Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/NMYvXB5n6nmrk1ASlWel1rI8B0Y.roa
File: NMYvXB5n6nmrk1ASlWel1rI8B0Y.roa (raw, json)
Hash identifier: wTm6bcfd/RGYBHIJ6IrF8fdUM9FgMItW0H+Ngwu51Uo=
Subject key identifier: 34:C6:2F:5C:1E:67:EA:79:AB:93:50:12:95:67:A5:D6:B2:3C:07:46
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 0185715551E88DF06FCD630FD01E139E1679
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/NMYvXB5n6nmrk1ASlWel1rI8B0Y.roa
Signing time: Mon 02 Jan 2023 07:14:55 +0000
ROA not before: Mon 02 Jan 2023 07:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45015
IP address blocks: 194.35.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:51:e8:8d:f0:6f:cd:63:0f:d0:1e:13:9e:16:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Jan 2 07:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34c62f5c1e67ea79ab9350129567a5d6b23c0746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:16:91:26:30:ab:4e:30:9f:fd:ff:d4:78:1f:
df:61:dc:e8:47:e7:41:7d:61:36:20:46:46:ef:3b:
5c:a5:8e:29:58:9d:04:a9:37:26:e8:ab:bf:5d:d5:
6e:8b:df:51:12:57:a7:05:ed:07:fa:c3:ec:b9:9b:
f0:4a:b5:c3:c1:bc:54:18:0b:cd:7c:dc:1e:93:cb:
ef:b1:e2:75:ad:1c:8d:bb:d1:32:ac:1d:20:86:14:
e2:ff:ca:d8:9b:20:46:28:a8:e3:a5:df:a4:f8:f8:
30:59:ec:9d:d8:2a:e2:d2:ad:43:9f:c8:50:aa:6b:
b3:1b:be:3b:4d:76:a5:ae:5b:86:6a:6d:da:7a:b3:
91:58:01:16:77:f8:e6:6c:15:51:c6:6c:2b:a3:72:
a8:c2:61:46:a3:1c:c5:b3:23:f1:d7:31:b2:25:3f:
3a:e5:e0:76:60:a3:a2:cb:e1:32:7a:0f:9b:9b:76:
0a:1a:c1:14:d8:79:2c:49:30:09:a6:98:e2:ac:d7:
fe:29:1c:c8:30:26:43:89:c3:9b:7f:58:d5:fb:85:
58:d2:21:cd:c0:36:35:ed:93:71:be:e4:d4:98:cb:
6d:03:a2:e0:4d:0f:cf:5c:fa:e7:68:8b:90:3c:2e:
95:fb:a8:16:32:c2:d2:6c:f4:07:d6:75:2e:90:1e:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C6:2F:5C:1E:67:EA:79:AB:93:50:12:95:67:A5:D6:B2:3C:07:46
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/NMYvXB5n6nmrk1ASlWel1rI8B0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.176.0/22
Signature Algorithm: sha256WithRSAEncryption
60:9e:12:c0:31:cb:c6:c2:89:7b:e9:92:1c:63:1a:43:ae:a7:
0b:be:95:ea:0e:80:82:d7:40:10:e1:97:8f:f4:ef:bd:23:e9:
62:01:96:1b:20:2c:78:fa:95:e9:52:6c:fa:1d:5d:1a:5e:2a:
cc:9e:bd:fe:58:fd:89:7c:35:1c:e4:8e:1e:c0:f2:44:0e:dd:
39:35:7c:66:33:30:25:56:f3:de:6e:84:6e:26:d7:fa:2c:98:
28:05:29:36:91:b2:e9:b6:dd:8c:54:6a:59:b9:d7:39:d4:66:
a7:3d:17:16:f9:fa:dd:23:69:32:47:be:0f:26:4b:1c:91:17:
62:f8:f2:ee:35:0a:cd:57:6f:65:30:82:29:7a:3c:58:00:81:
a8:fd:69:b5:0f:0f:ae:c6:0a:55:5d:26:d4:94:3f:06:93:a6:
b7:ea:71:e0:00:8d:1b:58:20:4a:09:02:bc:f3:40:87:55:60:
9c:4b:94:94:52:dd:90:83:ae:9e:b9:a8:eb:18:58:d1:04:3e:
aa:2d:4a:fb:4d:b6:c2:ef:63:5c:01:f0:62:6a:ce:cc:4f:e3:
3c:e2:b4:a3:06:b4:d9:a1:a1:cd:1e:eb:3a:74:40:a9:54:7d:
68:81:ad:c7:21:f7:3c:23:f9:b7:68:cf:72:5e:f0:00:e7:11:
3f:cb:b4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:21 2024 by rpki-client on console-ams.rpki-client.org