Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/nGWnvdgCpHw9h0k2q-qjT0pZvAo.roa
File: nGWnvdgCpHw9h0k2q-qjT0pZvAo.roa (raw, json)
Hash identifier: CUX65dA9oZMTrECfyNIuWIcxOd4/cb5fdV2tq7x6/qs=
Subject key identifier: 9C:65:A7:BD:D8:02:A4:7C:3D:87:49:36:AB:EA:A3:4F:4A:59:BC:0A
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 01856BEEAF21FAD95DEBBD22FAE5CC59BDA9
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/nGWnvdgCpHw9h0k2q-qjT0pZvAo.roa
Signing time: Sun 01 Jan 2023 06:04:42 +0000
ROA not before: Sun 01 Jan 2023 06:04:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1449
IP address blocks: 185.97.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:af:21:fa:d9:5d:eb:bd:22:fa:e5:cc:59:bd:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Jan 1 06:04:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c65a7bdd802a47c3d874936abeaa34f4a59bc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:04:1b:75:0e:e2:71:ff:1e:30:27:62:46:59:
d9:a5:63:cb:c6:90:e0:16:db:d4:9c:98:43:e9:62:
7f:72:03:ea:7c:24:88:1a:bf:0b:d2:49:5c:81:9b:
00:d8:8b:88:82:38:6a:f8:ad:1e:ec:45:93:ca:9e:
d8:de:56:d1:c1:9b:b1:ec:dc:8a:93:1e:5d:d2:33:
1c:6c:18:a2:58:61:ff:a9:56:60:4e:3f:66:07:68:
44:60:f6:53:77:cd:3c:99:ed:08:7a:be:de:90:bc:
81:1b:97:86:a9:df:11:74:47:de:c0:37:39:11:9e:
2a:7a:87:4e:e9:d9:e1:ba:87:01:be:a1:b0:8e:ec:
bb:91:e0:a0:ca:f6:3c:89:ea:c8:14:8f:7c:ea:fb:
18:4a:ce:9f:8e:a2:1c:41:5b:b3:41:8b:52:d8:a0:
8f:32:c5:75:76:5e:da:29:a5:ad:a2:5b:d0:c6:50:
79:80:17:80:44:94:f6:ed:9e:b9:e3:f0:3a:59:4d:
ed:c7:53:bd:fa:a9:38:47:9c:90:c4:5a:c8:14:eb:
4d:31:6f:d5:09:5f:91:34:d2:64:a6:ef:f6:a6:09:
3d:4f:e7:4b:23:0b:2d:c7:00:3f:39:ee:28:e6:d0:
9d:f1:fd:38:98:6e:87:33:bc:83:b2:75:bd:73:ae:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:A7:BD:D8:02:A4:7C:3D:87:49:36:AB:EA:A3:4F:4A:59:BC:0A
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/nGWnvdgCpHw9h0k2q-qjT0pZvAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.80.0/22
Signature Algorithm: sha256WithRSAEncryption
72:70:06:72:0b:3a:07:cd:89:1c:e5:ce:16:d0:63:42:0d:12:
04:1b:1b:ea:2e:9d:2a:ef:9e:18:d0:15:0d:18:6c:64:8d:f9:
89:d1:23:eb:3f:d1:6e:bd:0f:ea:78:cc:bb:72:b0:84:66:d7:
96:56:29:58:2e:e7:a2:5e:70:28:88:e8:f5:75:06:ac:7c:d5:
4e:40:af:bb:fc:fe:6d:da:7b:a7:59:a8:5a:dc:51:69:61:ad:
92:9a:9a:2a:bb:67:b9:9d:f6:8a:47:5f:a2:8e:3e:7a:e2:3d:
8e:31:44:e9:4f:81:7b:12:e4:63:a7:2b:58:81:42:99:24:08:
3f:26:03:e4:e2:a6:e1:a9:83:dc:a0:0a:5e:8e:cd:21:5f:d5:
3b:5e:cb:12:9c:27:6d:51:ed:15:df:81:76:04:d8:f8:a7:90:
2e:09:20:9f:af:4b:14:5f:3b:07:40:10:ff:97:6b:e0:e0:14:
38:ee:db:20:2c:49:d5:f2:a6:3d:ab:7b:64:09:d1:ab:07:cd:
8c:6c:06:78:33:31:98:8b:e5:c0:0e:55:f5:d6:10:34:3c:36:
23:ba:f5:56:f7:73:2f:bf:6a:d8:1e:b2:73:b5:b3:62:32:d8:
dc:30:fa:d4:ee:9b:71:41:ee:56:88:16:33:6b:1e:d8:b7:34:
f7:64:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:36 2024 by rpki-client on console-ams.rpki-client.org