Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/NI0G2NNugJ5hjt-IDri9bhi9gGs.roa
File: NI0G2NNugJ5hjt-IDri9bhi9gGs.roa (raw, json)
Hash identifier: KS9MGqJavbHLU7atIugUZ7DJ81/vSeK4iui6kgnQAi4=
Subject key identifier: 34:8D:06:D8:D3:6E:80:9E:61:8E:DF:88:0E:B8:BD:6E:18:BD:80:6B
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01856C0A4C359AFEDA22746C61E705E6515F
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/NI0G2NNugJ5hjt-IDri9bhi9gGs.roa
Signing time: Sun 01 Jan 2023 06:34:52 +0000
ROA not before: Sun 01 Jan 2023 06:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 92.51.40.0/22 maxlen: 24
92.51.32.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:4c:35:9a:fe:da:22:74:6c:61:e7:05:e6:51:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 1 06:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=348d06d8d36e809e618edf880eb8bd6e18bd806b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0a:1b:d7:a4:d8:0e:26:35:60:24:91:d0:32:
55:74:64:e1:b3:31:fe:42:c1:43:f9:0d:90:20:9a:
f6:20:36:b9:a7:2e:8c:f0:e2:7b:e7:47:83:ae:ba:
79:05:69:10:2b:b5:af:25:21:38:2c:4c:03:c3:df:
db:57:94:05:37:7f:da:49:0c:ce:c6:63:48:eb:75:
57:2d:9c:df:83:2f:71:68:bc:da:e6:0b:43:76:f1:
0b:ca:fa:62:96:b5:17:3c:9d:74:a4:71:30:c0:65:
4e:40:ef:ff:64:c8:06:07:7c:80:40:86:ad:de:7b:
79:cb:38:68:8d:f3:e6:6d:aa:2f:7a:1b:d2:9c:6e:
6d:99:58:38:0e:bd:9f:d3:ca:5b:72:e0:cc:e4:5c:
e4:90:02:25:96:a6:01:20:39:06:a6:5d:75:81:9f:
f6:f4:15:90:94:42:a5:41:3e:08:7e:6a:2b:f1:b5:
cf:65:fc:57:82:b0:be:79:92:a9:0b:c5:f9:a5:7f:
4b:52:c1:40:80:93:75:f5:a9:ef:6c:86:e6:28:de:
fc:a4:c0:97:43:e9:9e:ee:ca:51:98:7d:47:86:bc:
44:7c:32:76:a3:11:d8:a8:da:07:d3:17:9b:b6:87:
06:04:23:62:bd:1d:67:d4:f8:95:ec:7f:ce:88:33:
02:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:8D:06:D8:D3:6E:80:9E:61:8E:DF:88:0E:B8:BD:6E:18:BD:80:6B
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/NI0G2NNugJ5hjt-IDri9bhi9gGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.32.0/22
92.51.40.0/22
Signature Algorithm: sha256WithRSAEncryption
59:6c:1a:09:a4:cf:67:4e:9e:97:7a:82:f0:96:64:72:4a:db:
ec:87:11:2f:5c:77:2b:cd:ab:83:d1:95:60:e1:bf:6a:67:66:
5c:4a:33:fd:bd:f5:ce:c4:17:f0:03:31:f2:ba:50:24:43:bd:
a4:cf:d5:3b:f9:68:65:66:b0:07:5b:a1:cb:82:c4:bb:30:99:
e6:2c:e7:18:20:74:64:1b:c7:78:c7:41:15:e2:9a:ab:f1:b3:
bb:ad:82:96:76:fd:99:59:09:b8:9e:bf:88:dc:6c:fd:d6:11:
07:c4:3f:14:10:52:6e:1f:2e:1c:bc:21:83:b1:79:cc:79:8c:
73:4b:21:01:34:82:cf:e1:ee:74:65:b8:8b:ac:50:be:65:71:
c3:73:72:74:bd:c6:db:3b:09:94:4b:5d:88:84:73:70:f0:65:
33:d0:b6:2c:4c:df:25:b2:79:37:10:e4:cf:a3:85:e8:d2:f9:
60:19:03:e9:4c:25:93:b2:bb:4a:cc:8a:b7:48:ce:d9:b9:46:
a6:e5:49:25:80:52:19:56:0e:7e:02:a2:d1:e8:aa:b8:3a:09:
d0:b8:7c:64:e8:79:a6:d0:e0:23:af:64:d4:85:78:ad:9d:ef:
59:14:d0:0b:62:6f:91:4a:e6:26:80:11:cd:45:bb:8d:54:11:
f9:b7:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:42 2024 by rpki-client on console-fra.rpki-client.org