:f3:2c:
3d:ca:7f:0b:8a:51:bc:07:41:23:ba:36:fb:0c:c7:38:a1:69:
b6:b8:5e:2d:06:60:69:b0:6f:e3:b1:82:ed:5e:63:5e:c9:48:
9d:5d:85:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:14 2024 by rpki-client on console-fra.rpki-client.org