Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/NLpZq5cSeLIw_lSIORAPIKdVa0g.roa
File: NLpZq5cSeLIw_lSIORAPIKdVa0g.roa (raw, json)
Hash identifier: hVbHy4BNOSqcToA0EUFUqos8uE2o/lyHxhHsU1CYGHs=
Subject key identifier: 34:BA:59:AB:97:12:78:B2:30:FE:54:88:39:10:0F:20:A7:55:6B:48
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 018B5D764D6008CF782B2B08094C50389A53
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/NLpZq5cSeLIw_lSIORAPIKdVa0g.roa
Signing time: Mon 23 Oct 2023 16:55:15 +0000
ROA not before: Mon 23 Oct 2023 16:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 146.70.182.0/24 maxlen: 24
146.70.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5d:76:4d:60:08:cf:78:2b:2b:08:09:4c:50:38:9a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Oct 23 16:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34ba59ab971278b230fe548839100f20a7556b48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:26:23:c1:1b:d9:d6:f5:04:36:a1:0b:50:
6a:1c:44:2d:35:24:28:32:3f:d5:2f:83:95:94:28:
17:db:23:fe:87:8e:b3:a2:72:f1:43:cc:33:0d:31:
ca:c3:41:92:ef:14:2e:f1:cf:82:13:41:65:01:90:
b6:a5:33:60:9a:e2:18:9a:78:19:40:4a:c4:96:32:
c0:cf:d5:54:19:0c:03:86:ad:ac:7e:26:98:f2:f1:
59:44:19:03:b1:19:44:a7:92:ea:5f:db:f6:36:26:
f5:48:3f:eb:4f:4e:81:ac:95:98:6a:1d:e7:f4:b2:
a4:48:a8:2e:cd:09:82:7b:79:bd:38:2e:c4:fd:53:
70:2b:8b:ba:9f:55:f0:2a:57:d2:6d:d8:9f:45:4a:
a8:7b:b8:3f:04:00:23:6c:aa:42:3f:91:f4:65:71:
e7:63:d8:b1:b0:e4:6e:32:dc:d4:1d:bd:50:cc:e0:
75:e3:fb:dc:9e:b4:55:38:d3:56:4f:8b:da:1d:19:
d0:10:69:a1:30:cc:92:95:3f:87:58:1f:be:57:6b:
bd:41:a6:e4:66:0d:45:56:45:cc:74:25:1a:7c:ba:
84:84:01:ab:73:4c:b2:83:58:85:46:7a:be:11:3b:
1f:93:e6:b6:1a:34:4d:9c:31:da:6c:75:aa:f3:81:
2f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:59:AB:97:12:78:B2:30:FE:54:88:39:10:0F:20:A7:55:6B:48
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/NLpZq5cSeLIw_lSIORAPIKdVa0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.70.181.0-146.70.182.255
Signature Algorithm: sha256WithRSAEncryption
36:62:32:53:4d:25:2f:27:19:5a:77:22:06:9e:1d:24:e4:a7:
07:2a:a4:6e:a6:65:84:99:8a:0c:92:db:b9:7c:db:01:ec:75:
81:77:aa:af:ec:37:9f:f5:09:71:ae:50:68:2d:f0:f8:a5:f7:
8f:fe:0c:4c:88:f4:48:ed:bf:55:fd:03:3c:a1:65:02:96:02:
26:65:a2:f7:8a:20:5b:94:07:48:ed:d0:32:28:8c:f6:77:ac:
4a:d5:79:c9:ba:50:23:ca:8d:6a:4d:64:33:d3:23:21:4a:cd:
e6:13:cf:de:a2:b9:36:91:22:b0:09:74:c6:4b:ba:a3:ec:68:
e9:64:10:1d:16:5a:24:2b:52:6b:2a:9e:b0:65:2d:27:14:56:
15:07:16:ee:3f:2f:45:8d:bf:6e:49:77:b3:60:6f:ba:ad:08:
23:2f:8a:bd:7b:69:af:40:17:06:47:03:6d:29:a8:82:76:ec:
3b:b9:6f:6e:0f:65:60:9b:3d:03:4e:37:cd:c8:00:ab:5d:38:
c1:4c:ab:e7:9d:1b:7e:d4:00:d4:55:92:3d:a9:8d:0c:10:87:
f8:a0:43:24:c3:55:bf:82:97:3a:79:93:4b:ec:6f:42:3c:0d:
74:65:10:5c:b7:ac:d5:88:9f:80:ca:f7:9b:f7:34:0e:79:02:
dd:26:7d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:30 2024 by rpki-client on console-ams.rpki-client.org