Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Nn-JlHzVFPFVUQTyTCXrjIL-0Y8.roa
File: Nn-JlHzVFPFVUQTyTCXrjIL-0Y8.roa (raw, json)
Hash identifier: Z1gqvm3LBpPDuJj2tVknTz2bPP++mb4Y3Vbp+ZPYwLY=
Subject key identifier: 36:7F:89:94:7C:D5:14:F1:55:51:04:F2:4C:25:EB:8C:82:FE:D1:8F
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018BD34F6456BC85368C6AC18DF1610B21D6
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Nn-JlHzVFPFVUQTyTCXrjIL-0Y8.roa
Signing time: Wed 15 Nov 2023 14:07:57 +0000
ROA not before: Wed 15 Nov 2023 14:07:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 217.119.142.0/24 maxlen: 24
146.19.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:4f:64:56:bc:85:36:8c:6a:c1:8d:f1:61:0b:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Nov 15 14:07:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=367f89947cd514f1555104f24c25eb8c82fed18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:af:3d:5c:a0:8a:d7:08:f9:0c:31:09:b8:
c6:d3:71:a6:74:85:cc:26:42:ba:e2:75:dd:0c:2d:
21:5f:16:d0:cd:7f:53:ae:d8:23:83:3b:8e:a8:76:
20:4f:cb:bb:6b:c6:c0:aa:40:eb:91:80:36:7f:e8:
67:68:53:bd:e7:c9:6f:ce:b5:81:42:2d:bf:ca:f1:
83:df:b6:a1:ee:f2:50:7b:9d:8f:4f:57:db:07:e7:
ba:32:71:e9:9c:e4:60:42:fb:5f:fa:1a:56:fa:6f:
8c:cc:4d:70:75:27:0f:7e:ad:d2:50:6a:59:8d:1d:
bb:27:d1:2e:53:6e:ab:e5:8d:bf:c1:bd:fe:d2:67:
f1:44:02:2f:f1:0f:a7:1b:e7:bc:9c:7d:a0:40:56:
53:13:07:44:12:ba:80:18:10:b1:35:89:d5:de:ef:
2c:84:7d:57:82:ef:23:24:4f:01:10:49:ef:d8:fb:
e4:3e:69:71:c3:d7:77:3e:20:2b:74:5f:7e:38:53:
9f:e7:8b:1b:02:55:11:ea:52:24:69:c9:84:c3:e7:
29:1b:21:b9:92:fb:c0:a5:5c:cd:9a:6a:6e:92:1e:
ca:4f:95:73:47:db:b3:26:5a:7f:98:1d:b3:07:50:
2c:f7:37:77:95:72:75:8a:0b:8f:f3:04:cb:90:37:
91:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7F:89:94:7C:D5:14:F1:55:51:04:F2:4C:25:EB:8C:82:FE:D1:8F
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Nn-JlHzVFPFVUQTyTCXrjIL-0Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.26.0/24
217.119.142.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a6:63:ae:ae:39:17:45:3c:44:c8:cf:34:17:dd:ad:9c:8e:
54:d2:5e:af:b3:4e:ff:fe:d3:02:28:cd:c1:cf:e7:24:58:0d:
91:bf:c5:e0:0b:57:4d:8b:58:94:c5:76:ed:f5:fa:c8:25:7a:
36:ad:5c:b5:b7:80:dc:dc:a1:70:46:a1:2c:84:4d:19:04:92:
b6:fd:9c:9e:67:9e:9e:53:6c:3d:b3:96:2d:1a:29:d9:22:c9:
ac:18:e7:37:18:88:3a:c4:93:8a:03:31:48:d2:ca:13:b7:92:
b5:c4:da:06:c0:89:ff:e0:39:31:c5:35:de:69:39:4e:5b:b7:
28:5d:82:7d:7e:2a:bd:05:e1:12:f3:d3:49:f2:40:26:1b:cf:
68:31:fa:dc:77:6e:cb:e5:37:2c:fb:0d:0f:b2:f3:d6:eb:4c:
1a:62:79:60:76:8d:79:15:a9:cc:17:34:6e:0f:e2:30:e9:51:
71:69:59:66:da:a9:7e:c1:04:1e:d2:0b:9c:6f:b8:da:56:fd:
42:46:ce:8d:34:f2:d1:93:56:50:fe:f1:f4:ca:a7:54:b5:ed:
65:0e:99:7d:6f:b8:b5:5a:ee:60:c4:2a:27:2f:54:11:ff:77:
99:78:e5:d8:99:77:31:35:88:2d:af:72:91:b2:cd:67:23:09:
6e:fb:73:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org