Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/nxO6-TRjnC3HKNnTuFzustIekCs.roa
File: nxO6-TRjnC3HKNnTuFzustIekCs.roa (raw, json)
Hash identifier: 4AnWgqKUSxot4UnWgSwNi0Cbygd9ppwyxl02klhluuc=
Subject key identifier: 9F:13:BA:F9:34:63:9C:2D:C7:28:D9:D3:B8:5C:EE:B2:D2:1E:90:2B
Certificate issuer: /CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Certificate serial: 01856D0A83E99DB5BDA3920FB155234B2364
Authority key identifier: 7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/nxO6-TRjnC3HKNnTuFzustIekCs.roa
Signing time: Sun 01 Jan 2023 11:14:43 +0000
ROA not before: Sun 01 Jan 2023 11:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57167
IP address blocks: 84.246.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:83:e9:9d:b5:bd:a3:92:0f:b1:55:23:4b:23:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c722f85b31e765d8f77b692b5d2a84c111d805d
Validity
Not Before: Jan 1 11:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f13baf934639c2dc728d9d3b85ceeb2d21e902b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:69:12:d8:09:91:0a:cf:69:26:dd:6a:bd:a9:
48:fb:77:ae:41:40:79:af:e3:2f:4c:e1:38:44:57:
ae:cd:ba:6b:00:65:75:25:53:62:b9:87:a9:77:c4:
a6:1e:4c:14:4b:1c:5c:cb:82:ce:3e:80:31:2b:07:
1d:e6:bd:07:79:a6:60:b9:7e:a1:87:f2:b3:34:1b:
a4:56:34:3c:91:d7:25:20:b0:04:0a:b6:d9:b2:f0:
27:f1:56:d7:6e:97:74:23:1a:ad:1b:84:7d:bd:58:
ae:5b:d4:e5:77:2c:c8:a7:1d:95:e1:8b:35:48:d1:
66:e6:7a:36:26:14:1c:4e:f8:76:14:fe:a6:e5:eb:
a5:94:57:47:bf:f4:d8:02:9b:12:1b:d2:c8:32:8b:
df:08:fe:56:fd:da:a1:ca:11:be:b2:55:9d:ff:c1:
f3:86:db:08:48:c3:cf:37:7e:bf:f2:73:00:c9:e2:
18:73:3c:25:c3:a4:14:00:3c:92:58:8e:46:c2:cd:
29:62:bb:b8:df:b3:de:ac:06:22:fa:8a:be:3a:d2:
6e:7b:a7:24:2d:e2:c5:c1:91:f8:61:02:eb:d5:8e:
f0:34:af:72:aa:a5:1b:be:94:ff:37:ec:e4:7a:24:
cb:9d:50:a7:df:dd:63:7e:5e:8f:42:c5:e6:4e:f9:
40:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:13:BA:F9:34:63:9C:2D:C7:28:D9:D3:B8:5C:EE:B2:D2:1E:90:2B
X509v3 Authority Key Identifier:
keyid:7C:72:2F:85:B3:1E:76:5D:8F:77:B6:92:B5:D2:A8:4C:11:1D:80:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHIvhbMedl2Pd7aStdKoTBEdgF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/nxO6-TRjnC3HKNnTuFzustIekCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566246-ca2a-411b-aaf2-c682184d704d/1/fHIvhbMedl2Pd7aStdKoTBEdgF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.80.0/24
Signature Algorithm: sha256WithRSAEncryption
64:05:ff:74:22:e8:f4:55:c7:97:37:e6:14:12:85:4f:19:47:
5e:f5:e2:8f:51:24:57:5d:a9:a8:9b:13:46:9c:34:63:5d:64:
d8:b6:9a:93:71:dc:dd:6f:62:09:06:62:f7:16:a4:35:55:a8:
f0:06:a3:26:d9:8f:21:7b:f6:c0:00:af:f8:f0:b8:4d:55:9e:
fb:12:e1:96:02:64:31:f7:c9:30:92:f9:8b:81:38:ca:cc:f3:
eb:bd:ac:d9:04:ac:fa:40:dc:6d:bf:38:6b:99:f9:41:33:78:
97:37:9f:8c:8e:d3:8a:7a:a0:31:50:38:be:06:c3:b0:65:78:
22:f8:ba:dd:b2:1b:9b:10:82:01:f8:12:e2:d1:d5:d0:59:12:
48:c0:95:2c:c7:b3:f4:07:f8:d0:7f:98:48:3e:60:d7:62:7e:
55:d1:5b:96:01:84:f8:85:15:39:e5:81:c4:ff:e7:61:13:dd:
b8:6e:8f:ea:4a:32:6b:e0:24:54:57:01:2c:8f:35:0d:7f:c9:
cd:fd:3a:0e:de:f2:64:9a:1b:b6:f6:6f:c0:29:58:85:61:0a:
d3:fe:10:2f:b3:3a:5d:cb:1a:8c:ef:89:a4:84:ae:84:b1:b2:
ef:91:5f:5b:1b:f3:80:8c:f9:2b:12:6a:00:f6:c8:7d:cc:56:
2e:20:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:34 2024 by rpki-client on console-ams.rpki-client.org