Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nnkqdTZ6rVFieMmDnUlxrisVlY4.roa
File: nnkqdTZ6rVFieMmDnUlxrisVlY4.roa (raw, json)
Hash identifier: Znrmu1nHAhUhzkVIn/CXvTrySO6n8xSVdLScwZ03SC8=
Subject key identifier: 9E:79:2A:75:36:7A:AD:51:62:78:C9:83:9D:49:71:AE:2B:15:95:8E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187614D34EBE3663729EA3B7ECFBCD25052
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nnkqdTZ6rVFieMmDnUlxrisVlY4.roa
Signing time: Sat 08 Apr 2023 14:37:42 +0000
ROA not before: Sat 08 Apr 2023 14:37:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 194.5.65.0/24 maxlen: 24
176.125.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 07:53:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:4d:34:eb:e3:66:37:29:ea:3b:7e:cf:bc:d2:50:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 8 14:37:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e792a75367aad516278c9839d4971ae2b15958e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:fa:1c:64:83:7b:21:7f:7e:d4:92:e3:5d:
b4:d7:30:32:1e:95:94:0e:cf:58:5a:fb:a1:c9:9f:
e4:95:fb:90:eb:d5:5e:7c:92:2d:a4:63:fd:f1:1f:
9f:f4:c2:f2:6d:50:4d:ad:4c:45:16:79:31:e4:3c:
25:e4:2c:58:51:8a:83:0d:e5:41:13:39:a3:5d:50:
f6:62:b9:c3:e0:96:c9:16:ce:aa:2b:ff:1c:fc:0a:
aa:18:f5:76:ac:b1:2a:d7:bf:e9:74:55:25:7e:20:
11:7a:a1:15:d2:cf:e3:27:81:9b:e8:b2:c3:3b:f1:
50:9e:33:9a:27:17:88:11:4e:b4:0a:af:09:8b:70:
5e:52:01:df:56:e6:39:ec:d6:83:1d:7d:fd:60:f3:
61:a3:ee:e1:3f:d4:0b:0c:3a:53:ff:0e:33:62:e1:
00:67:c0:5f:ce:5b:1b:76:62:79:4e:23:9c:cf:19:
b4:7d:5b:48:56:c2:5a:67:c7:90:73:ae:32:0f:c1:
31:08:e1:6a:89:c8:09:e9:48:84:4b:cc:95:47:4e:
9b:2d:8d:24:58:ff:1a:32:ef:2e:e2:68:50:ef:09:
e2:5b:87:eb:9a:00:e5:e7:83:5a:da:ab:3e:de:df:
4c:5b:76:b0:77:3d:c6:88:77:b2:83:93:1d:ec:07:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:79:2A:75:36:7A:AD:51:62:78:C9:83:9D:49:71:AE:2B:15:95:8E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/nnkqdTZ6rVFieMmDnUlxrisVlY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.248.0/24
194.5.65.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c5:3b:15:ab:44:16:51:5f:27:3a:e2:41:e4:04:bb:78:e5:
80:e0:62:15:de:bb:15:07:18:3b:40:bd:78:3b:cf:dc:f0:69:
29:db:86:f5:18:f4:8f:41:37:a4:09:e3:0b:f7:93:1f:af:bf:
b5:3e:55:7f:ab:bc:c5:a3:e9:08:8d:69:41:0e:31:3f:95:54:
7e:06:40:c6:7c:de:b5:7b:cb:e4:28:b8:f5:43:87:4b:45:68:
29:f1:3e:03:a0:2a:59:d6:0a:7b:6f:12:20:ee:ed:e7:f2:3c:
95:98:f6:bc:d8:2d:f5:61:5e:fe:f3:2a:67:a8:d5:94:1f:a8:
fd:40:62:1a:bd:ed:5b:47:f0:75:25:c1:5f:5c:a4:20:1c:5e:
23:32:6b:b5:00:1f:2e:55:3e:0f:64:82:78:bd:99:d8:62:25:
75:04:96:74:55:57:43:aa:24:92:2e:66:0f:f9:56:9d:4e:6a:
d8:5e:f6:c4:d2:df:30:ce:af:78:47:e8:d9:69:09:43:67:93:
57:af:82:e9:0e:96:8e:db:ab:e6:64:09:66:99:46:2c:44:5f:
7c:ed:2d:83:22:67:d2:b6:28:31:1c:be:8d:0d:cb:fe:64:fa:
06:1c:83:50:78:8d:f5:a0:68:a1:4f:08:fe:70:66:2f:e3:ad:
d3:2a:ee:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org