Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n6t_fwLEA0sIIuEpPKxsOtNqItA.roa
File: n6t_fwLEA0sIIuEpPKxsOtNqItA.roa (raw, json)
Hash identifier: D2va7Nee9PZaJA+nSGW3c1LPaRKiiP5pvzZnWfuQXHQ=
Subject key identifier: 9F:AB:7F:7F:02:C4:03:4B:08:22:E1:29:3C:AC:6C:3A:D3:6A:22:D0
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018926B7DA3BC40F36E4AEBCA2B96D4FC316
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n6t_fwLEA0sIIuEpPKxsOtNqItA.roa
Signing time: Wed 05 Jul 2023 15:42:10 +0000
ROA not before: Wed 05 Jul 2023 15:42:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 109.176.213.0/24 maxlen: 24
109.176.210.0/24 maxlen: 24
89.213.158.0/24 maxlen: 24
89.213.157.0/24 maxlen: 24
89.213.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jul 2023 08:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:b7:da:3b:c4:0f:36:e4:ae:bc:a2:b9:6d:4f:c3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 5 15:42:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fab7f7f02c4034b0822e1293cac6c3ad36a22d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:da:08:aa:aa:b4:ec:0a:18:37:cb:15:89:c8:
39:8d:33:de:45:da:3b:76:8e:08:2c:6a:82:63:6a:
ab:c4:97:34:b7:d3:83:8e:a6:d7:42:68:bd:25:bf:
2c:f7:22:eb:6a:db:64:8c:29:c2:c6:b9:9b:ed:a0:
cf:e3:08:fe:8a:56:0a:83:a7:fd:3a:08:a3:8f:0a:
d2:f9:6a:7b:14:5b:cc:7f:06:48:d7:91:96:89:66:
f4:56:16:7a:a0:83:bc:6a:d3:66:b6:e5:74:5f:1b:
de:91:74:16:4d:6d:6b:0f:87:c0:59:f9:96:de:03:
1a:23:45:36:cf:04:d9:41:c6:1d:8a:36:e2:19:68:
3c:4d:9d:c3:72:d1:20:e9:7e:26:42:08:22:c5:33:
14:19:cd:9b:b5:b8:78:1c:6e:72:24:ac:3d:e8:5c:
fd:86:ea:4f:9e:b0:3f:61:2f:b5:91:0e:a1:7b:1e:
54:92:d9:ac:f8:01:40:4e:de:a9:5b:50:55:c9:e3:
3f:a7:67:b7:23:2b:66:96:87:c5:09:59:a5:3c:cb:
40:2b:8f:ef:f1:aa:c2:38:e8:af:df:d5:73:4d:cd:
4e:13:6a:d5:16:16:11:fd:bc:0e:54:c6:2d:0e:d4:
cf:6e:da:a9:84:38:b8:93:09:93:5d:65:9a:d6:b6:
1e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AB:7F:7F:02:C4:03:4B:08:22:E1:29:3C:AC:6C:3A:D3:6A:22:D0
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/n6t_fwLEA0sIIuEpPKxsOtNqItA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.156.0-89.213.158.255
109.176.210.0/24
109.176.213.0/24
Signature Algorithm: sha256WithRSAEncryption
50:02:d4:05:8e:54:2f:00:7f:85:45:20:d8:94:b6:a6:85:c4:
93:59:4c:cc:2d:53:73:a9:ac:36:22:fc:d5:79:bb:4e:87:d5:
fd:0a:61:b7:84:5b:3c:9d:81:88:fa:b0:e2:2d:f3:36:92:17:
c0:2a:61:1b:f0:36:52:a3:1a:88:27:3f:1f:a5:2b:4c:d2:20:
05:38:d2:4b:bc:75:b8:03:fe:3c:ec:ab:44:d3:68:c5:40:87:
00:4e:bc:a0:3c:f8:61:b4:99:b5:46:c3:07:f7:f2:9c:f8:55:
67:e7:97:38:ac:90:28:b9:46:38:bb:56:77:21:45:c7:0f:68:
ff:4d:7e:ad:da:ea:58:ec:38:97:54:7d:b5:08:49:c6:8d:99:
e0:a1:a6:d1:4f:e5:75:3f:65:26:6e:4a:fa:0b:b2:31:7a:e5:
39:d2:60:df:9e:2f:82:63:33:22:4b:9f:82:03:28:23:a6:4e:
3a:0a:96:79:21:99:b0:2a:da:a7:b6:92:6f:89:05:ca:72:0e:
80:d2:57:46:e1:d1:02:a1:48:e1:7c:36:40:dd:90:cc:f7:86:
91:2b:22:cd:9a:f8:19:f3:3c:99:ec:fb:24:7e:c5:15:da:b5:
e4:1c:5d:a6:c2:48:c6:b4:9f:23:71:0d:b9:25:05:dc:c9:84:
83:3f:36:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:31 2024 by rpki-client on console-ams.rpki-client.org