Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nfAUe5E2MLkCAfp4sRqJLqas5mw.roa
File: nfAUe5E2MLkCAfp4sRqJLqas5mw.roa (raw, json)
Hash identifier: hHzgTczSfwgi329aH/jyW6RMMDp3I3C+9CSyzNBjK58=
Subject key identifier: 9D:F0:14:7B:91:36:30:B9:02:01:FA:78:B1:1A:89:2E:A6:AC:E6:6C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018CC49335FD4B24FDDAFC87E99FD52567A3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nfAUe5E2MLkCAfp4sRqJLqas5mw.roa
Signing time: Mon 01 Jan 2024 10:30:31 +0000
ROA not before: Mon 01 Jan 2024 10:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 93.113.171.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
89.45.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 10:42:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:35:fd:4b:24:fd:da:fc:87:e9:9f:d5:25:67:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 1 10:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df0147b913630b90201fa78b11a892ea6ace66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:a9:79:b5:8a:c4:08:6e:f4:6e:b0:64:64:
e0:83:b8:c1:32:34:9a:ea:7a:30:b6:83:9a:f6:cb:
7f:8c:53:15:08:b1:d6:01:db:86:23:dc:b1:c6:be:
c4:b9:74:bd:ec:fd:66:c8:1a:61:de:0e:9d:d3:c3:
44:d3:97:3a:e1:b8:9f:0b:2f:14:8e:2f:a7:30:0e:
10:ae:d3:65:6e:01:e2:dd:5d:45:4a:e4:a7:44:ff:
8a:34:c6:a7:c5:bc:ae:cb:78:9b:30:8c:1b:4d:d8:
39:9a:44:dc:5e:93:60:04:8e:8b:78:d7:b6:9f:38:
75:15:be:89:e5:c2:dc:c0:f5:f6:00:23:ca:46:9d:
73:b3:b3:e6:bb:55:35:e8:46:27:f3:24:3d:bc:70:
ad:78:94:81:49:d8:42:c3:42:4c:b2:ad:d2:ec:83:
96:a1:18:c5:06:6e:16:f2:47:8a:83:04:94:b7:8c:
92:fd:7e:70:9e:82:98:6b:09:e0:18:77:63:f1:d0:
41:75:6f:7b:71:c9:d1:00:37:1a:fa:73:9b:09:d3:
0f:b9:5a:78:b6:92:22:31:61:44:dc:f9:c9:02:47:
72:dc:83:a0:71:ed:17:2e:5e:e3:6a:fa:c9:32:b2:
ac:34:a8:42:f6:54:ec:35:93:5f:50:51:7b:d4:54:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:14:7B:91:36:30:B9:02:01:FA:78:B1:1A:89:2E:A6:AC:E6:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/nfAUe5E2MLkCAfp4sRqJLqas5mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.162.0/24
92.114.54.0/24
93.113.171.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:47:70:b4:40:ca:70:f1:f4:a3:53:48:d1:97:78:f4:e4:64:
df:2f:97:f5:d7:27:9a:1e:99:5e:6a:57:71:e7:4e:d0:80:d1:
dd:cc:ab:96:ad:79:5c:cf:dc:13:e1:5a:9d:0b:c8:3e:c0:84:
9d:b9:c5:04:1b:4a:ff:82:43:58:85:b9:68:c5:4f:80:00:b0:
c9:72:e5:8c:6a:50:3b:07:e8:a1:1e:2d:ee:17:2a:30:d0:bd:
41:d3:3b:6f:60:e6:3b:b2:0d:2d:90:12:ea:e1:64:d7:77:36:
e4:11:7f:9c:32:f1:ec:5a:eb:87:61:57:82:a4:c9:32:b3:af:
3b:d6:17:d1:ed:09:92:23:7e:c3:9c:b4:6d:85:c4:a5:bd:e8:
be:ab:2e:44:c2:c8:d4:0c:22:7c:bf:eb:d0:f1:f5:9e:00:83:
33:ee:00:e3:f5:f3:2f:a5:3f:02:ee:97:44:5a:f5:63:a3:63:
65:9a:97:03:f9:ec:b6:ef:f7:92:fc:6e:84:9e:29:99:8b:03:
6c:e2:75:3f:90:06:19:ca:51:5a:f7:9b:16:49:30:05:e1:b9:
4f:c8:4d:3b:99:fc:bc:e9:53:3d:12:7e:ca:0b:bf:7b:b5:32:
16:bd:da:70:af:2f:6d:66:a6:fc:36:6b:b8:ca:03:c9:c1:30:
91:99:1a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org