Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/np-Cxj0exAYyYlw5vYt_pfjhA1Y.roa
File: np-Cxj0exAYyYlw5vYt_pfjhA1Y.roa (raw, json)
Hash identifier: Q7vXfZuU3YredmzRXIR+U+Lift7OeZAYkPcO+IwFvX8=
Subject key identifier: 9E:9F:82:C6:3D:1E:C4:06:32:62:5C:39:BD:8B:7F:A5:F8:E1:03:56
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 01857079A80E05C81B9DEC7FA0C26DEFF145
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/np-Cxj0exAYyYlw5vYt_pfjhA1Y.roa
Signing time: Mon 02 Jan 2023 03:14:59 +0000
ROA not before: Mon 02 Jan 2023 03:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58138
IP address blocks: 185.43.80.0/22 maxlen: 24
91.239.32.0/23 maxlen: 24
2a04:9040::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:a8:0e:05:c8:1b:9d:ec:7f:a0:c2:6d:ef:f1:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Jan 2 03:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e9f82c63d1ec40632625c39bd8b7fa5f8e10356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fe:10:17:44:b4:16:c6:fa:f7:03:ef:2b:ae:
e9:d3:e7:5d:80:28:ba:0d:fd:c6:38:ae:ea:6b:8c:
4c:b2:79:c5:ee:8d:97:fc:4a:6d:bf:25:13:16:b5:
66:59:30:69:d9:cc:df:5b:74:76:ab:e5:69:d8:57:
b2:c5:c1:fa:07:31:9b:1e:b7:19:17:0b:c2:ae:fd:
b8:e8:10:73:76:21:2e:7e:86:b5:6d:b6:95:65:d2:
e0:ab:85:21:9c:1c:a2:05:c8:33:15:d3:30:e0:c2:
da:a2:ce:a5:7d:f2:e5:70:66:c3:56:dd:6c:ec:bb:
28:1c:8a:12:f7:0f:77:88:af:95:88:8c:bc:1e:09:
d5:bb:01:43:75:c3:ea:4b:11:20:8c:9a:34:82:29:
16:0f:72:14:fa:93:d1:3a:c6:e2:63:67:fc:cb:34:
af:a9:f0:d1:85:f6:af:30:51:20:66:fb:b2:c2:87:
7b:2a:63:77:c6:db:cd:0a:f5:c9:68:27:d0:ac:64:
58:ed:83:00:e5:3e:c1:48:d2:ed:4d:13:ff:da:ed:
7e:9b:55:dd:26:a9:34:99:ab:d1:47:ac:6f:10:d0:
59:32:3a:ca:1b:fe:a8:46:0e:b4:53:b9:f0:da:35:
d5:22:64:3c:0b:f2:cb:77:9c:1e:87:5e:c2:51:05:
49:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9F:82:C6:3D:1E:C4:06:32:62:5C:39:BD:8B:7F:A5:F8:E1:03:56
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/np-Cxj0exAYyYlw5vYt_pfjhA1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.32.0/23
185.43.80.0/22
IPv6:
2a04:9040::/29
Signature Algorithm: sha256WithRSAEncryption
4f:20:fb:d7:c0:6d:4b:19:1d:c3:05:1f:a4:5c:d5:b3:29:aa:
ee:ee:2e:a6:38:cd:fd:e9:ae:c5:ae:61:a5:f7:7b:24:77:7c:
06:e5:ff:f9:6a:e5:0f:dd:5c:61:4e:a9:70:a3:ab:13:56:25:
d6:49:f0:c4:32:72:23:61:0c:20:87:9a:aa:38:e5:4a:f8:39:
f8:3d:5a:54:4e:1d:c7:e8:15:d8:95:36:5f:ac:48:c2:47:34:
7a:12:53:75:1a:66:da:0d:8a:13:9b:21:21:76:cc:0b:65:31:
38:bc:97:e3:f2:f8:f2:2d:05:58:a1:e5:dd:d5:75:c8:45:37:
5d:96:81:ef:d8:6d:3d:f3:0e:6b:38:30:cc:cf:f5:e6:74:d1:
d7:f9:82:6e:52:3d:57:bf:fb:d0:eb:e7:6d:78:ce:0b:ee:29:
3d:9a:10:9a:82:8e:50:56:03:df:70:03:50:cd:d4:e9:d5:73:
92:3d:19:20:82:96:f1:2c:21:62:b6:34:c6:33:28:aa:4b:e4:
1e:62:b1:c3:81:89:c6:78:a2:b1:88:cf:77:a7:13:2e:62:65:
3d:54:51:95:db:cc:ca:68:76:cb:09:24:7b:3f:58:4f:dc:2a:
39:9d:7b:17:ad:ca:15:57:48:31:e5:8c:dd:c2:14:34:94:ed:
2a:79:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:23 2024 by rpki-client on console-ams.rpki-client.org