Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/Mc3JuXhQ59jY595J9lgH6geX3tg.roa
File: Mc3JuXhQ59jY595J9lgH6geX3tg.roa (raw, json)
Hash identifier: sGlwo1Sra1cPDBGPC6IGzalraZcF9kIrXLw50lfcSHA=
Subject key identifier: 31:CD:C9:B9:78:50:E7:D8:D8:E7:DE:49:F6:58:07:EA:07:97:DE:D8
Certificate issuer: /CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Certificate serial: 01856EC1FC50872CE3228405F176CEAF87E8
Authority key identifier: 36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/Mc3JuXhQ59jY595J9lgH6geX3tg.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25460
IP address blocks: 88.214.36.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fc:50:87:2c:e3:22:84:05:f1:76:ce:af:87:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36e1533c3ff94b18c308f1b1c95ba44eb1f0ec77
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31cdc9b97850e7d8d8e7de49f65807ea0797ded8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:b6:19:b4:e1:57:5a:4e:c4:e4:ee:e2:c4:
06:d7:e6:b0:e9:57:05:2d:e1:7e:85:1d:4f:9f:0f:
c9:ec:14:7a:c4:a9:b2:38:ac:37:71:8b:58:33:68:
91:f6:c8:38:cc:4d:9c:81:3c:a9:99:7a:17:ac:71:
71:75:af:ba:55:18:e0:19:fc:09:86:b3:c6:ec:c1:
ac:1d:29:3a:d9:b6:70:79:0a:6f:d1:ea:48:5b:55:
2c:7a:fc:8f:ec:9e:3b:82:5b:93:44:ef:eb:50:0b:
5e:96:fe:26:c1:7d:4b:a5:56:b2:f7:51:2a:b7:33:
5f:08:d0:bd:a8:3e:95:a5:bb:ee:eb:9e:2e:fe:a4:
26:57:78:2e:1f:7a:40:3a:23:a2:84:a4:c9:b7:d7:
b1:d5:02:ed:08:cf:be:07:9e:6b:c7:e4:b4:d2:e4:
e7:33:c3:ac:4a:12:dd:83:d8:14:35:4e:57:81:85:
d1:15:f2:1c:48:d7:0c:f2:67:63:07:9e:b4:d2:df:
da:f6:52:51:db:41:59:55:d5:6f:7b:d0:f7:84:5a:
3d:71:b8:2b:6e:20:16:e7:a6:b5:8f:3f:a6:5d:15:
68:45:38:d4:2b:b5:fc:70:14:99:36:b1:d4:49:8b:
ba:00:7c:f4:32:db:44:35:4a:e7:d6:c8:f5:9b:01:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CD:C9:B9:78:50:E7:D8:D8:E7:DE:49:F6:58:07:EA:07:97:DE:D8
X509v3 Authority Key Identifier:
keyid:36:E1:53:3C:3F:F9:4B:18:C3:08:F1:B1:C9:5B:A4:4E:B1:F0:EC:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NuFTPD_5SxjDCPGxyVukTrHw7Hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/Mc3JuXhQ59jY595J9lgH6geX3tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ec592f-2434-4d1c-b775-99b9f33de3b0/1/NuFTPD_5SxjDCPGxyVukTrHw7Hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:2f:df:d5:c0:db:5f:4f:eb:3c:ad:44:c5:58:9d:4f:ba:91:
0e:0a:27:ef:87:31:fb:bb:37:1a:8c:d2:8d:f2:cf:38:16:b3:
14:6f:b5:9f:81:1e:b1:62:c2:7d:f5:53:71:86:e8:ac:02:bb:
33:a3:86:38:80:82:b7:83:e6:81:03:ee:0a:d5:18:99:30:a4:
f6:67:a5:e2:8c:ab:9f:8d:12:8b:2f:d5:77:c1:cd:3d:b7:98:
3e:86:3f:fa:4a:43:ff:77:e5:77:f0:43:4e:48:16:0a:a7:40:
c8:04:8a:ac:18:dd:1d:fd:1a:79:b4:88:cc:8d:8e:1e:16:ad:
b9:57:71:9b:43:fb:10:bd:2c:30:f8:c3:c7:77:e8:78:e9:07:
37:ec:cd:9a:3a:25:67:18:7d:ca:9a:6f:39:41:e7:8c:a1:e0:
67:55:f7:7a:74:33:e5:c8:4d:14:0a:0c:d1:74:c3:d5:84:db:
24:4e:8d:78:bc:08:c5:98:2d:0f:95:63:7e:12:24:1f:de:6b:
4f:00:34:90:32:aa:81:9c:de:ba:c8:b0:e5:ce:e2:df:aa:ac:
b6:c1:e7:42:e0:fb:f5:cd:cc:1f:d3:ff:a8:ee:74:66:d3:ed:
dc:e0:6c:29:62:1d:f7:d6:48:a6:2d:32:6c:c8:87:62:d1:a9:
54:fa:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:41 2024 by rpki-client on console-ams.rpki-client.org