Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/NBCLJk8-WbVM3-J100SoHgEeOxY.roa
File: NBCLJk8-WbVM3-J100SoHgEeOxY.roa (raw, json)
Hash identifier: lcYjQAesPJw6T+6rK/oacaBO49TXPYkJatGlRr2GY4U=
Subject key identifier: 34:10:8B:26:4F:3E:59:B5:4C:DF:E2:75:D3:44:A8:1E:01:1E:3B:16
Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Certificate serial: 0187FCA81F7F5CEA243245738DB30A4EC7BE
Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/NBCLJk8-WbVM3-J100SoHgEeOxY.roa
Signing time: Mon 08 May 2023 18:38:09 +0000
ROA not before: Mon 08 May 2023 18:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 78.24.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jul 2023 08:19:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fc:a8:1f:7f:5c:ea:24:32:45:73:8d:b3:0a:4e:c7:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5
Validity
Not Before: May 8 18:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34108b264f3e59b54cdfe275d344a81e011e3b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c3:4a:c9:54:61:65:b8:90:6c:57:74:ba:c5:
f0:64:f1:08:78:07:a8:a2:c5:9f:e6:5e:d7:8e:1a:
9b:10:4e:54:80:78:06:aa:99:36:33:7f:a1:05:ca:
b9:12:0a:8a:68:09:36:2e:16:0f:45:92:90:8c:c4:
11:c5:3d:be:ed:04:6d:56:39:3a:61:f0:d1:44:f9:
e2:d0:8a:5c:0d:bb:2e:35:4d:fa:7d:94:2f:de:e5:
53:e6:9d:39:70:8c:4b:39:33:7d:f1:b2:e8:ec:21:
bc:37:06:9e:d2:53:d0:21:ab:23:18:b3:60:50:36:
2b:81:1b:05:7e:a9:39:6a:71:bd:e3:f0:9b:a2:47:
1f:0c:b9:e3:80:5f:47:9c:f4:cc:2a:11:15:ff:ed:
01:8f:c6:5e:ff:05:eb:e8:54:a2:77:12:ad:74:ed:
cd:72:76:10:e5:86:20:18:c1:91:8d:12:0a:8c:2c:
35:36:11:ed:0a:3c:b8:1f:e9:9d:40:51:ba:62:72:
01:33:a1:26:2c:11:5b:da:16:0b:5a:21:12:a3:ed:
d0:94:f9:fa:4c:37:e8:e2:7c:6b:58:d7:8a:09:00:
95:59:60:83:cb:88:4b:45:14:42:f1:a1:28:1e:34:
5d:01:7b:c2:af:4b:61:aa:11:8c:21:18:69:32:5d:
35:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:10:8B:26:4F:3E:59:B5:4C:DF:E2:75:D3:44:A8:1E:01:1E:3B:16
X509v3 Authority Key Identifier:
keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/NBCLJk8-WbVM3-J100SoHgEeOxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.24.205.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a1:1b:db:04:72:a9:60:f0:90:bf:2f:4d:4f:50:51:21:c1:
47:a0:ee:5e:a9:42:88:59:43:20:33:ed:92:1d:e6:f7:96:b4:
a4:06:d6:1c:86:3e:28:78:ed:e2:19:53:22:f2:a5:c0:7d:5a:
f9:0a:43:15:f0:ee:41:83:c2:27:4b:f1:c1:f0:75:5a:d7:55:
7f:36:b7:f5:fb:30:86:f2:48:b5:23:46:a1:46:47:ef:9f:f8:
9f:8a:d9:9c:08:23:42:30:55:fa:1b:60:51:8b:d7:13:57:eb:
f6:dc:fb:66:27:25:e7:46:ec:c9:42:ef:c2:2f:8c:8b:fb:ae:
fa:76:8a:4c:17:51:9b:f8:1e:3f:2e:8f:71:4a:5e:1b:d1:e1:
0f:87:ae:32:20:8b:b1:82:bf:53:04:b1:d6:5d:62:38:c4:5c:
62:c4:12:bc:01:c6:d5:e0:eb:4c:2a:82:ec:6b:6f:81:74:57:
c0:20:4e:c9:3c:6a:1b:e1:95:c7:e8:fc:58:e8:c2:c4:33:0c:
e7:58:59:d9:a6:c2:0a:cc:f2:2b:52:21:dc:0e:d8:b1:61:9d:
c5:90:68:a2:e4:b3:0c:ad:ef:de:33:f1:a4:fd:e1:1f:f3:4a:
0d:66:8b:fd:4b:08:c2:45:27:b3:42:fb:73:ce:14:f5:93:0a:
cb:df:f8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:06 2024 by rpki-client on console-ams.rpki-client.org