Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/NHV7parLbgsjK8lZBwjIGoNHZ8k.roa
File: NHV7parLbgsjK8lZBwjIGoNHZ8k.roa (raw, json)
Hash identifier: jUeEFRl7iC/qA2X9E8ZKaeWl28rjHKvKdghT6Jkk+PM=
Subject key identifier: 34:75:7B:A5:AA:CB:6E:0B:23:2B:C9:59:07:08:C8:1A:83:47:67:C9
Certificate issuer: /CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Certificate serial: 018C62BF7E9318CEF8E05D9B585E513A8415
Authority key identifier: ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/NHV7parLbgsjK8lZBwjIGoNHZ8k.roa
Signing time: Wed 13 Dec 2023 10:36:06 +0000
ROA not before: Wed 13 Dec 2023 10:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5650
IP address blocks: 194.50.144.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:bf:7e:93:18:ce:f8:e0:5d:9b:58:5e:51:3a:84:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edfe3f6f6d98714e01f08c73b2644368774e8660
Validity
Not Before: Dec 13 10:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34757ba5aacb6e0b232bc9590708c81a834767c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:14:1f:86:d4:cb:09:06:79:85:6b:96:fe:
77:d7:a4:af:86:63:1b:65:dc:1c:53:d2:22:dd:79:
fd:d9:6f:9b:c6:ab:98:1a:01:9a:9f:2c:df:38:65:
1b:f1:8c:6a:06:7e:87:0a:09:eb:da:11:c5:66:f9:
0a:e9:23:a4:84:3e:a7:42:95:91:b7:53:fc:76:53:
ea:ac:35:69:0e:cc:57:44:a1:79:33:e3:b4:77:b9:
f4:e5:6f:1e:c7:6d:ca:c2:52:c0:4c:a7:f2:33:0b:
43:cf:83:51:e7:02:f2:36:ba:10:de:99:ae:c7:5f:
4f:0c:31:ff:62:17:77:9f:7d:89:1b:08:63:47:6c:
1a:80:22:dc:39:ea:7f:fb:2e:67:4f:cd:ef:af:84:
66:cf:70:7b:c2:c1:1b:0d:a8:4b:9a:b2:f2:01:f5:
f1:57:82:ec:a5:dc:63:ae:81:48:de:1c:49:5b:cc:
b8:ab:3d:f3:3c:7a:06:24:a0:ca:0a:dc:5d:b1:cd:
d3:68:c7:bb:26:93:75:5f:84:a0:a0:0d:f3:cc:67:
17:e7:cf:d9:00:0f:45:1c:b0:e9:b9:f2:16:c0:41:
76:91:14:c3:42:c1:d0:ea:24:28:e5:41:d8:08:c4:
8e:0c:83:53:02:43:cc:f6:af:e6:63:e6:e4:ac:e9:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:75:7B:A5:AA:CB:6E:0B:23:2B:C9:59:07:08:C8:1A:83:47:67:C9
X509v3 Authority Key Identifier:
keyid:ED:FE:3F:6F:6D:98:71:4E:01:F0:8C:73:B2:64:43:68:77:4E:86:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f4_b22YcU4B8IxzsmRDaHdOhmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/NHV7parLbgsjK8lZBwjIGoNHZ8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/185362-c8d9-456f-9e2c-eb4a96c38c6f/1/7f4_b22YcU4B8IxzsmRDaHdOhmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.144.0/22
Signature Algorithm: sha256WithRSAEncryption
27:54:69:6c:b9:cf:8b:01:c0:f3:e5:01:16:90:1a:ea:59:4c:
2d:be:5d:8a:cd:24:17:df:3e:9b:85:db:a5:32:bc:b8:f2:9d:
35:a7:b9:b0:2a:1d:f1:c1:a5:3b:4c:63:49:08:2c:18:70:e4:
3c:29:39:c4:c0:45:60:2f:36:15:34:a6:bd:d9:ed:95:54:25:
e5:6a:b3:0f:c8:30:df:c3:0c:fb:e5:d9:5b:a5:d1:3d:44:d6:
df:33:b3:3f:ed:a6:c6:13:e3:02:91:fc:c2:c3:61:bd:98:89:
e3:d2:1d:dc:6b:c0:af:46:6e:3e:b7:cf:d5:d5:64:e9:e9:7a:
83:b9:27:df:c4:96:ed:0d:31:d2:9c:38:2b:89:e7:83:ea:f3:
79:53:2a:67:6d:57:c5:3b:bf:77:30:b1:a5:55:5d:f0:c3:64:
07:0f:4f:0e:7d:51:ca:de:2a:c5:53:d3:9c:48:0f:57:42:8d:
32:e6:57:e1:9e:a9:1e:45:57:a2:ca:c5:7a:30:d9:2a:1d:7f:
99:72:7a:f6:1e:78:04:83:12:2c:5d:8f:47:97:83:1c:a3:bc:
e0:d3:ca:d0:3c:d2:e4:4c:76:a4:1b:b2:5c:cc:04:b3:93:6a:
fb:36:14:8a:08:19:1a:f1:15:13:46:aa:22:04:6a:6f:d5:ce:
ea:e0:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:27 2024 by rpki-client on console-ams.rpki-client.org