Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/NGCS1LTaHNMqERYBNm6xYX9iOeA.roa
File: NGCS1LTaHNMqERYBNm6xYX9iOeA.roa (raw, json)
Hash identifier: E4PfxQAhCiA46cojy8COe2suyDXbliR0NhxSU7Xe6LQ=
Subject key identifier: 34:60:92:D4:B4:DA:1C:D3:2A:11:16:01:36:6E:B1:61:7F:62:39:E0
Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5
Certificate serial: 018CC2DB57604B07E6FB71546064578584E6
Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/NGCS1LTaHNMqERYBNm6xYX9iOeA.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199274
IP address blocks: 194.177.20.0/22 maxlen: 24
176.112.192.0/19 maxlen: 24
185.22.60.0/22 maxlen: 24
91.239.26.0/23 maxlen: 24
2a00:5a60::/32 maxlen: 48
Validation: Failed, certificate revoked on Sat 27 Apr 2024 11:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:57:60:4b:07:e6:fb:71:54:60:64:57:85:84:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=346092d4b4da1cd32a111601366eb1617f6239e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2e:35:27:ec:ce:68:c9:89:cf:64:ab:7e:54:
5c:c5:df:75:ee:16:bf:f8:92:56:8f:b2:09:8c:d0:
eb:2b:ce:b2:34:9f:80:18:51:a4:ea:5b:57:fc:ea:
a7:f0:11:60:75:22:0a:32:e8:03:3a:89:3e:d2:6a:
f0:d4:0e:d8:d5:ba:d2:2c:72:5e:59:56:7d:05:45:
38:11:54:02:3d:f1:98:39:80:1d:0d:dc:32:a2:c2:
f0:dc:63:d3:d7:73:e7:db:4d:a7:ae:5c:a4:43:41:
42:f6:01:47:58:81:0a:eb:75:39:d7:05:66:2c:2a:
cf:26:89:45:30:e9:65:47:65:47:2d:29:c8:90:1b:
e1:0a:98:88:d0:67:32:18:0a:16:c8:95:b8:d5:a8:
06:0d:62:85:78:09:9e:6f:f6:e4:c3:df:80:80:82:
6c:a4:92:e5:78:7a:1e:9f:71:f8:db:6e:4b:81:c0:
51:30:6c:db:8b:cb:4f:52:d4:f4:8e:b7:2f:a2:a4:
af:d7:ca:f5:0c:d2:b0:41:48:b3:64:bd:f4:a4:a6:
c2:9a:1e:4b:17:02:53:05:9c:e3:cd:72:02:0a:d5:
4f:97:74:e3:c7:d8:1f:d2:84:56:bc:da:28:6f:b6:
5f:bf:cf:e0:0d:94:94:ef:24:32:c4:95:69:35:0a:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:60:92:D4:B4:DA:1C:D3:2A:11:16:01:36:6E:B1:61:7F:62:39:E0
X509v3 Authority Key Identifier:
keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/NGCS1LTaHNMqERYBNm6xYX9iOeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.26.0/23
176.112.192.0/19
185.22.60.0/22
194.177.20.0/22
IPv6:
2a00:5a60::/32
Signature Algorithm: sha256WithRSAEncryption
99:cd:72:1a:0f:5d:f6:b0:5c:7a:6d:c4:cb:3e:eb:c2:13:1c:
21:64:48:73:78:2d:bf:8e:c6:3b:04:dc:da:1e:8b:ae:e3:5f:
e7:51:c3:5d:2d:c4:9d:54:22:b6:2a:43:e5:31:99:d5:57:e6:
ab:b9:fe:3a:54:aa:f9:f2:95:be:53:7e:c9:b9:fc:31:0d:3e:
a8:ac:18:b4:85:e6:13:6a:c3:02:9a:9f:8f:86:06:7f:32:87:
5d:17:30:98:a0:52:6a:eb:58:02:2c:bd:7a:57:c4:68:f0:37:
74:0b:89:f4:3b:e7:78:60:c2:f1:c7:7a:a9:b4:1c:ce:da:34:
38:02:06:62:b9:34:b7:57:95:85:25:b8:2e:81:be:1b:99:ca:
e0:9c:8a:b9:64:d9:79:1c:43:af:92:92:c9:55:10:4e:ee:41:
17:b3:ea:0f:3c:73:41:c7:4f:46:08:ee:37:6e:ee:da:fd:79:
13:0d:c2:dc:db:ef:cc:cc:88:9f:dc:03:8f:35:2a:e4:1c:4e:
53:eb:90:43:c2:34:a4:2f:d5:b7:e0:9a:81:05:e7:a4:2b:90:
ac:62:16:35:42:24:37:9a:bc:07:1c:d3:bb:82:0f:08:b8:4d:
64:0d:1d:84:26:1b:d1:27:3b:40:c6:2b:2f:94:02:e0:4a:3c:
e4:1c:10:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 14:14:08 2024 by rpki-client on console-ams.rpki-client.org