Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/NOSEGG8YmRlT6NcIlln69pXGsG4.roa
File: NOSEGG8YmRlT6NcIlln69pXGsG4.roa (raw, json)
Hash identifier: eyYzacR+Nx5tTKwX0bcTBeW8SRYYSL3vmhDP3+ISdhQ=
Subject key identifier: 34:E4:84:18:6F:18:99:19:53:E8:D7:08:96:59:FA:F6:95:C6:B0:6E
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018E64BF5B02CCCFAAB16E01E51E2B0EA178
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/NOSEGG8YmRlT6NcIlln69pXGsG4.roa
Signing time: Fri 22 Mar 2024 06:00:46 +0000
ROA not before: Fri 22 Mar 2024 06:00:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 46.175.130.0/24 maxlen: 24
123.253.212.0/23 maxlen: 23
141.98.137.0/24 maxlen: 24
141.98.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Apr 2024 18:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:64:bf:5b:02:cc:cf:aa:b1:6e:01:e5:1e:2b:0e:a1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Mar 22 06:00:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34e484186f18991953e8d7089659faf695c6b06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:52:11:7d:ac:91:e3:52:79:4a:7e:b7:87:
8c:81:59:9b:01:ce:a0:0f:b4:1a:44:ef:e7:3a:78:
d0:12:5b:c6:dc:27:70:97:83:9c:af:49:a6:6e:de:
cd:1c:2f:b4:74:eb:8d:06:fb:fa:fe:d7:1d:2c:55:
34:1c:22:70:86:bb:e0:71:e1:e2:89:7e:8c:0d:80:
01:6a:8d:8f:25:1d:dd:cb:3e:b4:0f:fd:88:eb:b5:
b2:a9:f3:ed:f5:10:6a:10:34:3e:e4:52:d4:51:27:
03:19:fb:2e:c3:fc:94:30:e7:87:74:fc:5a:af:3d:
7f:f1:c8:83:58:a1:cd:58:18:0e:f2:5e:f5:ee:81:
dc:44:f1:07:02:60:04:f3:9c:5f:81:e9:89:e4:2f:
30:33:43:08:55:08:1b:d7:68:7c:09:11:cc:7f:d4:
aa:7c:01:37:be:0e:bf:e8:13:4f:9a:f1:ba:85:91:
3e:a9:1f:69:2f:3c:be:4c:f7:f4:73:50:a9:e5:d6:
8e:ee:d2:e6:e3:a9:66:76:21:ff:95:fa:b2:57:6d:
dc:d3:6b:00:4d:79:7f:67:21:89:99:6c:9f:93:5f:
66:ca:1c:3b:ea:11:12:e7:5b:a5:48:2d:30:06:2c:
cd:34:dc:73:f4:1d:ee:aa:68:4f:b9:ce:c9:bb:7c:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E4:84:18:6F:18:99:19:53:E8:D7:08:96:59:FA:F6:95:C6:B0:6E
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/NOSEGG8YmRlT6NcIlln69pXGsG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
123.253.212.0/23
141.98.137.0/24
141.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4a:37:5f:50:1e:08:bf:0e:55:4d:ef:3c:ea:8c:56:0f:96:
e5:68:0c:1b:cc:d6:42:e7:9b:37:96:2c:da:93:1a:0a:66:a6:
ec:d6:ea:56:3d:ca:d6:a2:70:b5:1d:0e:f8:95:8c:51:13:44:
59:96:36:4f:23:97:57:18:7f:e3:7e:f8:37:57:60:44:25:d0:
39:0d:4c:20:18:44:2a:8b:99:b3:86:52:2e:a8:f5:d0:c0:0f:
bc:f8:aa:49:ae:7b:0b:e2:cd:b9:99:4e:12:cd:27:66:cd:0e:
47:40:06:53:2f:62:8f:a0:1f:47:b1:0a:ef:ef:d7:6c:59:85:
b3:0c:d0:15:1f:5c:94:f2:c4:88:53:95:a8:9a:51:a3:5b:e6:
95:c3:bf:00:92:ca:9c:1a:5d:df:dc:5d:71:e2:b3:1f:be:36:
1b:7d:ad:05:48:03:49:51:fb:a5:e1:95:eb:37:75:43:65:1c:
d9:9b:5c:87:68:ce:c1:be:f8:12:d0:b3:a8:ae:c2:54:bc:3b:
db:c8:28:1b:a5:9a:a5:b4:a2:e7:3f:9e:e7:69:b6:97:de:10:
e0:f2:69:a2:03:24:6c:e8:e8:9b:30:7a:41:87:86:79:4f:04:
46:ed:41:a5:7c:a9:89:7f:54:c0:62:a8:3e:64:57:92:32:ab:
9e:36:17:26
-----BEGIN CERTIFICATE-----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Generated at Sat Apr 6 22:00:31 2024 by rpki-client on console-ams.rpki-client.org