Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/NuJuH7n4QRx6qztEUpUBHUQuNek.roa
File: NuJuH7n4QRx6qztEUpUBHUQuNek.roa (raw, json)
Hash identifier: 4437SBNS0QstOdtfS04bWDHdkQNdOloQ5wj5Ko1LVzo=
Subject key identifier: 36:E2:6E:1F:B9:F8:41:1C:7A:AB:3B:44:52:95:01:1D:44:2E:35:E9
Certificate issuer: /CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Certificate serial: 0189B54F925EC9C64BAE2A92684BCF7D2B1F
Authority key identifier: B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/NuJuH7n4QRx6qztEUpUBHUQuNek.roa
Signing time: Wed 02 Aug 2023 08:13:58 +0000
ROA not before: Wed 02 Aug 2023 08:13:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61272
IP address blocks: 91.216.163.0/24 maxlen: 32
213.252.228.0/22 maxlen: 32
213.252.232.0/23 maxlen: 32
213.252.238.0/23 maxlen: 32
85.206.160.0/20 maxlen: 32
185.64.104.0/22 maxlen: 32
88.119.160.0/20 maxlen: 32
185.25.48.0/22 maxlen: 32
85.206.240.0/22 maxlen: 32
2a04:2181:c010::/48 maxlen: 64
2a04:2181:c011::/48 maxlen: 64
2a04:2181:c012::/48 maxlen: 64
2a04:2180::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b5:4f:92:5e:c9:c6:4b:ae:2a:92:68:4b:cf:7d:2b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66ea7359221c1b77d6cc006f7b6706a9a908299
Validity
Not Before: Aug 2 08:13:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36e26e1fb9f8411c7aab3b445295011d442e35e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:da:f4:2b:60:46:a2:0a:3f:39:21:ac:84:
47:38:9b:bd:32:45:76:03:7c:a2:03:97:30:82:48:
62:e9:8d:28:cb:c6:76:a7:78:93:b3:a6:8c:b8:d1:
ef:f5:04:4f:b8:dc:e1:25:00:41:4b:29:61:99:a7:
7a:a3:c2:96:36:b8:fc:34:1a:23:8e:8f:b5:7b:c0:
ef:95:c0:4b:d6:26:7f:e5:ac:63:89:6c:a3:56:79:
13:2e:84:59:2f:91:b3:53:29:c9:43:1a:c8:e9:7c:
31:e7:5c:4c:be:01:fc:a3:db:1f:2c:04:cd:8d:71:
72:65:17:58:3c:d5:b1:df:5b:d3:c9:7b:72:ab:6e:
6a:a5:64:8e:c8:d2:ad:96:30:19:54:61:63:1b:da:
a2:98:45:a0:e5:00:42:5f:a1:8a:a0:1f:f2:30:28:
c1:82:21:d9:1d:2a:08:8e:9d:c9:c6:94:a7:e8:97:
4c:68:c0:9c:89:ae:4a:81:41:3d:f5:16:96:44:80:
c4:fc:a7:c6:f2:96:56:60:bd:b3:2a:03:d1:9f:ce:
08:02:c7:bb:8e:3f:a5:27:32:fa:55:67:cc:7b:06:
89:02:d1:eb:c7:ae:38:ef:f7:aa:3d:06:8a:c7:02:
3d:cb:2c:4c:42:dc:f4:db:f8:2b:10:46:8f:10:16:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E2:6E:1F:B9:F8:41:1C:7A:AB:3B:44:52:95:01:1D:44:2E:35:E9
X509v3 Authority Key Identifier:
keyid:B6:6E:A7:35:92:21:C1:B7:7D:6C:C0:06:F7:B6:70:6A:9A:90:82:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tm6nNZIhwbd9bMAG97ZwapqQgpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/NuJuH7n4QRx6qztEUpUBHUQuNek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/f87a2e-46b1-4a66-a90c-699835c92bfe/1/tm6nNZIhwbd9bMAG97ZwapqQgpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.206.160.0/20
85.206.240.0/22
88.119.160.0/20
91.216.163.0/24
185.25.48.0/22
185.64.104.0/22
213.252.228.0-213.252.233.255
213.252.238.0/23
IPv6:
2a04:2180::/32
2a04:2181:c010::-2a04:2181:c012:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
03:d6:b5:c9:08:a9:ac:a4:d4:ef:80:1a:e4:ec:a3:3f:85:b6:
26:31:c5:bd:ce:c8:cf:95:a3:5a:ab:f4:1c:5d:a9:54:f1:86:
61:5b:01:77:4e:2c:c5:7b:1e:08:0f:80:7b:3f:9d:fc:12:6d:
b1:cc:42:d1:68:4c:36:a0:8d:e5:c6:b6:25:34:c4:eb:ad:60:
7a:bb:d9:86:e3:1d:b0:8d:61:0a:d9:22:f8:cc:f2:fb:ec:fd:
eb:61:bd:0f:f5:83:95:71:7c:3a:b0:bc:1e:5f:66:6b:f7:60:
d3:b1:e6:ed:cc:95:90:16:bf:73:c3:fe:9c:b3:66:d6:1d:6d:
00:73:4c:a5:a3:28:08:e3:ae:ae:b1:db:64:01:80:99:6e:f5:
29:b6:0f:11:ca:8b:4e:fe:28:a3:24:8f:e9:c3:75:62:83:96:
e8:91:59:25:65:83:79:ab:8b:c0:32:0b:2f:d3:67:55:b2:85:
37:bc:c2:76:94:42:1a:04:36:5d:fe:bf:c8:db:df:07:08:40:
e0:14:b0:71:fa:ff:1a:74:36:49:85:10:3d:41:41:08:b6:67:
af:0d:72:59:05:5d:93:18:69:3c:e4:9a:24:3c:7e:84:d0:cf:
f9:94:bc:05:49:cc:9a:3b:72:0e:87:c2:18:e1:6e:71:77:69:
93:d4:a2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:24 2024 by rpki-client on console-ams.rpki-client.org