Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/nukgosqPivwEM4RBiCIa4GDo7A4.roa
File: nukgosqPivwEM4RBiCIa4GDo7A4.roa (raw, json)
Hash identifier: /gACT48Ll5hP2JMGmulzEoBKo+GE1H18Es5MlIgzp9w=
Subject key identifier: 9E:E9:20:A2:CA:8F:8A:FC:04:33:84:41:88:22:1A:E0:60:E8:EC:0E
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 01856C813CAC10D8040A2AFA26BB36AFA123
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/nukgosqPivwEM4RBiCIa4GDo7A4.roa
Signing time: Sun 01 Jan 2023 08:44:47 +0000
ROA not before: Sun 01 Jan 2023 08:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 93.175.159.0/24 maxlen: 24
2001:67c:2d7c::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3c:ac:10:d8:04:0a:2a:fa:26:bb:36:af:a1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 1 08:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ee920a2ca8f8afc0433844188221ae060e8ec0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:89:c3:a0:a4:98:d8:31:9b:b3:54:34:d4:77:
1b:fa:0c:c5:f9:5c:fe:83:8b:74:62:28:5b:e2:81:
0c:60:ce:19:28:45:fb:a2:10:d6:1e:a5:ef:2f:19:
9f:53:85:c1:4d:95:42:e5:c1:f2:fe:58:f4:94:da:
6c:ac:ef:2c:4f:9c:ae:63:50:0e:1f:68:5d:db:d3:
0f:3b:8d:17:7c:8c:b4:94:a1:f9:3d:f8:12:0a:cd:
20:16:d4:f8:b2:a5:95:7a:41:d4:2c:bc:9a:c4:38:
dd:82:d8:af:28:5b:9e:96:8a:a4:d9:e5:38:35:59:
ba:54:54:c3:3b:7b:b9:14:6b:15:c7:01:42:bf:a0:
1a:08:75:26:c7:10:95:c0:6f:37:07:b2:2f:7f:fc:
b0:34:f7:84:b7:b2:7f:83:c5:b2:9d:29:43:45:48:
36:c4:c8:a4:75:e8:40:d0:80:cf:7a:b2:7d:09:48:
9f:ad:d8:7e:8f:25:c7:ab:7b:3c:6d:96:91:7c:b0:
ca:70:41:3e:3f:40:d3:f6:de:2e:56:e6:20:aa:26:
63:cb:fc:fb:3b:d5:1e:c6:9d:5b:60:06:fe:bf:dd:
0e:82:5d:b2:23:61:23:f3:14:74:cf:14:c0:09:c9:
8b:05:e2:ea:d3:b6:cc:14:78:eb:d7:c2:24:b9:f8:
31:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E9:20:A2:CA:8F:8A:FC:04:33:84:41:88:22:1A:E0:60:E8:EC:0E
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/nukgosqPivwEM4RBiCIa4GDo7A4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.159.0/24
IPv6:
2001:67c:2d7c::/48
Signature Algorithm: sha256WithRSAEncryption
b2:b3:8c:f3:1e:14:e5:57:91:12:92:f8:f5:9d:a7:2b:8d:b2:
90:55:96:b7:45:d3:0f:72:5f:f6:a4:e8:ac:d8:4a:2c:15:9f:
a3:d7:99:97:74:a6:1f:1e:70:34:aa:47:0c:b8:b3:e8:23:bb:
9b:95:ba:2d:b5:5d:53:a8:ec:34:d3:40:bf:54:9a:78:fe:19:
62:5c:9f:d1:68:b9:cc:8e:89:17:b5:57:57:9a:2f:01:84:1a:
a9:22:27:12:a8:9f:c1:18:b1:e7:2e:42:77:ae:7b:84:e7:59:
5c:ef:b5:d4:7e:0b:3f:45:71:1d:11:53:09:9e:6a:bf:56:40:
b9:7d:e0:37:21:8d:d3:6e:f2:90:7b:4e:67:a7:0f:c2:f2:43:
13:cf:2b:69:08:e1:f8:fc:44:63:73:72:fd:04:6b:06:d1:ca:
df:ec:db:8f:78:dc:86:5b:fc:93:e5:c7:33:88:c1:9d:a3:ea:
4a:70:f5:9b:33:9c:2c:8c:9f:79:cb:e0:f8:cd:fd:14:e0:d3:
66:18:0a:85:f3:ef:b1:14:20:50:41:34:dc:17:ba:6e:d3:18:
12:3b:18:45:94:7a:32:de:0a:43:52:b5:1b:52:46:34:c3:72:
b4:6e:8b:c0:f5:74:11:ed:76:12:d7:6f:4c:22:18:3f:96:ba:
de:db:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:02 2024 by rpki-client on console-fra.rpki-client.org