Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/N2JjPfxhXnIFWNCFClHgLMApgPM.roa
File: N2JjPfxhXnIFWNCFClHgLMApgPM.roa (raw, json)
Hash identifier: BaX3AHzXEIfgKxy8GSIqJB0xSqJ8pyEaTc1n9khEUSw=
Subject key identifier: 37:62:63:3D:FC:61:5E:72:05:58:D0:85:0A:51:E0:2C:C0:29:80:F3
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE65BB825B9CDB35F6E1AD0BF4DB736
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/N2JjPfxhXnIFWNCFClHgLMApgPM.roa
Signing time: Sun 01 Jan 2023 10:35:14 +0000
ROA not before: Sun 01 Jan 2023 10:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49330
IP address blocks: 94.236.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:5b:b8:25:b9:cd:b3:5f:6e:1a:d0:bf:4d:b7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3762633dfc615e720558d0850a51e02cc02980f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:54:eb:f2:02:80:2e:c0:7f:e2:3d:8f:21:b6:
15:c0:06:22:45:6f:ba:af:68:95:24:dc:40:de:31:
95:d7:ca:db:90:99:11:09:11:bd:7b:9b:00:27:21:
07:76:d1:eb:e2:44:9d:45:16:d0:32:b4:34:e0:3e:
d6:16:5f:0d:7c:7c:fd:28:2f:4f:c0:6d:ec:db:31:
f4:41:35:07:93:f3:23:a1:ac:72:bd:0e:ad:60:26:
7f:96:3e:36:83:ed:00:c6:4e:e3:e7:39:0d:49:2b:
c9:45:03:8f:21:70:ad:0f:8e:2d:fc:ce:b0:c5:a7:
d7:49:0b:ba:83:14:88:36:2d:1a:18:c7:b3:78:55:
53:f4:3b:25:db:60:03:82:44:20:79:09:82:d3:11:
d5:c9:ce:5c:44:16:f8:31:48:68:ea:08:3e:c6:c4:
63:77:c1:21:ea:58:b4:0c:18:3a:61:cd:0a:b9:d5:
8d:04:5b:5f:de:4b:eb:a4:f4:04:a0:ea:49:c8:4c:
8d:78:60:3f:5b:9d:23:4b:73:85:5a:f9:71:ed:d4:
61:68:e6:4e:61:0a:90:7a:e9:fa:48:dd:3e:bc:9c:
5f:d4:d1:f3:ba:6c:65:61:1f:4b:b2:d6:ef:b3:ff:
c5:87:58:90:96:70:f0:ea:de:52:81:b6:6e:41:43:
98:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:62:63:3D:FC:61:5E:72:05:58:D0:85:0A:51:E0:2C:C0:29:80:F3
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/N2JjPfxhXnIFWNCFClHgLMApgPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.236.162.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6c:8b:0f:30:fd:7b:6e:e3:56:53:fe:4c:ad:82:57:3e:af:
a2:9e:3b:c6:25:aa:4a:64:4b:b6:3b:29:1e:86:0f:e5:f8:ed:
fe:9c:8d:fb:f0:2f:35:20:f7:91:fa:9a:a5:a7:94:6f:a0:1e:
92:b3:7f:dc:37:79:3d:3b:32:50:7b:c1:0c:c7:ad:69:46:e6:
d2:ef:0f:51:86:b4:59:52:31:c3:96:60:b3:73:95:cb:15:f1:
ea:43:b5:4d:8b:45:77:c9:16:ce:0c:51:f7:62:95:5b:2f:4c:
e3:23:4f:eb:66:ef:55:83:6a:3f:9f:39:18:d4:7c:d5:4f:ca:
be:f7:84:4f:90:d6:dd:e7:3b:ed:7b:fb:73:72:1f:dd:2e:d9:
37:d6:28:71:0d:94:3f:93:7f:ad:6e:ce:4b:c6:c3:39:f6:b0:
3f:63:14:da:4e:0a:e8:ce:f6:d5:75:3f:ca:9c:b5:22:eb:20:
22:57:1d:35:9a:12:12:8b:d8:eb:7c:6a:58:ae:7b:d0:98:f3:
47:18:ed:7a:3c:45:10:59:2e:03:8d:f8:d7:86:ff:a8:e2:46:
39:cd:00:f2:40:b9:76:e0:08:29:5a:b2:5e:db:7b:ff:e0:b2:
8a:5f:34:22:a3:27:69:e3:68:fa:ed:c1:bc:9b:d2:32:ef:9a:
38:e3:7c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:53 2024 by rpki-client on console-ams.rpki-client.org