Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NH2CkV_Tk-SZN-CuWqbeFP17lnk.roa
File: NH2CkV_Tk-SZN-CuWqbeFP17lnk.roa (raw, json)
Hash identifier: Jf61bei1RMVb5eeQU7X6sUcdrksPB4t4zHkjch4eVpA=
Subject key identifier: 34:7D:82:91:5F:D3:93:E4:99:37:E0:AE:5A:A6:DE:14:FD:7B:96:79
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01900D31A0A046FD1FF9B7013DB4FD652F1B
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NH2CkV_Tk-SZN-CuWqbeFP17lnk.roa
Signing time: Wed 12 Jun 2024 16:04:34 +0000
ROA not before: Wed 12 Jun 2024 16:04:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 45.132.80.0/22 maxlen: 24
91.238.92.0/24 maxlen: 24
91.239.149.0/24 maxlen: 24
91.244.198.0/24 maxlen: 24
176.105.228.0/24 maxlen: 24
176.105.229.0/24 maxlen: 24
185.177.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 16:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0d:31:a0:a0:46:fd:1f:f9:b7:01:3d:b4:fd:65:2f:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 12 16:04:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=347d82915fd393e49937e0ae5aa6de14fd7b9679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:b5:8c:cc:96:82:84:9f:2f:17:bb:a9:8d:
5f:5b:98:41:06:6d:82:18:2e:c3:08:7b:8c:b0:ba:
0e:f7:b5:08:dc:23:50:69:e5:4d:5f:98:9b:86:ea:
3e:a3:46:6e:83:eb:58:c7:a0:ef:09:63:88:35:70:
fd:fe:ae:83:72:9b:ac:40:a2:55:7d:0a:74:de:88:
15:cc:b0:ec:66:94:2b:e6:ac:b7:eb:16:d6:a5:9e:
57:2a:79:65:94:f6:5c:b6:0f:7b:1c:46:48:3f:5c:
ca:ff:8d:d1:cf:99:bd:7c:0b:35:9e:c7:fc:57:a0:
c3:b0:de:6d:88:3a:20:c7:21:a7:73:72:f8:74:2f:
49:53:7d:99:ca:47:54:83:d9:83:c3:78:a4:19:e6:
ac:20:aa:10:a4:d4:f6:15:4c:59:72:71:e8:fd:a8:
37:9d:cd:2e:2b:d7:b8:e0:63:32:04:7a:2b:47:c3:
bf:a2:24:42:8a:f9:ba:9c:31:5c:69:08:d8:49:89:
e2:17:1c:b7:1c:ea:c1:70:bd:ef:6f:bf:50:56:c9:
65:d1:3b:36:3f:da:ca:cd:54:69:9e:6c:12:f7:cb:
da:44:4b:09:88:d4:d7:fe:71:2c:56:0f:c2:c4:44:
d5:11:f3:55:cc:35:9a:21:6a:b1:4f:6b:3c:17:a0:
46:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7D:82:91:5F:D3:93:E4:99:37:E0:AE:5A:A6:DE:14:FD:7B:96:79
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/NH2CkV_Tk-SZN-CuWqbeFP17lnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
91.238.92.0/24
91.239.149.0/24
91.244.198.0/24
176.105.228.0/23
185.177.27.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7a:7f:81:24:ba:58:31:08:a6:da:28:4f:a6:16:4b:46:7d:
42:76:64:65:b1:51:eb:df:c6:08:b0:eb:41:72:16:36:6c:27:
75:34:09:8c:1a:9c:43:9e:70:1e:4b:0b:30:e9:a3:40:a5:45:
1a:1a:fb:3c:fc:bd:2b:41:16:37:e5:6e:1b:20:a5:d0:6e:e7:
4c:3b:f8:1b:a6:8a:0a:d2:5b:e4:88:bb:de:21:d5:95:8d:d9:
5e:10:97:0b:dc:0f:f7:92:bd:ad:c6:bb:8b:f3:a0:88:85:83:
2b:4a:21:5d:ac:8a:a8:3b:dc:ce:23:49:b3:85:84:66:bb:51:
2b:2f:c4:38:e0:25:b3:b2:49:82:01:42:9e:b3:8a:7b:e0:40:
d6:d6:e0:2c:09:b1:ed:9a:4f:78:df:6d:21:6d:75:63:41:d3:
26:52:82:1f:2e:85:50:59:d3:b2:0d:d4:e8:43:c7:0d:de:3f:
72:4e:bc:bd:05:a9:fa:e4:cd:b4:5d:cd:ca:ab:9e:a1:82:f1:
e1:31:d7:0a:17:9a:c9:d6:e1:ea:d6:d3:4d:11:ba:11:a5:98:
07:9e:99:a8:b8:39:6d:3f:6c:cb:d5:98:52:4b:25:fa:e6:01:
fe:fa:f8:ec:e5:22:b0:39:60:04:b8:4f:54:21:4c:35:b5:a1:
80:ac:89:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 19:46:16 2024 by rpki-client on console-ams.rpki-client.org