Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/npg9OewbAeTeYJqRjUvMeWnlk0g.roa
File: npg9OewbAeTeYJqRjUvMeWnlk0g.roa (raw, json)
Hash identifier: xDWMZ5tPdpWB9v5oYsLIiwl6Wr00VSA2TVERG9YuX5Y=
Subject key identifier: 9E:98:3D:39:EC:1B:01:E4:DE:60:9A:91:8D:4B:CC:79:69:E5:93:48
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0186B6847A57F8E42D51CA4D201E22DC0E25
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/npg9OewbAeTeYJqRjUvMeWnlk0g.roa
Signing time: Mon 06 Mar 2023 10:43:00 +0000
ROA not before: Mon 06 Mar 2023 10:43:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 185.185.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:84:7a:57:f8:e4:2d:51:ca:4d:20:1e:22:dc:0e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 6 10:43:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e983d39ec1b01e4de609a918d4bcc7969e59348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:24:f4:d8:84:89:ea:ff:b5:fb:d0:83:bf:
f6:c3:44:c6:38:4f:1e:3f:19:9f:91:36:de:dd:22:
f4:50:5b:9a:25:3f:a0:17:6c:ff:58:89:e4:eb:2a:
4b:3b:f7:e5:90:08:8a:4e:ff:83:c9:82:9e:8a:bf:
52:60:90:bd:2e:aa:2b:5b:3f:3a:47:71:1b:8a:b7:
a5:e2:b4:3e:b2:4d:6e:59:61:46:03:c7:ae:b2:5a:
1e:fd:34:67:84:28:df:0a:76:10:ba:6f:2a:c0:fe:
03:28:2e:46:b0:a1:3e:1f:25:37:f9:00:a6:5d:56:
0c:2c:0e:fe:63:af:69:90:f2:ea:d2:7d:11:af:04:
47:02:34:a1:32:cb:ac:a0:5d:d5:ac:cb:2f:db:fa:
3a:d3:a1:9e:9d:55:d3:07:e8:4f:12:57:c6:be:82:
70:1e:23:10:3b:8e:c2:41:34:68:79:9e:3a:b9:e9:
71:67:67:8e:b0:bf:7b:6a:34:66:38:a8:0f:f5:8f:
f9:ed:ff:3e:17:2d:11:46:58:02:b7:43:a9:7d:9f:
e7:84:5e:ca:28:b0:e4:4a:68:2a:db:f6:11:f6:c5:
b8:ec:fd:50:0c:b1:45:db:5d:60:39:48:96:68:54:
d5:2d:2f:48:ec:48:36:b2:53:f5:c1:dc:ba:9d:c5:
3b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:3D:39:EC:1B:01:E4:DE:60:9A:91:8D:4B:CC:79:69:E5:93:48
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/npg9OewbAeTeYJqRjUvMeWnlk0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.251.0/24
Signature Algorithm: sha256WithRSAEncryption
99:ef:3d:6e:1e:2a:e8:10:3d:c7:01:36:13:26:6d:ce:44:e5:
db:5d:75:7e:1f:66:ee:74:7a:fb:85:bf:61:66:fa:2c:a1:1f:
01:2c:ae:3a:1f:6c:1b:cd:8c:27:7b:0d:a6:6f:98:05:bc:af:
2c:bd:1e:9a:20:b5:ef:f7:c4:a2:f9:9a:03:28:d9:1b:fe:95:
fa:1e:49:35:14:42:01:e8:fb:8f:1f:65:4f:96:a2:83:2a:f9:
e8:0f:2a:db:44:6b:dc:0e:cd:b6:08:fa:43:8c:74:f6:41:7d:
55:b1:c2:f3:ec:83:4a:52:4f:8e:30:44:44:43:6c:33:a0:4f:
28:3c:9f:d5:b0:5c:2a:bd:e8:c0:b9:f7:c1:e5:d4:05:f4:8e:
eb:a9:99:5c:2a:dc:ab:db:f7:5d:c2:e0:ab:22:00:41:5a:cc:
a0:d8:13:5b:05:86:50:a9:a2:e1:0b:24:54:ab:0d:3f:d9:73:
bf:1f:99:98:87:37:98:f5:08:b8:f4:db:3d:8f:30:37:4c:87:
4e:cf:e3:8b:43:3f:46:5c:0b:1c:a7:56:7e:5a:43:92:f3:55:
20:89:4a:7a:75:99:96:06:e0:b1:db:79:39:cf:0d:d4:b3:8b:
f8:61:2c:69:48:d7:7f:e9:d2:11:b6:13:8f:fc:7c:e8:8a:6b:
b8:e6:f2:e2
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 22 03:02:43 2023 by rpki-client on console-ams.rpki-client.org