Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/NZMGL2e4Bp9zIyvemJEclm-WGrg.roa
File: NZMGL2e4Bp9zIyvemJEclm-WGrg.roa (raw, json)
Hash identifier: 3hZbNj4guS4fRth1wmTicE0pHlplQxWbmLDl8j9T1oU=
Subject key identifier: 35:93:06:2F:67:B8:06:9F:73:23:2B:DE:98:91:1C:96:6F:96:1A:B8
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 01857395EDC41E587B7ADD2C116F25D04041
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/NZMGL2e4Bp9zIyvemJEclm-WGrg.roa
Signing time: Mon 02 Jan 2023 17:44:43 +0000
ROA not before: Mon 02 Jan 2023 17:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34530
IP address blocks: 213.222.198.0/24 maxlen: 24
213.222.199.0/24 maxlen: 24
194.126.216.0/24 maxlen: 24
213.222.223.0/24 maxlen: 24
213.222.220.0/22 maxlen: 22
213.222.221.0/24 maxlen: 24
213.222.222.0/24 maxlen: 24
2a03:7580:4000::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:95:ed:c4:1e:58:7b:7a:dd:2c:11:6f:25:d0:40:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Jan 2 17:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3593062f67b8069f73232bde98911c966f961ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9f:d3:d7:23:6e:30:48:3c:2e:bf:2a:4c:8b:
aa:8a:6f:33:5b:da:45:eb:f9:05:08:95:90:dc:88:
55:9a:42:af:47:15:26:1a:a5:6f:85:d7:41:75:4b:
ad:15:0d:7b:72:08:cb:57:13:8d:46:ad:a4:40:dd:
bd:6c:b9:3a:6b:b6:3a:88:dc:d9:89:23:3b:4c:a6:
cb:8d:fa:ce:66:c8:48:6c:9c:c2:ec:31:4a:3a:0b:
fa:60:49:cc:8e:ad:3d:cd:03:99:13:cc:0a:8d:98:
84:b6:a0:b5:0f:6e:1c:e4:b5:ad:4c:0e:d3:94:a5:
65:ed:2b:7c:d1:92:82:bd:90:d7:ca:47:49:d9:50:
4d:e9:d2:b4:c7:29:b1:d7:13:47:03:d0:a1:83:2b:
2f:fd:cd:12:ac:86:51:58:85:1c:5b:7c:82:89:33:
d5:9e:7c:6e:e1:11:4b:16:b7:32:55:98:50:9d:de:
d7:f5:c7:2f:9e:15:f9:26:77:c2:de:0e:70:51:3d:
9d:ce:57:49:04:76:c4:18:56:a0:a8:61:81:d5:57:
89:0e:00:f8:84:aa:b7:71:c2:09:f8:8a:3d:e2:57:
3c:3f:0c:6d:12:00:ce:79:af:cd:4d:fe:5b:00:1e:
58:13:19:6c:df:5e:4f:fd:b8:ce:14:c6:9c:aa:f2:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:93:06:2F:67:B8:06:9F:73:23:2B:DE:98:91:1C:96:6F:96:1A:B8
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/NZMGL2e4Bp9zIyvemJEclm-WGrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.216.0/24
213.222.198.0/23
213.222.220.0/22
IPv6:
2a03:7580:4000::/40
Signature Algorithm: sha256WithRSAEncryption
34:a3:b3:e7:60:0f:1b:c8:41:b7:e7:f7:ed:59:64:d4:9e:52:
d7:2d:18:9f:61:ec:b8:7f:94:d1:32:20:e7:b3:a6:d2:d9:44:
6d:d5:b6:61:90:fc:4a:44:51:eb:5f:c5:ce:45:af:f5:aa:10:
13:77:d8:af:12:6f:f9:e3:a3:55:30:2f:89:26:b5:c0:ad:2f:
94:52:db:98:37:93:a6:60:78:47:d6:39:59:22:ba:8f:c1:fc:
c3:71:a4:7f:95:a4:5d:b3:85:a2:5c:50:b0:d6:51:b9:19:a9:
a8:8f:25:37:ac:e6:e2:0a:c9:32:e2:21:3c:ec:1b:10:a2:09:
8a:19:b8:fb:2b:e9:a0:80:64:de:5c:8c:de:08:69:b2:67:fb:
1d:f6:2c:af:ab:5f:9d:f4:92:34:d0:f1:ce:69:c4:98:bf:8e:
ca:61:e3:4d:a8:d6:81:ba:8b:bc:02:be:bb:cd:82:db:cb:36:
d5:4f:d5:3a:8f:83:73:b2:54:e3:04:9b:be:1e:d6:9e:83:94:
98:9d:88:6d:6d:7d:e6:fd:ed:f8:bd:c2:ec:a8:39:9c:c6:c8:
a7:48:e7:d2:c4:53:03:f8:fb:7e:6f:e6:fd:45:98:54:60:a4:
a2:54:5a:7e:ad:b8:d6:b3:f6:a4:67:ca:fe:d4:f3:2f:64:f4:
63:00:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:34 2024 by rpki-client on console-fra.rpki-client.org