Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/Nt_NNCR62vepq_HcnwgvtLnDTXc.roa
File: Nt_NNCR62vepq_HcnwgvtLnDTXc.roa (raw, json)
Hash identifier: zo6G2amE51zbNCSGgzS59jGJSQOon+nk8pa/ZXb24J4=
Subject key identifier: 36:DF:CD:34:24:7A:DA:F7:A9:AB:F1:DC:9F:08:2F:B4:B9:C3:4D:77
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 018CBEC6A3B518A7DFB10C284C190ED4028C
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/Nt_NNCR62vepq_HcnwgvtLnDTXc.roa
Signing time: Sun 31 Dec 2023 07:28:58 +0000
ROA not before: Sun 31 Dec 2023 07:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203
IP address blocks: 212.57.192.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:c6:a3:b5:18:a7:df:b1:0c:28:4c:19:0e:d4:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: Dec 31 07:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36dfcd34247adaf7a9abf1dc9f082fb4b9c34d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:10:a4:41:6e:45:fb:d9:af:37:f8:37:a8:54:
a1:c4:74:e8:2c:d7:fc:dc:c2:2c:32:b5:e6:3d:31:
1c:9b:e3:1c:9f:14:e4:54:07:4a:0b:cf:b3:40:d3:
c5:3e:a4:a2:0b:95:52:a7:41:a7:0c:75:d0:3a:ba:
1d:e1:5b:03:f4:16:f7:57:ce:5d:22:c5:37:a8:34:
86:f8:31:b0:59:eb:50:de:8d:07:b0:2e:69:79:cf:
ee:48:a5:ef:e8:0f:b9:b5:82:4c:89:c3:66:85:17:
d5:7d:0c:d3:b3:c8:05:b3:02:1a:57:91:e9:b1:74:
ec:54:1e:88:e3:94:3c:76:3f:39:b4:84:7c:5b:3e:
25:81:9b:35:c8:44:ac:33:40:c1:34:61:16:25:60:
16:91:28:19:94:76:62:a8:2b:49:23:57:73:b2:cb:
8c:0e:d0:38:54:c9:10:ec:e7:44:37:ce:16:59:fd:
0c:d7:0a:49:bb:bb:4d:81:41:46:3e:a4:31:d1:78:
11:bc:ae:0c:fc:fb:6b:95:06:c8:69:7f:70:a1:eb:
9b:11:ea:8a:39:be:98:e5:47:79:08:75:25:6b:9b:
18:1a:bb:ed:84:38:f8:8b:8b:65:d8:99:fd:00:cc:
ff:ba:a6:02:92:72:ae:99:0a:ab:03:3f:56:ff:fa:
2f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DF:CD:34:24:7A:DA:F7:A9:AB:F1:DC:9F:08:2F:B4:B9:C3:4D:77
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/Nt_NNCR62vepq_HcnwgvtLnDTXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.57.192.0/19
Signature Algorithm: sha256WithRSAEncryption
60:8c:10:bb:81:00:6f:9d:19:d0:8c:b2:bf:08:eb:33:e8:f7:
63:ef:21:59:b5:45:f7:56:b4:e4:9e:bb:61:a4:41:62:33:97:
0d:be:ab:b8:03:fc:3a:3e:11:85:75:da:12:6c:d2:ea:18:f8:
9b:3d:7a:7d:9e:07:b1:10:53:11:99:36:d5:1b:1a:ea:17:81:
3c:93:25:d3:cc:bb:75:d2:79:73:ae:28:36:92:88:11:e8:6d:
25:75:0f:d1:7c:bb:8e:50:56:b7:f1:ab:35:0a:cd:31:e2:1b:
5a:eb:37:4e:6b:60:51:bc:5a:7a:12:77:26:02:47:86:5d:e0:
e6:b4:20:3b:54:1b:85:4a:2d:45:63:b6:8d:bf:8f:57:4c:21:
c5:ec:8b:36:41:57:63:79:10:d0:cb:40:51:a4:f4:4a:2d:4a:
d1:14:f6:38:91:d5:1a:76:3b:05:ad:f1:0d:9f:dd:ec:42:85:
da:6d:1a:02:1d:55:fb:ec:3d:eb:cc:5d:b5:01:a4:bf:51:d7:
62:fa:e4:23:28:aa:16:de:65:7c:b4:32:5a:74:b4:c7:05:d1:
bf:91:62:ec:db:e4:ff:3d:ca:29:af:e1:e3:dd:2e:31:e0:35:
8a:5e:18:16:b9:70:72:d3:da:5c:01:ad:0e:45:b5:e3:2a:99:
c7:7e:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:41 2024 by rpki-client on console-fra.rpki-client.org