Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/NyR6X_R6iQ-ABIqWno6JWwu_Rzc.roa
File: NyR6X_R6iQ-ABIqWno6JWwu_Rzc.roa (raw, json)
Hash identifier: uEhmd5qjL157Ptnkj+cU3BQWokADJkAhCuUTOxjO2uc=
Subject key identifier: 37:24:7A:5F:F4:7A:89:0F:80:04:8A:96:9E:8E:89:5B:0B:BF:47:37
Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e
Certificate serial: 01856B8A27FE67BE1EFB36178E4C6D7D4C0D
Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/NyR6X_R6iQ-ABIqWno6JWwu_Rzc.roa
Signing time: Sun 01 Jan 2023 04:14:54 +0000
ROA not before: Sun 01 Jan 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24634
IP address blocks: 93.185.80.0/20 maxlen: 24
185.125.148.0/22 maxlen: 24
2a06:b8c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:27:fe:67:be:1e:fb:36:17:8e:4c:6d:7d:4c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e
Validity
Not Before: Jan 1 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37247a5ff47a890f80048a969e8e895b0bbf4737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:eb:81:64:0c:3a:60:3d:b2:b9:a0:20:65:5d:
30:31:f2:e0:75:ce:bc:b8:e4:11:b9:44:54:6e:ce:
2b:86:82:5f:73:a6:2b:1d:e9:6e:3f:e6:25:7e:15:
6d:8f:84:8e:0d:81:36:3a:50:2b:65:d2:4c:51:83:
b0:b6:eb:24:40:a5:56:9e:85:77:21:ca:44:04:cd:
ed:c4:b0:fb:e4:2c:37:2e:9a:61:be:8d:08:4b:7f:
06:d1:67:f4:a5:e6:03:c7:a1:2a:4a:1c:e1:2f:cd:
73:ee:a2:8c:a1:dc:58:d5:13:5a:7a:cd:05:ec:04:
a1:78:28:fe:7e:46:30:67:05:f3:1b:ec:a5:81:51:
cc:8d:e9:95:13:0c:ff:a7:26:ef:5d:34:cc:87:27:
ac:30:f0:48:b1:4e:f3:bd:84:c0:49:a1:45:88:44:
72:0e:54:40:4a:6d:5e:dd:02:da:ab:d2:53:7c:f0:
a8:1a:b9:27:1b:e1:4f:6f:dc:00:42:9c:b6:a2:39:
18:32:c3:87:4b:ec:7e:4a:c1:ec:9c:9f:8e:59:96:
4c:e9:0a:2c:a9:b2:5a:cd:e8:ae:bb:e0:3b:62:c2:
c2:86:bb:0d:8a:e8:94:b4:5f:e8:f3:44:32:a3:d0:
28:96:9f:4a:0b:9e:05:dc:db:a7:86:6a:24:0c:48:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:24:7A:5F:F4:7A:89:0F:80:04:8A:96:9E:8E:89:5B:0B:BF:47:37
X509v3 Authority Key Identifier:
keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/NyR6X_R6iQ-ABIqWno6JWwu_Rzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.80.0/20
185.125.148.0/22
IPv6:
2a06:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
0c:a2:b8:23:e2:9b:95:1a:3d:46:a8:8d:5f:2b:db:4c:59:ab:
1c:50:03:e5:06:05:4c:43:2a:9f:5d:d8:52:ca:65:c3:87:5b:
15:0a:5b:36:85:a1:d1:f1:59:10:80:60:c0:c0:e4:ea:6e:07:
99:66:ee:2a:ea:1e:16:e9:0d:c4:3c:af:1d:89:2f:4f:28:59:
70:8e:33:e4:a4:50:99:20:24:d1:e5:99:11:26:98:3a:8a:6b:
cb:af:2b:e3:b7:ac:91:fc:db:78:2e:c3:57:77:2f:82:27:69:
db:cf:07:46:bc:dd:66:2b:6c:db:5d:be:b6:85:45:b2:4c:cf:
53:01:42:72:f6:80:84:d6:b4:59:4f:62:f5:da:1b:3e:7a:f8:
84:51:fa:67:0d:ff:aa:4b:a1:ee:59:50:00:c0:30:b0:77:44:
eb:76:f2:f9:6a:9e:54:c7:ae:1e:98:21:25:5f:23:f6:7f:de:
70:19:b1:c8:b3:c2:ec:db:39:e8:7e:67:2b:64:e9:9b:0b:53:
6d:9e:7c:4f:db:6a:48:09:92:9a:09:79:53:fe:bf:a5:69:55:
8f:53:76:39:d8:31:d0:58:c2:36:e8:23:21:c2:8a:15:d1:4a:
07:7e:92:0e:cb:13:85:de:53:7a:f8:9e:af:f6:aa:6e:ab:b5:
88:57:bf:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:52 2024 by rpki-client on console-fra.rpki-client.org