Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NACGmzKQhcWjk5yEAD8geooiRWA.roa
File: NACGmzKQhcWjk5yEAD8geooiRWA.roa (raw, json)
Hash identifier: 5YWNuw0zxrKkDPA1CwiicWAOgok7/vXNj7C93cGYirc=
Subject key identifier: 34:00:86:9B:32:90:85:C5:A3:93:9C:84:00:3F:20:7A:8A:22:45:60
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018CF90EB9BDC23672BDA7042E4F9A81FBC0
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NACGmzKQhcWjk5yEAD8geooiRWA.roa
Signing time: Thu 11 Jan 2024 15:05:40 +0000
ROA not before: Thu 11 Jan 2024 15:05:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60808
IP address blocks: 5.34.208.0/21 maxlen: 21
188.253.96.0/19 maxlen: 24
5.34.216.0/21 maxlen: 21
185.215.246.0/24 maxlen: 24
188.253.12.0/22 maxlen: 22
2a05:ec80::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 25 Jan 2024 22:11:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:0e:b9:bd:c2:36:72:bd:a7:04:2e:4f:9a:81:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jan 11 15:05:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3400869b329085c5a3939c84003f207a8a224560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:bb:55:6e:bc:b9:71:7f:e7:b5:38:f0:27:
21:9d:99:8a:f1:6e:93:e9:d3:c9:1c:1a:f6:34:48:
3b:c8:3f:79:e8:04:54:69:39:b6:e6:57:5e:f1:b4:
2d:38:b5:0a:e9:e7:06:95:ad:d3:93:fa:54:9e:9c:
96:77:26:3a:1f:29:be:d3:bc:83:02:3c:c9:8b:4e:
58:f0:71:a5:f6:12:ed:fe:4d:58:e3:8b:c7:cd:ee:
65:96:c6:6e:15:97:92:53:54:f3:c3:c1:9f:73:fa:
98:4f:f5:36:58:0d:26:f6:72:df:cd:47:1e:90:be:
ff:d2:7f:d0:b4:16:2c:23:8f:cd:4e:86:b9:9f:7b:
b4:e6:9f:d2:37:76:24:00:39:e6:a4:a7:4e:e3:5a:
88:73:05:23:b4:90:f7:e3:3f:75:69:dc:34:04:be:
6c:8e:86:f1:f2:3f:8a:48:bf:94:6c:51:6f:b8:89:
1d:11:3d:81:41:b7:ac:2c:1c:23:05:40:23:8b:5b:
13:a0:ef:63:99:69:30:30:bf:92:25:f6:68:8c:e8:
78:f0:c5:70:c3:eb:c6:09:33:32:a5:1e:db:a4:18:
8f:a7:0b:a3:02:f2:ad:47:4b:4d:41:0a:bc:fc:bd:
60:d4:b1:6d:e4:f7:cd:4b:63:3c:a9:23:58:23:93:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:00:86:9B:32:90:85:C5:A3:93:9C:84:00:3F:20:7A:8A:22:45:60
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/NACGmzKQhcWjk5yEAD8geooiRWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.34.208.0/20
185.215.246.0/24
188.253.12.0/22
188.253.96.0/19
IPv6:
2a05:ec80::/29
Signature Algorithm: sha256WithRSAEncryption
24:e3:8c:19:37:0a:18:ba:a2:c3:61:e3:07:f9:46:bd:5f:96:
92:75:e7:9c:63:c6:45:fc:cf:52:ff:db:fd:09:87:ae:76:38:
fc:d4:ce:64:d2:8a:db:37:1f:bf:fb:41:ab:b0:8f:1a:8b:93:
cf:89:3f:13:71:c9:90:22:b3:55:78:ad:a3:cc:b9:31:38:3f:
86:28:93:d7:76:b1:b4:21:0e:24:c6:e1:5f:c2:0a:2d:6a:05:
98:cd:74:a6:c3:cf:26:69:57:2c:a1:18:c7:d6:0b:2e:cf:be:
0e:5b:c0:a0:b8:d1:f6:57:45:1d:eb:0f:09:89:f1:b5:2d:16:
37:d9:0c:1a:51:ff:09:b3:a2:49:35:e2:58:51:2f:f6:08:47:
30:16:f8:0f:f1:79:b8:b1:ec:b0:42:11:2d:6a:d2:c2:ef:22:
d9:dd:89:9a:0d:5b:6c:18:00:cf:f2:18:1f:3b:da:a7:b5:d4:
c7:25:8f:d6:ab:a4:00:66:bc:a4:a7:05:e5:45:9e:ba:49:fa:
b1:8d:fc:ee:45:78:ab:ed:71:ea:6b:41:78:77:58:76:fa:60:
f5:0b:c6:ec:ac:a1:3b:ec:14:65:ed:e2:cc:c0:26:4e:df:c3:
9a:9e:6c:f1:d4:17:ee:fa:81:36:4a:1d:29:ff:53:15:06:50:
34:a6:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 26 01:41:52 2024 by rpki-client on console-fra.rpki-client.org