Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/Nww53E-sed3-dvp_fRMRW5BMkro.roa
File: Nww53E-sed3-dvp_fRMRW5BMkro.roa (raw, json)
Hash identifier: cZZRJcaViX9LEZeeCT0X3exdCaPIlSwbEdPfX8CZqpo=
Subject key identifier: 37:0C:39:DC:4F:AC:79:DD:FE:76:FA:7F:7D:13:11:5B:90:4C:92:BA
Certificate issuer: /CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Certificate serial: 01856FD4E849056768428C74E773AA1E938D
Authority key identifier: 3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/Nww53E-sed3-dvp_fRMRW5BMkro.roa
Signing time: Mon 02 Jan 2023 00:15:01 +0000
ROA not before: Mon 02 Jan 2023 00:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61171
IP address blocks: 185.10.24.0/24 maxlen: 24
185.10.25.0/24 maxlen: 24
185.10.26.0/24 maxlen: 24
185.10.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d4:e8:49:05:67:68:42:8c:74:e7:73:aa:1e:93:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c614bf257d3af770bbf3c6c2d35bfa465686ceb
Validity
Not Before: Jan 2 00:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=370c39dc4fac79ddfe76fa7f7d13115b904c92ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:b0:7b:28:be:88:75:e4:9b:24:c0:e7:a2:
58:6f:ae:b6:a5:3e:91:fd:ba:68:a3:8e:46:d4:a0:
f7:a1:d3:b2:09:22:b6:04:be:c5:55:52:4f:db:be:
a4:31:81:4f:ab:2d:d0:7b:10:11:64:25:c7:17:44:
39:e2:c2:c9:0d:d0:9f:8c:ff:2a:14:5f:a5:e6:bd:
64:64:fd:02:92:0f:10:fe:12:33:ba:9f:7b:ce:62:
37:db:e6:47:f5:ab:47:99:5e:92:f5:e9:5a:75:44:
4d:5a:54:24:cf:14:bd:62:6c:44:37:88:b3:7c:89:
90:ba:39:45:8b:b9:73:bc:78:c2:0f:4a:83:51:77:
56:3d:f6:e4:a9:bb:86:d6:fa:a2:5d:39:54:97:42:
4d:d9:1c:79:a3:0c:52:14:c6:16:b8:f6:cb:55:42:
0a:17:8e:8a:7e:56:c3:b6:2c:df:dc:94:b4:ed:32:
2c:e6:7c:34:4d:52:93:84:dc:b5:d9:93:53:87:d1:
55:85:50:3f:0e:1b:d8:11:57:e1:c9:98:a1:1a:e7:
22:2a:be:94:b2:dc:a1:a6:66:01:a8:85:4e:25:7d:
08:0e:f1:56:2c:8d:6b:23:03:52:73:2b:80:72:b4:
29:de:88:06:5d:db:16:3d:a8:81:11:b4:2c:4a:ea:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0C:39:DC:4F:AC:79:DD:FE:76:FA:7F:7D:13:11:5B:90:4C:92:BA
X509v3 Authority Key Identifier:
keyid:3C:61:4B:F2:57:D3:AF:77:0B:BF:3C:6C:2D:35:BF:A4:65:68:6C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PGFL8lfTr3cLvzxsLTW_pGVobOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/Nww53E-sed3-dvp_fRMRW5BMkro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804c2c-85fd-429f-bbaf-f6b044dcd624/1/PGFL8lfTr3cLvzxsLTW_pGVobOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.10.24.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:1c:ed:7e:80:e1:90:10:b8:ba:2b:6d:cf:78:9d:13:9f:a9:
92:8a:af:6c:da:7f:db:e9:26:5d:a6:36:d1:0c:9d:95:87:00:
3f:d2:be:13:49:ce:a6:57:1e:30:44:29:9b:64:e8:99:91:9d:
4f:3d:06:02:09:c6:e5:bc:84:d3:19:94:fa:db:b7:b8:f7:f0:
1c:fd:c4:fd:36:b1:a4:80:43:91:bc:c6:9f:ef:93:8a:c3:09:
df:98:ee:63:ba:30:c0:68:27:1b:39:0f:6e:d5:ab:17:93:99:
7a:65:28:e6:55:5c:12:40:43:20:69:ff:1f:c5:b7:ac:86:58:
33:e3:6d:7f:a9:27:b9:f5:be:26:b9:b7:20:7b:91:41:5d:4a:
87:10:ce:a2:30:2f:f5:7d:0d:1a:b8:3b:07:08:e4:d1:5d:84:
ea:b0:c1:e8:06:99:ae:bb:83:c8:29:bb:2b:67:33:5f:ce:aa:
3f:53:06:68:e6:45:c2:70:10:bc:3b:1f:89:ce:13:2e:14:78:
37:82:5a:91:35:0a:38:38:76:58:db:19:d2:06:99:af:aa:6e:
1d:af:c4:91:dd:fb:4d:f1:54:11:b3:36:c1:ec:e7:3c:ff:8f:
54:8b:31:84:d5:f5:5d:e3:c2:4f:ee:cb:2a:45:0e:3b:a7:a8:
f6:47:7f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:49 2024 by rpki-client on console-ams.rpki-client.org