Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NG6l_sJQYL83oN9M_OPDczddDR0.roa
File: NG6l_sJQYL83oN9M_OPDczddDR0.roa (raw, json)
Hash identifier: Z6FwtscuYjZYV8dGYpY0a/Haj6FGwBF+u8WOuNVB10A=
Subject key identifier: 34:6E:A5:FE:C2:50:60:BF:37:A0:DF:4C:FC:E3:C3:73:37:5D:0D:1D
Certificate issuer: /CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Certificate serial: 018BAA166B071F38A30DC2C14C3B52AAB4BB
Authority key identifier: 2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NG6l_sJQYL83oN9M_OPDczddDR0.roa
Signing time: Tue 07 Nov 2023 14:01:17 +0000
ROA not before: Tue 07 Nov 2023 14:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199242
IP address blocks: 185.234.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Nov 2023 09:56:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:16:6b:07:1f:38:a3:0d:c2:c1:4c:3b:52:aa:b4:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e368b0aec6c7fd48d0d96b4077a23f906a86a48
Validity
Not Before: Nov 7 14:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=346ea5fec25060bf37a0df4cfce3c373375d0d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:ea:ac:dc:21:45:27:3e:c6:41:70:bb:35:
41:a1:91:ed:3f:9d:56:b1:b2:f4:73:50:aa:c3:da:
db:92:34:78:be:59:37:5e:a8:92:50:59:d7:73:9c:
a1:d8:f1:4b:76:0f:4f:92:12:b9:77:21:10:6c:ca:
3e:aa:a0:11:39:0f:3a:f4:33:13:57:35:82:86:af:
c3:b0:48:d8:ba:10:e0:ca:3e:a3:57:32:79:6e:1e:
e9:24:de:98:67:f4:3a:f0:99:36:19:dd:dd:ea:64:
38:27:23:6c:7e:bf:62:1e:6e:70:3c:48:58:c9:00:
3d:57:b9:e7:81:e0:7f:df:81:0a:73:e6:b6:2d:fc:
67:d4:54:6e:a1:ab:da:57:5a:b9:8d:58:3f:ab:cd:
07:0a:bc:d1:cd:42:bd:73:e0:3e:f4:14:39:e6:f2:
53:a4:5e:54:dc:e9:bb:a7:1b:fb:2b:0e:77:ab:e5:
2a:3c:86:7c:03:69:78:96:23:d1:49:a3:87:f4:a8:
fb:7e:c6:11:90:7e:d4:db:65:92:cd:96:3a:f2:cb:
1e:ea:e4:30:be:a9:ba:ba:1a:af:f4:e4:de:2a:75:
aa:ee:23:cf:c0:53:c6:cd:ea:f2:44:52:03:5c:79:
0c:a7:86:79:de:22:fe:36:60:9b:12:39:39:d9:4f:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6E:A5:FE:C2:50:60:BF:37:A0:DF:4C:FC:E3:C3:73:37:5D:0D:1D
X509v3 Authority Key Identifier:
keyid:2E:36:8B:0A:EC:6C:7F:D4:8D:0D:96:B4:07:7A:23:F9:06:A8:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjaLCuxsf9SNDZa0B3oj-Qaoakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/NG6l_sJQYL83oN9M_OPDczddDR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/dc7030-78cc-4800-888d-1427dd16efa4/1/LjaLCuxsf9SNDZa0B3oj-Qaoakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.12.0/24
Signature Algorithm: sha256WithRSAEncryption
14:9f:f2:ed:ad:81:86:74:30:e3:81:e8:39:3a:f7:ef:08:1d:
5f:c9:f1:e2:e8:92:85:a0:8d:13:71:66:cb:54:8d:0a:2c:eb:
27:56:34:58:34:f4:c8:ef:07:35:47:87:2f:12:7b:f5:9e:f8:
d3:d8:e5:2d:b9:f0:69:88:c2:22:3f:24:7b:77:c3:b0:0d:df:
f4:50:63:de:b6:b5:23:17:72:14:f6:aa:bd:92:9c:29:b5:88:
b5:30:33:f1:d8:2c:22:c2:47:1f:4f:ca:ee:05:f8:95:05:ef:
e4:4f:4c:38:c2:b6:da:f1:1b:4e:78:af:29:86:19:68:ad:ca:
f0:da:6a:83:e5:0a:b7:b8:96:19:21:ff:a7:c6:6e:c0:6d:f7:
37:4b:68:d7:fc:72:65:fb:3a:2f:9e:bb:65:da:19:77:bc:6e:
39:0b:e5:14:f7:ba:b9:75:29:7c:e6:39:3d:89:c8:b5:4d:46:
81:4c:48:0f:3a:7e:d2:3a:a2:65:21:d0:76:37:15:4c:52:06:
71:5e:cd:9f:97:c6:1d:d3:8b:0f:f3:66:82:d8:cf:0c:7d:ca:
2d:84:86:ff:d6:46:b9:85:0b:6a:e1:83:14:8c:32:5f:fb:16:
01:75:74:da:bf:12:0b:56:4a:50:a1:9b:a8:22:56:52:38:ee:
c4:6b:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:49 2024 by rpki-client on console-ams.rpki-client.org