Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NjLoyl-8nrVaf1g_T8xTjpphG0s.roa
File: NjLoyl-8nrVaf1g_T8xTjpphG0s.roa (raw, json)
Hash identifier: Dh4Ekh4+dl7wKSIPw5b6/0Jaik8akWnHU27vl8sPCiE=
Subject key identifier: 36:32:E8:CA:5F:BC:9E:B5:5A:7F:58:3F:4F:CC:53:8E:9A:61:1B:4B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185959B50A3E18FBB746F00F3FD742C03D6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NjLoyl-8nrVaf1g_T8xTjpphG0s.roa
Signing time: Mon 09 Jan 2023 08:17:41 +0000
ROA not before: Mon 09 Jan 2023 08:17:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46573
IP address blocks: 185.230.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 17:04:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:9b:50:a3:e1:8f:bb:74:6f:00:f3:fd:74:2c:03:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 9 08:17:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3632e8ca5fbc9eb55a7f583f4fcc538e9a611b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:ec:78:b1:2a:4d:4a:93:9c:2a:8f:87:ac:
75:f7:ed:db:ac:19:dd:53:f0:88:a5:07:14:e4:05:
80:0b:4c:67:12:de:81:4d:7b:09:4e:ff:3d:b2:25:
07:4b:29:18:87:fd:90:9e:46:06:92:5f:ba:00:f8:
4b:8c:92:c4:2e:60:63:82:86:26:af:28:af:ae:f3:
c6:5a:2c:4a:44:89:88:23:ae:b5:81:6c:0c:89:ba:
19:4c:cc:f4:12:7b:52:9c:cc:14:58:8a:f9:0b:01:
5b:f0:27:d4:1f:9e:ad:0c:7f:b2:02:46:63:34:c0:
e3:9e:27:49:b3:72:e6:70:b3:7e:23:09:0a:9c:83:
5c:74:79:86:79:c5:17:4c:47:f4:66:1d:4b:78:56:
51:a6:b2:25:84:8c:99:5a:39:3e:9c:7b:08:fa:da:
cc:1a:19:25:f4:dd:ea:01:cc:58:43:19:46:de:c1:
92:b9:65:a8:d5:b6:87:bc:75:8d:47:a8:84:21:72:
b8:20:26:c9:a3:87:8a:3d:85:cb:5d:6a:77:61:a8:
d7:f2:98:aa:46:41:62:0d:ba:b7:08:59:33:49:7e:
bd:a3:0d:5e:c8:06:37:3c:53:ee:84:08:86:7c:69:
57:ec:49:a7:77:57:62:c7:0f:98:5e:9f:3b:7c:1c:
f3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:32:E8:CA:5F:BC:9E:B5:5A:7F:58:3F:4F:CC:53:8E:9A:61:1B:4B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/NjLoyl-8nrVaf1g_T8xTjpphG0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.53.0/24
Signature Algorithm: sha256WithRSAEncryption
51:48:a7:a9:58:c2:dd:4c:15:3b:6a:f2:e1:d9:da:64:73:40:
e4:a7:90:78:8d:07:12:11:15:c4:00:a7:e3:b5:76:9a:df:4e:
78:33:34:de:61:aa:8b:e0:63:69:fb:f1:42:f7:66:34:bc:bd:
1e:32:c8:e8:83:f0:ac:3a:dc:36:23:64:63:6d:5b:b9:ec:92:
d6:87:e1:ee:a0:1c:1c:51:ab:5e:c0:2c:32:6a:68:3a:66:bf:
f1:e7:bf:2c:cb:76:1f:6a:81:b7:16:e3:bd:40:a6:dc:05:89:
c6:30:16:c9:c5:d8:d2:6a:55:aa:61:21:2e:2a:0e:ff:1f:5c:
3d:4b:7d:8c:09:5f:24:22:85:5b:68:70:25:16:de:1a:8a:b8:
07:ed:fe:a4:74:77:96:51:f7:d9:7f:72:57:b9:db:e3:f8:4d:
cb:3b:39:a3:4a:7b:f2:97:23:4b:01:2e:b7:99:9a:4d:88:6b:
0a:60:66:fe:69:5a:63:67:4d:a2:9e:09:cd:39:1f:e8:e3:32:
22:ae:ef:90:b6:55:d0:55:51:d6:f9:e6:7a:75:85:a4:eb:4f:
7b:90:a3:cf:88:e1:e5:62:1c:97:f6:b7:2e:44:3e:06:2f:8b:
14:33:49:0b:27:43:ba:73:d0:ff:2a:7e:85:aa:26:4b:51:71:
8a:2b:dd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org