Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/nkh3LTTgzQHtV3s55j9cQLHokm4.roa
File: nkh3LTTgzQHtV3s55j9cQLHokm4.roa (raw, json)
Hash identifier: VeOoNnlghai2KbDaX4JUC8COX697YX3enXXKGxpBGhI=
Subject key identifier: 9E:48:77:2D:34:E0:CD:01:ED:57:7B:39:E6:3F:5C:40:B1:E8:92:6E
Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16
Certificate serial: 01856CEF43E941624EE9223B267B28209C42
Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/nkh3LTTgzQHtV3s55j9cQLHokm4.roa
Signing time: Sun 01 Jan 2023 10:44:57 +0000
ROA not before: Sun 01 Jan 2023 10:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60026
IP address blocks: 194.61.80.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:43:e9:41:62:4e:e9:22:3b:26:7b:28:20:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16
Validity
Not Before: Jan 1 10:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e48772d34e0cd01ed577b39e63f5c40b1e8926e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:dc:ba:f8:ba:87:07:d7:fc:a9:bc:5c:b1:
7e:3b:e7:2d:b4:9c:88:03:4d:8e:40:7e:67:48:c5:
4a:42:f3:b6:e5:d3:e3:75:fd:41:04:10:ff:1e:83:
d2:36:ec:3b:c1:77:b9:0e:56:36:91:67:0a:7f:aa:
3a:9f:db:ec:a0:be:62:dd:4c:b8:d9:8f:c5:8b:26:
34:a1:cd:e9:a4:59:2d:f7:07:3b:4e:c8:a7:3b:ec:
d9:52:f3:63:51:e9:1e:ea:82:33:fe:c7:d8:e7:fe:
c6:a8:bb:92:41:34:7f:c6:75:b1:d1:f7:bc:f8:83:
77:6b:82:92:f9:ed:70:65:05:42:a9:e8:0c:8f:84:
fb:e7:77:33:99:ab:ab:e0:8b:a7:fa:a0:bd:c8:57:
34:2b:4f:c4:b1:c5:08:75:b8:90:ae:c0:45:57:33:
a7:34:c2:26:58:b3:2b:4a:98:ad:f8:d4:12:7f:fa:
f3:76:e1:9b:82:60:1a:13:62:e9:cf:38:7b:63:8e:
3f:0d:81:0e:b6:18:2f:18:61:08:1b:3c:fc:fd:64:
5b:5a:36:dc:f0:9c:9c:a8:01:30:15:b4:37:fa:7e:
d8:6a:3c:46:98:5f:7e:c2:38:60:32:c0:21:fc:f8:
99:be:cf:c4:f5:25:7d:20:3d:14:75:05:f1:cd:ea:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:48:77:2D:34:E0:CD:01:ED:57:7B:39:E6:3F:5C:40:B1:E8:92:6E
X509v3 Authority Key Identifier:
keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/nkh3LTTgzQHtV3s55j9cQLHokm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.80.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f9:83:40:7c:ad:cf:36:4b:ec:af:5d:c1:92:e0:45:be:b2:
30:fb:a4:72:bd:86:db:ed:f4:4e:48:f6:d1:06:7f:10:88:2a:
7d:51:91:a9:91:23:44:b6:99:64:c4:3e:08:d0:ed:54:bc:33:
c4:2e:d8:78:70:16:3a:df:c0:f0:48:94:61:56:d5:b9:fd:b2:
b4:ef:2a:df:54:2b:90:54:cf:59:6a:d1:cd:fd:a6:30:c6:53:
fb:a3:eb:a9:ab:64:99:ce:ad:87:93:a0:c3:44:29:6c:88:63:
81:11:7b:aa:30:53:5d:f5:17:0e:ea:9b:c1:c3:68:47:d9:bc:
9b:92:77:6f:1a:e0:81:ec:4e:9b:72:97:16:14:8b:fe:e5:24:
9c:66:5a:51:42:99:c9:81:8d:fd:72:13:f6:f0:ae:3d:fc:13:
df:d5:bf:72:74:1c:96:6b:7d:97:a4:a0:96:ee:1a:97:d1:a0:
1b:02:5f:4d:49:71:9b:77:ca:27:05:0e:59:4e:23:52:43:55:
49:44:4f:b0:a7:cb:06:27:50:b2:5d:fd:0c:af:e7:84:c3:72:
a6:6d:d5:7d:d3:ba:c3:be:6b:00:12:c5:0b:73:f1:9d:25:c5:
cc:b1:98:3e:99:71:75:95:c2:39:bc:68:c9:44:da:e7:fa:56:
24:ee:f7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:22 2024 by rpki-client on console-ams.rpki-client.org