Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/NuZimW9csBBPhoS8LEkrhnBORW0.roa
File: NuZimW9csBBPhoS8LEkrhnBORW0.roa (raw, json)
Hash identifier: TkdslRkeNmotvcUbgOoXUttlvm4VBxIGkQ9P96t5hn8=
Subject key identifier: 36:E6:62:99:6F:5C:B0:10:4F:86:84:BC:2C:49:2B:86:70:4E:45:6D
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 01856B6E9D72136A7807B5EB88B81AFAF1DB
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/NuZimW9csBBPhoS8LEkrhnBORW0.roa
Signing time: Sun 01 Jan 2023 03:44:49 +0000
ROA not before: Sun 01 Jan 2023 03:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204811
IP address blocks: 185.239.72.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:9d:72:13:6a:78:07:b5:eb:88:b8:1a:fa:f1:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Jan 1 03:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36e662996f5cb0104f8684bc2c492b86704e456d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d0:ee:3d:40:bc:a7:2a:6c:b9:ba:5b:bd:5b:
f7:10:b1:de:9c:f9:2b:57:05:08:5c:40:6c:91:53:
33:dd:a6:0a:7b:2c:29:e3:73:87:f6:2a:f9:cd:7e:
7a:cc:d9:23:8d:9b:b5:d2:2a:e4:c4:3e:9a:aa:1c:
a6:d8:9e:2c:80:a4:c3:d9:8e:0b:68:b0:14:b6:67:
b4:e3:31:25:c3:0e:2c:4d:2b:4b:80:af:b1:f7:20:
a5:ed:30:2d:2f:df:4a:96:4d:a7:5f:17:6b:7a:7e:
a8:28:b6:1e:a9:41:91:52:a9:8e:0f:ff:53:6d:25:
3e:df:7c:33:06:e3:1f:f6:ee:83:8a:09:fb:0e:ed:
e2:89:97:b1:f6:f8:73:fd:45:43:e0:ae:24:a9:04:
21:1f:b9:e3:6c:18:7d:73:c0:ed:ba:84:6d:70:73:
1e:48:13:89:bd:85:8d:9d:f5:4f:95:00:9e:c6:e2:
8a:5e:f6:9b:3a:cc:36:34:29:3f:52:be:df:8d:38:
b4:ea:cb:86:8f:2a:f6:48:65:c2:ff:04:7c:b0:93:
e5:3c:d7:24:ee:cc:49:97:db:2c:2a:90:6b:c2:43:
20:86:ff:60:ca:1d:21:5b:6a:c3:df:8d:f0:1b:eb:
b9:02:05:ec:65:5a:30:6e:f4:62:f1:92:0f:4b:0f:
c0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:62:99:6F:5C:B0:10:4F:86:84:BC:2C:49:2B:86:70:4E:45:6D
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/NuZimW9csBBPhoS8LEkrhnBORW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.72.0/22
Signature Algorithm: sha256WithRSAEncryption
76:77:de:6a:f4:97:9c:e4:24:8f:b0:1b:70:83:25:ce:c8:44:
a4:ff:9a:0c:8b:9e:e4:99:ea:04:42:7e:36:ef:47:cd:3a:8e:
e3:9f:ed:2f:e0:47:d3:c3:d7:2a:68:d6:a4:24:e5:c4:3d:0d:
1f:53:28:28:0d:84:16:e6:cb:3b:d4:9c:da:b5:ca:83:4e:43:
e3:18:5e:33:01:6c:03:19:06:4e:d6:6b:ac:57:a4:d7:c8:e0:
3c:2e:64:3d:e5:f5:07:c7:f1:7d:c7:1c:57:ec:ba:44:25:c0:
e2:90:0d:8f:49:38:be:be:67:32:62:c7:f9:20:a9:2d:d4:e9:
a2:98:3a:bb:0e:aa:03:ab:af:19:df:19:c5:81:8d:09:a0:37:
e0:0d:b1:31:87:f0:70:cc:aa:58:be:43:6b:bc:91:f0:41:d0:
bd:ae:d2:ce:bc:89:91:77:31:6c:99:a4:71:66:ea:d9:d9:f0:
a1:10:33:05:46:ae:72:73:f5:9e:57:80:05:32:6b:9f:f1:90:
ab:f3:ab:05:63:38:a4:06:a7:48:82:af:38:bf:fc:4c:31:59:
e7:b8:2f:71:e1:e3:34:3b:cd:be:d3:6b:71:64:cf:74:a6:e5:
19:a4:69:06:80:8b:0b:75:af:7a:2e:f0:ca:b6:7c:81:12:ea:
61:c4:f1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:16 2024 by rpki-client on console-ams.rpki-client.org