Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/NuZq48Ak_5VFbRijkNm5zmVWdTA.roa
File: NuZq48Ak_5VFbRijkNm5zmVWdTA.roa (raw, json)
Hash identifier: lVRzAfxH2tApOJgygxAaYFGNLTFBvlvy90LiKaIb5L4=
Subject key identifier: 36:E6:6A:E3:C0:24:FF:95:45:6D:18:A3:90:D9:B9:CE:65:56:75:30
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A796C4175F6208961FE498B2573C1
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/NuZq48Ak_5VFbRijkNm5zmVWdTA.roa
Signing time: Mon 01 Jan 2024 18:30:18 +0000
ROA not before: Mon 01 Jan 2024 18:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56676
IP address blocks: 178.170.187.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
37.230.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jul 2024 10:36:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:79:6c:41:75:f6:20:89:61:fe:49:8b:25:73:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36e66ae3c024ff95456d18a390d9b9ce65567530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:ed:7c:6e:38:f0:2f:4b:5b:63:e0:05:dc:
37:cf:f0:8c:dd:fa:4f:02:52:12:38:56:0d:60:ce:
d7:33:ff:c4:a6:fb:8b:a5:da:63:03:e4:87:fc:1d:
bf:df:90:67:7a:c0:4d:90:38:db:01:ca:d2:98:5f:
65:28:b2:1a:50:59:ef:12:c6:56:11:e5:8d:b3:b4:
ec:0c:14:78:63:56:fa:ce:57:4a:3f:7f:de:ae:df:
16:fc:18:4c:c1:0b:42:33:4c:0f:ed:86:bc:c5:45:
71:b7:9c:5b:5c:a9:47:e6:13:98:28:ba:3f:7f:82:
ad:6a:24:b1:03:43:15:06:f1:e2:85:ee:06:8c:07:
bc:50:93:19:56:92:77:e4:79:eb:62:6b:c9:01:bf:
f4:25:5a:d8:20:8b:e6:8f:65:4b:b4:3d:8e:3d:71:
d9:92:56:3e:0c:b5:52:cc:32:9a:6b:e7:d2:87:eb:
2b:36:f6:61:1d:a1:c0:cd:3c:be:b1:02:7c:1a:7f:
e1:f8:cd:8b:10:60:f3:23:bd:91:a3:90:ac:65:d3:
05:ca:c9:54:24:d5:61:ce:e4:fb:5a:90:cf:1c:29:
93:11:02:46:32:ce:57:c8:b3:56:84:b2:29:de:1b:
ba:70:86:77:3d:a6:04:1c:4d:04:b1:3e:7f:08:77:
49:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:6A:E3:C0:24:FF:95:45:6D:18:A3:90:D9:B9:CE:65:56:75:30
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/NuZq48Ak_5VFbRijkNm5zmVWdTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.148.0/24
46.243.163.0/24
141.101.189.0/24
178.170.187.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:67:14:35:0c:fb:a7:4e:2c:d2:78:1a:a3:70:03:99:90:0d:
2c:a6:62:7e:ce:6d:6f:f6:81:05:01:9b:d2:76:3a:33:61:db:
86:4b:ae:c6:87:06:90:3d:a8:a9:d9:b5:c3:e8:78:6d:43:83:
f6:61:52:9a:9d:6e:a5:08:64:8e:c7:36:38:fe:d8:74:b6:b0:
f7:e0:0c:57:02:b8:70:7a:6f:15:cb:cf:3c:fd:77:ce:ae:03:
55:f7:ca:9c:15:5f:98:70:27:62:ae:83:b3:5c:45:e3:d2:07:
00:f3:f5:fe:c8:fd:78:08:0b:9d:a0:6d:1b:2e:d9:70:91:17:
30:b5:b6:09:af:32:d4:2d:2f:ff:26:84:25:3b:ec:14:79:bb:
97:34:82:48:e4:af:b2:04:77:ee:a3:9c:5e:9d:b4:34:6b:d3:
0f:f1:f3:93:4b:15:41:0b:6d:99:2f:6f:48:c5:fd:77:4a:6b:
5f:51:4a:46:a7:68:62:74:60:46:a0:f6:e2:da:cb:fc:b6:20:
3d:3f:f5:52:50:fa:2b:7f:58:04:18:cb:76:bd:dc:44:e5:ad:
af:52:01:ea:0f:35:e4:29:5f:0d:f6:e9:f5:50:56:44:78:70:
3a:48:0e:70:4b:9c:f7:19:f4:e5:6b:6f:fe:5c:fc:61:c9:0a:
8d:98:d1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 12:56:00 2024 by rpki-client on console-ams.rpki-client.org