Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nGFEZUm5sJFjOU-MsDyEewphXw0.roa
File: nGFEZUm5sJFjOU-MsDyEewphXw0.roa (raw, json)
Hash identifier: B03siPVzzwIu1SolfLL/5+id681JaHgF4EttuW5qp7k=
Subject key identifier: 9C:61:44:65:49:B9:B0:91:63:39:4F:8C:B0:3C:84:7B:0A:61:5F:0D
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018BD81428C166679FBA2B339D65687AE0DA
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nGFEZUm5sJFjOU-MsDyEewphXw0.roa
Signing time: Thu 16 Nov 2023 12:21:21 +0000
ROA not before: Thu 16 Nov 2023 12:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199856
IP address blocks: 130.255.64.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Nov 2023 18:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:14:28:c1:66:67:9f:ba:2b:33:9d:65:68:7a:e0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 16 12:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c61446549b9b09163394f8cb03c847b0a615f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:e5:62:32:32:cf:cc:97:89:22:e6:d1:e3:
b8:47:05:7e:1a:02:4e:e8:03:eb:17:2c:34:f5:91:
31:9d:f0:06:c4:7f:f1:cf:f7:7a:3b:38:e5:02:b6:
dc:36:22:be:c0:b8:45:5e:f7:0d:87:fb:25:13:5c:
d0:ba:cf:38:e6:39:6e:b2:fa:45:d0:2e:0b:d2:fd:
dd:ec:2f:6e:06:a0:78:f6:68:0c:65:bc:4a:97:78:
5f:8b:b5:95:22:b4:b8:9a:13:e6:15:06:0d:7c:d9:
e7:36:a9:28:70:8e:a9:82:19:6d:2f:0f:5e:f4:6a:
00:73:69:fb:f7:bd:27:b7:27:21:3a:0c:4f:88:44:
c2:a1:d3:47:59:43:cc:13:15:eb:3a:90:6f:3b:80:
8e:8e:28:52:16:38:0a:c3:30:8c:d6:e8:a4:97:bc:
20:02:84:23:f4:99:8f:51:39:51:ec:97:b0:7e:86:
c6:fe:48:e5:18:8f:0a:1f:2c:ca:95:2c:6b:2e:ba:
b7:12:33:54:fd:90:ee:4a:ee:6b:89:03:80:16:41:
d5:79:3b:ed:08:fb:34:6a:68:e8:71:33:2b:59:7a:
c9:2c:4e:ce:71:00:a4:ad:08:33:d0:e6:a3:ce:82:
14:e4:1b:27:3f:17:a6:48:10:3c:a6:f3:3c:1e:8f:
43:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:44:65:49:B9:B0:91:63:39:4F:8C:B0:3C:84:7B:0A:61:5F:0D
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/nGFEZUm5sJFjOU-MsDyEewphXw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:29:01:94:f4:42:2a:e8:b4:6c:b9:ef:11:50:d4:60:cc:5c:
5c:07:3b:ac:1e:61:f0:86:e3:b0:ba:70:0a:ed:ac:14:df:a0:
fa:82:34:dd:22:4b:19:fc:90:fe:a9:8e:55:ff:0a:d1:76:8f:
29:b7:85:23:08:b4:1e:87:ab:83:0a:ac:3f:b2:86:16:f3:d0:
1b:2d:65:72:d3:9e:08:68:d7:0f:33:fd:96:a8:49:fa:93:ce:
77:19:43:bb:27:f9:21:4c:c8:cc:76:78:eb:43:36:e5:2f:2b:
4a:af:1e:c7:e9:43:de:49:07:80:de:eb:c6:7f:30:86:8c:f9:
68:6c:db:8d:f2:70:9e:f6:00:c3:c0:93:b4:d5:71:f9:ae:bc:
55:c7:c9:22:ce:36:b3:8a:aa:17:aa:0f:54:4e:3e:92:ba:62:
05:fe:46:d5:3d:9f:6d:8e:ac:e7:9a:12:8b:30:64:2f:7b:27:
b7:d3:ba:05:60:6e:ea:e0:f9:09:3f:73:98:b9:2d:ca:a9:b0:
5d:ce:ef:1f:b2:39:28:b4:40:d0:49:e6:11:91:3e:7f:10:88:
7c:19:22:b3:6b:68:38:a1:8f:f4:d1:58:16:cc:16:c8:90:57:
f2:12:1f:7f:54:da:f1:97:34:2b:8d:26:75:8e:4c:53:a7:70:
55:0d:ba:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:47 2024 by rpki-client on console-ams.rpki-client.org