Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/NmtCAIprOfD0aT3epAUlFn54rWU.roa
File: NmtCAIprOfD0aT3epAUlFn54rWU.roa (raw, json)
Hash identifier: sUxQX5eC+5QEBCiRElf7ABHCAMaoxsuxnhLR15Wm76E=
Subject key identifier: 36:6B:42:00:8A:6B:39:F0:F4:69:3D:DE:A4:05:25:16:7E:78:AD:65
Certificate issuer: /CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Certificate serial: 01856FC281D49A14685CD18F3129EC0A81A9
Authority key identifier: 2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/NmtCAIprOfD0aT3epAUlFn54rWU.roa
Signing time: Sun 01 Jan 2023 23:54:56 +0000
ROA not before: Sun 01 Jan 2023 23:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39043
IP address blocks: 91.211.68.0/22 maxlen: 22
195.66.156.0/23 maxlen: 23
195.66.156.0/24 maxlen: 24
195.66.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:81:d4:9a:14:68:5c:d1:8f:31:29:ec:0a:81:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a17d254774c97a9c685a9ec5d24f2fc69689908
Validity
Not Before: Jan 1 23:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=366b42008a6b39f0f4693ddea40525167e78ad65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:9b:dd:84:f5:af:c2:9d:92:c7:9f:6e:04:
76:29:bd:38:80:36:65:f7:bd:84:9a:a7:3c:30:8e:
4b:5b:8c:54:e5:90:35:17:1b:56:ae:b7:0c:3b:e0:
8e:91:e5:84:1b:fa:d9:ca:84:ed:fd:88:f7:7f:ad:
4f:78:0f:7e:bb:d7:88:aa:e2:f9:b1:0a:08:8e:d3:
c8:13:7b:06:96:cc:7a:88:fd:dd:98:e8:0a:fc:b4:
88:61:3f:d6:f1:47:1f:4d:74:6e:68:92:98:d5:5e:
83:05:22:f0:dc:e9:50:ac:86:a9:84:d1:1c:b4:95:
fb:d9:75:3f:bd:35:ac:c8:48:87:4d:56:6d:3f:46:
d1:c5:42:4f:b9:44:75:8f:94:7e:f5:6e:e0:1b:49:
66:51:90:48:ea:31:c9:78:97:9b:60:23:5d:9b:1d:
55:e1:02:e7:dd:db:7b:d3:0e:15:c8:75:ae:46:fa:
06:37:03:29:a6:b4:72:28:29:f2:0c:4d:03:67:5b:
c6:76:e9:b0:da:73:98:dc:fc:d3:f8:8a:a0:ef:e1:
a3:52:20:8d:08:6e:fe:e3:98:5b:91:81:1c:45:ff:
05:04:86:8f:df:e3:17:47:5c:2d:c1:74:62:65:36:
50:fa:36:0e:b4:d1:6f:84:d2:6d:09:6e:98:4e:41:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6B:42:00:8A:6B:39:F0:F4:69:3D:DE:A4:05:25:16:7E:78:AD:65
X509v3 Authority Key Identifier:
keyid:2A:17:D2:54:77:4C:97:A9:C6:85:A9:EC:5D:24:F2:FC:69:68:99:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhfSVHdMl6nGhansXSTy_GlomQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/NmtCAIprOfD0aT3epAUlFn54rWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66a439-cf33-47c5-92ab-80b5118abaf6/1/KhfSVHdMl6nGhansXSTy_GlomQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.68.0/22
195.66.156.0/23
Signature Algorithm: sha256WithRSAEncryption
c3:9f:e8:42:cd:1a:a5:43:0c:d7:93:38:1a:28:60:44:47:8f:
73:4e:cd:f7:9e:b1:06:8a:3e:8e:ae:b3:bf:e1:f3:59:32:bf:
bd:0b:cd:71:4b:cc:ad:ac:fd:7d:de:d1:d6:d9:e2:2e:60:9f:
df:7c:47:6d:94:23:65:19:b5:86:e3:ac:c4:7e:4f:30:f6:53:
b3:46:8e:23:4b:b9:47:f7:bb:c9:8f:a0:9a:3f:8a:9a:f5:ed:
aa:cc:85:9a:aa:c8:fb:b6:34:74:ee:15:59:8d:78:03:1e:21:
13:ba:20:fd:44:0a:6a:b0:0a:99:0e:bd:9e:a8:80:ac:57:29:
96:49:86:74:cc:77:ee:50:66:9e:c3:28:79:07:a3:f6:13:0e:
b8:22:4a:33:16:fb:90:7b:25:e4:ed:34:68:a8:27:1a:11:90:
f5:5b:39:02:7d:b6:07:62:f4:c6:07:f2:a7:26:f4:56:8c:9b:
dc:d0:1b:a5:7d:1b:5b:9e:66:ea:5f:d8:e8:3d:b4:e3:ff:c9:
80:52:03:dc:c1:17:ea:3f:ac:f1:54:40:1a:ac:ec:16:34:c6:
2c:55:eb:1e:70:21:e6:b9:69:db:5e:db:f1:8d:ae:04:d4:b6:
0a:66:dd:13:a9:a8:ad:e1:70:53:10:a6:27:a1:3b:2a:73:26:
d6:ff:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org