Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/jxNBf4fJi1YA7BMuXxqO-IT_NZU.roa
File: jxNBf4fJi1YA7BMuXxqO-IT_NZU.roa (raw, json)
Hash identifier: n5DaHhjPeVrDg2osFg7FqtV+J07kw1kzrVrX9uahIhY=
Subject key identifier: 8F:13:41:7F:87:C9:8B:56:00:EC:13:2E:5F:1A:8E:F8:84:FF:35:95
Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda
Certificate serial: 0192661B27F5B9E553C2CFEE89FFFE9E97C2
Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/jxNBf4fJi1YA7BMuXxqO-IT_NZU.roa
Signing time: Mon 07 Oct 2024 08:31:48 +0000
ROA not before: Mon 07 Oct 2024 08:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51809
IP address blocks: 45.82.140.0/22 maxlen: 22
63.135.72.0/21 maxlen: 21
67.208.52.0/22 maxlen: 24
185.232.119.0/24 maxlen: 24
2a10:d580::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 07 Oct 2024 13:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:1b:27:f5:b9:e5:53:c2:cf:ee:89:ff:fe:9e:97:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda
Validity
Not Before: Oct 7 08:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f13417f87c98b5600ec132e5f1a8ef884ff3595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:6e:01:88:31:95:9c:84:b7:bb:df:ac:2e:
f9:04:f3:66:20:b6:01:2d:7c:ed:0f:6b:47:8b:ed:
16:e6:6b:7b:a3:7e:bb:43:a8:82:9d:24:7f:22:12:
c8:c8:d9:b9:6c:77:27:79:34:50:71:70:b6:dd:71:
9c:bc:92:8a:3a:49:3b:03:b6:06:c0:29:86:a0:93:
7a:f9:e9:f5:a8:6c:a1:73:83:2c:89:c9:2f:a9:17:
11:f0:83:84:2f:7b:47:cb:47:47:9e:bb:5b:22:4f:
7d:4f:e1:1c:22:1e:2c:fd:67:0f:8b:b1:24:fe:d2:
d4:92:1d:1e:70:60:60:9d:29:1b:3c:1e:ad:19:03:
bc:5c:0b:ff:a4:06:18:a3:98:c2:71:8d:d0:69:a9:
5d:7b:32:08:13:fa:48:59:ff:8d:b9:7c:d8:73:e6:
bd:60:8b:80:d7:55:31:3e:e2:90:95:8a:2b:1d:e3:
2a:66:29:c6:57:85:3e:f3:d7:8f:11:5f:b0:9d:13:
9a:f5:be:51:43:38:55:12:42:c3:af:2f:59:e6:cf:
19:3b:91:8c:28:74:29:a8:ef:a4:88:75:4e:14:7c:
43:d6:2f:59:b1:1d:f5:97:94:7f:16:59:72:70:61:
e4:41:55:3f:8d:44:df:8e:c6:c2:c2:6b:e8:6b:d4:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:13:41:7F:87:C9:8B:56:00:EC:13:2E:5F:1A:8E:F8:84:FF:35:95
X509v3 Authority Key Identifier:
keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/jxNBf4fJi1YA7BMuXxqO-IT_NZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.140.0/22
63.135.72.0/21
67.208.52.0/22
185.232.119.0/24
IPv6:
2a10:d580::/29
Signature Algorithm: sha256WithRSAEncryption
05:6e:21:d8:58:1c:c4:58:eb:1d:d2:5e:f7:60:43:97:18:ae:
44:f9:81:a1:e5:82:c9:ba:55:e4:7a:a0:46:43:50:ca:38:e4:
ec:3d:f2:3c:85:81:c9:a9:16:4d:42:d5:32:2d:e7:0a:97:d3:
30:8f:62:b6:41:a9:43:cb:e7:9d:52:2f:52:8e:05:5c:de:db:
9a:19:f5:3c:33:a7:9d:12:c0:86:35:09:38:05:fa:25:1c:07:
3d:a7:05:bd:78:42:a0:69:21:aa:85:48:9e:00:f0:36:04:97:
34:11:2f:9f:29:c6:ea:2b:dd:a3:41:94:b8:ab:6a:e0:79:54:
de:0d:10:f9:eb:b3:88:8b:2d:12:bd:5e:98:aa:73:b8:0e:ff:
fa:35:7c:17:93:d8:b6:e9:27:f9:b9:d1:af:7b:28:8d:f0:3b:
69:cc:3e:23:e5:bd:a5:44:bc:89:52:d7:00:42:72:59:e5:38:
d4:f9:71:10:ab:16:2e:cf:02:7f:79:8b:72:01:2b:79:b8:c6:
0a:58:96:4f:74:c1:54:8a:11:d6:fa:e5:6a:fd:ce:ee:ba:09:
f3:0f:3a:71:45:b7:35:09:30:bd:ff:41:f4:d4:98:12:db:82:
71:56:96:c2:ec:82:53:fd:98:0f:d7:53:8b:03:7b:c7:c2:3d:
24:b6:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 16:59:06 2024 by rpki-client on console-fra.rpki-client.org