Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/Ni_95IQkT0DY3IJ8TMJ5S8dg8C0.roa
File: Ni_95IQkT0DY3IJ8TMJ5S8dg8C0.roa (raw, json)
Hash identifier: 0JFu8MBPvGHkxfYHfKoFh3oOvoBFzeFYrg3RQwA4ggU=
Subject key identifier: 36:2F:FD:E4:84:24:4F:40:D8:DC:82:7C:4C:C2:79:4B:C7:60:F0:2D
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 0190A7E46035C55DD3B9ACB66253C859EB20
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/Ni_95IQkT0DY3IJ8TMJ5S8dg8C0.roa
Signing time: Fri 12 Jul 2024 17:01:20 +0000
ROA not before: Fri 12 Jul 2024 17:01:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215133
IP address blocks: 91.204.76.0/24 maxlen: 24
195.34.94.0/24 maxlen: 24
195.34.95.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Aug 2024 10:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:e4:60:35:c5:5d:d3:b9:ac:b6:62:53:c8:59:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jul 12 17:01:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=362ffde484244f40d8dc827c4cc2794bc760f02d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:78:b4:82:a7:a1:42:c6:44:d2:22:7b:82:
fb:65:a3:b8:ac:23:fd:31:80:7c:45:23:24:ff:8a:
a8:8e:01:2d:30:ca:bd:72:29:31:17:8e:d6:00:f0:
97:a1:0b:f3:77:7c:56:62:37:59:28:ae:80:7d:76:
f1:1d:e6:ab:90:77:96:e9:cb:a2:f2:9a:6d:55:21:
39:4a:3e:8e:5e:b1:f4:e7:ad:9d:28:ae:35:f5:bb:
e6:00:4a:d8:97:ef:e1:74:e2:4e:62:f3:f9:c5:c5:
ec:b4:04:9b:1e:d9:c9:d3:f0:99:c8:44:d0:83:01:
60:e5:9f:d2:78:b5:2c:09:73:67:aa:d1:96:fa:7c:
aa:c2:33:61:b7:be:88:b4:f0:1c:16:62:3e:b3:1f:
32:ab:70:5b:a4:c8:4a:93:3a:20:f7:49:9e:c4:b2:
18:4b:96:44:54:b8:48:65:25:c4:6e:9e:07:1d:9b:
8b:12:0b:9b:87:07:e4:63:c8:ac:c9:cb:43:f4:d1:
95:7e:c0:bf:82:55:4e:03:bb:0c:76:d6:3e:e0:09:
77:c6:1c:1e:0b:21:c2:a9:3c:b4:24:83:01:ef:2a:
37:e3:2a:25:29:38:09:2c:ec:12:eb:a4:2d:bf:d3:
22:de:62:ee:9e:98:1e:dc:76:08:f0:a2:ac:18:bf:
0a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2F:FD:E4:84:24:4F:40:D8:DC:82:7C:4C:C2:79:4B:C7:60:F0:2D
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/Ni_95IQkT0DY3IJ8TMJ5S8dg8C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.76.0/24
195.34.94.0/23
Signature Algorithm: sha256WithRSAEncryption
68:63:17:fa:f2:97:84:c8:ca:5f:72:18:92:ee:8c:67:1f:a9:
92:3f:7d:0c:44:0b:21:17:bd:9a:7e:1c:3c:31:dc:0d:f2:76:
0b:d7:23:d3:8e:ba:12:bc:41:c4:e5:a1:04:d4:fa:c7:82:6b:
a4:29:08:20:9f:eb:0b:5a:a8:fa:28:5e:88:76:6d:04:e7:90:
19:0f:11:56:7f:1a:c5:ee:bc:b7:b8:ab:33:07:7a:01:eb:06:
7e:d1:27:5b:db:29:c7:e9:1e:99:ee:e1:c9:d3:7c:54:7d:07:
1c:cc:95:3b:77:d1:7d:a1:e9:5a:eb:9c:ea:60:82:97:d0:f1:
a9:9c:ba:e7:fb:31:28:e1:93:24:6b:e7:8f:dc:6c:36:6d:4a:
36:41:57:0d:84:b8:db:f9:bd:50:0c:8a:cf:01:9f:15:c5:57:
51:d3:f3:38:1d:3c:93:44:91:32:fb:f2:cb:31:e0:0e:29:1a:
ff:7d:66:c5:32:9b:c6:ef:e0:31:9c:3d:99:19:38:e4:b8:65:
9e:d0:88:03:7b:3d:8e:64:13:63:f5:4a:60:54:c7:c1:a3:23:
2c:2b:18:22:34:86:88:e6:dc:95:df:0b:b8:13:d0:2d:d9:99:
8d:bd:d5:a7:05:d2:32:fe:9e:e6:70:15:8d:88:ba:e9:f2:7c:
d9:7b:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 13:13:21 2024 by rpki-client on console-ams.rpki-client.org