Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NXI07fzEXvw1iwFvvIp2PNxwN7c.roa
File: NXI07fzEXvw1iwFvvIp2PNxwN7c.roa (raw, json)
Hash identifier: n9gUSauQ2EC8Yh9xDsG8hDLIzBteNBl8a6eDxU38NRg=
Subject key identifier: 35:72:34:ED:FC:C4:5E:FC:35:8B:01:6F:BC:8A:76:3C:DC:70:37:B7
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01873BBADE17DBADA47456EE0979FB11F2A6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NXI07fzEXvw1iwFvvIp2PNxwN7c.roa
Signing time: Sat 01 Apr 2023 07:31:54 +0000
ROA not before: Sat 01 Apr 2023 07:31:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 77.75.60.0/24 maxlen: 24
185.9.55.0/24 maxlen: 24
194.4.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:3b:ba:de:17:db:ad:a4:74:56:ee:09:79:fb:11:f2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 1 07:31:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=357234edfcc45efc358b016fbc8a763cdc7037b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:d1:fe:a5:1c:24:92:63:15:da:5e:a3:1a:
94:43:91:b1:02:df:a8:61:48:97:3c:89:14:6a:38:
48:9d:87:b3:8b:d5:f9:84:41:95:e9:81:b1:5f:17:
6e:f7:57:15:db:8a:9f:f2:2d:79:f6:fb:42:c5:e8:
7f:c8:55:4f:78:4c:b5:b3:d4:12:26:03:f0:a8:91:
16:7f:ac:3a:8f:fa:67:8f:ea:8a:ee:f6:b5:98:fb:
fd:61:96:b5:59:ab:10:88:e0:ab:07:18:36:8d:84:
21:65:e9:e9:8b:a9:08:ab:af:f5:c5:e8:67:0f:0e:
dd:22:fe:18:1f:30:e4:ab:63:16:3c:4c:a7:f6:11:
08:0a:0f:71:a8:b4:a2:94:f6:0a:4a:c6:20:ad:e9:
e2:60:ee:84:2b:6b:94:e9:09:7b:4a:1e:2a:69:a7:
42:84:ee:18:1e:91:16:0c:75:2e:d6:45:2c:85:35:
d9:e1:81:3e:a6:63:e5:dc:1c:56:99:93:61:1c:a1:
8d:ca:fb:76:e2:f7:69:46:7f:8e:76:cd:8d:7a:af:
cd:27:b0:84:63:91:e4:5a:b9:e0:24:f9:78:19:9b:
a2:eb:14:81:f2:2d:b4:7d:ae:49:1c:9a:8c:06:2b:
52:3e:41:96:aa:3f:e5:81:17:18:fc:1a:2b:d7:38:
14:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:72:34:ED:FC:C4:5E:FC:35:8B:01:6F:BC:8A:76:3C:DC:70:37:B7
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NXI07fzEXvw1iwFvvIp2PNxwN7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.60.0/24
185.9.55.0/24
194.4.157.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6a:e1:06:99:ec:dc:3f:ac:10:dc:b2:6c:ab:09:f8:6d:c1:
1b:ab:b1:19:1c:89:09:74:dc:d7:8f:e2:bc:f2:13:83:5f:84:
39:fb:1a:5e:d1:19:48:ae:55:ad:12:70:55:63:a6:d3:c3:12:
36:10:4f:95:ab:8f:06:10:45:fd:a1:6c:fb:ed:09:a3:b5:da:
32:da:1b:0a:59:6a:80:58:bc:f0:e1:87:80:c6:e7:8e:02:5f:
66:48:47:dd:9d:67:3b:4b:e8:86:78:40:68:df:30:b5:26:1d:
3e:e3:9b:c2:fd:d4:c7:db:fa:00:2f:07:37:4e:90:47:63:8d:
f8:0c:86:a5:5f:84:35:14:68:ad:af:d2:21:71:33:df:94:0e:
0d:b8:64:df:73:f7:f6:11:45:47:f4:a6:63:07:54:f5:be:f9:
9b:df:57:fe:da:d8:6a:24:7c:ac:1c:c2:81:a9:0c:8a:ec:3f:
6a:d7:ea:a3:eb:7e:6e:db:23:54:47:d3:76:b1:dc:4a:00:11:
8b:2a:d9:c0:3c:de:cb:0d:14:d4:8b:c7:bb:85:ab:55:31:7a:
97:1e:35:2a:73:c6:6f:32:58:57:ce:fb:91:87:6b:a3:4a:d0:
48:0a:5e:c0:6b:c3:75:07:09:d4:32:dc:4a:1a:b4:f4:d8:19:
19:8c:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org