Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NKVLOLhumXoTro8w-KQohl4GR6M.roa
File: NKVLOLhumXoTro8w-KQohl4GR6M.roa (raw, json)
Hash identifier: daOIW9LUoD7NO+PMuLlUaRWGnY6rYotN2B8S3d6S0Sg=
Subject key identifier: 34:A5:4B:38:B8:6E:99:7A:13:AE:8F:30:F8:A4:28:86:5E:06:47:A3
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01860275507EAED29BA1BD3A031BB7E8FBC8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NKVLOLhumXoTro8w-KQohl4GR6M.roa
Signing time: Mon 30 Jan 2023 11:34:48 +0000
ROA not before: Mon 30 Jan 2023 11:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 185.255.36.0/24 maxlen: 24
185.135.142.0/24 maxlen: 24
185.255.39.0/24 maxlen: 24
188.240.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Jan 2023 17:45:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:75:50:7e:ae:d2:9b:a1:bd:3a:03:1b:b7:e8:fb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 30 11:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34a54b38b86e997a13ae8f30f8a428865e0647a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:c8:d1:53:a6:3f:9a:da:ca:c2:61:1b:5a:
bd:9a:f6:c3:ec:a0:e6:7d:d2:5f:1e:95:55:3c:11:
67:18:66:cb:50:9e:5d:a4:38:32:3c:fc:7b:f0:ff:
3d:49:f7:15:0f:52:d5:5c:5e:88:bf:25:d2:33:fc:
e9:a7:d0:3d:71:67:01:51:bc:51:97:6a:8b:d3:87:
34:b4:04:d6:13:ba:3d:6f:e2:5f:19:53:20:42:26:
dd:2d:02:d6:e9:ac:db:bf:c2:d5:1e:48:dc:e4:f6:
d1:08:b2:6f:b3:27:d9:77:f8:ae:29:b8:24:cd:c8:
06:c9:26:0a:f6:c8:15:16:87:80:bf:1c:7d:18:49:
3f:8e:94:87:60:e9:00:8b:41:49:d1:ee:4c:3c:11:
d1:2b:00:30:9b:4e:25:6d:26:52:d9:38:c1:0f:5f:
93:b4:ce:53:00:6a:eb:36:4f:93:9c:7a:5e:3d:9e:
1f:8f:7a:03:37:ba:0a:5e:da:fa:67:b4:9a:02:bd:
19:96:9a:3a:1f:7f:0d:cd:4d:60:60:5a:3c:6f:b9:
98:94:d9:9d:6b:dd:91:70:a0:2b:8e:ae:a0:c9:5e:
68:c7:69:30:d6:1c:76:bf:7b:56:22:5a:c6:83:0d:
61:4c:32:01:53:f5:c8:cc:a7:e6:55:68:e9:6f:51:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A5:4B:38:B8:6E:99:7A:13:AE:8F:30:F8:A4:28:86:5E:06:47:A3
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NKVLOLhumXoTro8w-KQohl4GR6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.142.0/24
185.255.36.0/24
185.255.39.0/24
188.240.226.0/24
Signature Algorithm: sha256WithRSAEncryption
88:79:f1:fc:43:1a:f8:12:8d:5f:ec:0e:f9:a6:66:72:93:41:
13:a8:31:5d:76:0c:d4:9a:15:eb:51:28:e5:95:46:1f:27:c3:
4b:96:cd:d5:f3:d1:93:a7:cc:4f:55:f7:dd:50:a8:dc:3c:ab:
ef:6f:5c:46:90:6a:d0:79:74:89:eb:e5:d7:dd:aa:e6:f1:42:
bc:46:80:b9:1e:c9:b2:15:14:57:a7:04:26:a7:11:bc:43:c6:
d8:86:29:bb:c3:4b:c5:e1:45:0b:8d:b8:7f:0f:45:ef:31:fa:
9d:2f:1a:75:da:20:73:83:50:a4:20:e4:0c:52:0d:2f:b4:34:
68:56:2a:62:f2:6b:8b:22:1b:d7:48:1b:92:80:4d:de:af:b2:
1a:8a:00:33:3b:33:5d:40:3c:fc:77:db:00:8b:8b:48:2f:58:
14:af:1b:de:0f:06:25:08:3c:ac:12:3f:ab:af:83:d9:11:6a:
e4:df:96:38:79:8b:33:99:d7:78:59:b4:8f:4d:20:2a:87:d1:
55:d4:80:10:d4:2f:df:3d:84:0a:ba:00:f8:70:4d:95:7f:07:
ec:d5:7d:fc:90:01:ac:94:86:6c:46:5f:d4:ce:e9:86:df:8a:
c9:78:f8:30:0c:4a:7e:e4:86:64:90:c2:63:b6:b5:68:ad:bf:
9a:10:31:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:10 2024 by rpki-client on console-ams.rpki-client.org