Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/nOgMhMly-yN1ViQ-vDyPgs8umfE.roa
File: nOgMhMly-yN1ViQ-vDyPgs8umfE.roa (raw, json)
Hash identifier: iS4j5cRvntGgNvCqnk+d/P0KTZMohJ7Qr93s/y2IzHw=
Subject key identifier: 9C:E8:0C:84:C9:72:FB:23:75:56:24:3E:BC:3C:8F:82:CF:2E:99:F1
Certificate issuer: /CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Certificate serial: 01856E0AEA890F0192D9CAA93B177B0C8511
Authority key identifier: 9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/nOgMhMly-yN1ViQ-vDyPgs8umfE.roa
Signing time: Sun 01 Jan 2023 15:54:47 +0000
ROA not before: Sun 01 Jan 2023 15:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8879
IP address blocks: 212.62.64.0/19 maxlen: 24
84.201.64.0/18 maxlen: 24
81.89.224.0/19 maxlen: 24
2a00:1348::/32 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:ea:89:0f:01:92:d9:ca:a9:3b:17:7b:0c:85:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b632edb635aa8f9c40a0495a7a63bb6539580bb
Validity
Not Before: Jan 1 15:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ce80c84c972fb237556243ebc3c8f82cf2e99f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3d:cd:30:e2:7d:52:5f:03:7f:e3:9e:96:14:
a0:09:b7:34:26:a0:fe:cd:25:aa:38:79:58:18:1e:
24:de:e3:82:10:2a:ab:7b:0d:10:4f:26:d4:19:77:
31:15:1e:5c:e2:5d:f0:21:27:92:e0:c0:8b:0c:bb:
3f:bb:d0:43:37:32:65:21:34:e1:d4:8b:72:c2:28:
df:e7:0e:95:e5:c4:49:54:3a:1b:f6:61:58:35:94:
38:99:33:41:da:d8:5e:cb:68:3c:ff:1a:39:d8:9f:
33:dd:35:8f:86:e5:91:af:d7:96:7f:4e:f7:d3:60:
b3:0e:d0:f7:e6:46:4b:57:84:a4:04:0b:ff:51:17:
f3:72:e9:0f:fd:a0:05:52:e9:04:a7:e2:32:ca:11:
2d:bf:48:8d:38:ef:e1:8b:5b:50:d8:98:2a:d6:18:
34:f7:36:90:d8:4d:b7:61:69:04:89:50:04:c4:bb:
49:81:2c:4f:24:b3:97:d0:8a:96:11:48:06:d9:d5:
a9:2f:3d:e7:df:68:76:42:32:c7:62:b3:d6:74:de:
08:2c:58:e0:a0:16:85:90:51:03:db:19:e0:71:03:
0d:2b:6d:36:81:27:67:c0:3a:47:11:81:3a:69:7c:
4a:30:39:3f:ce:05:c8:07:fd:62:c9:fa:c6:00:cc:
67:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E8:0C:84:C9:72:FB:23:75:56:24:3E:BC:3C:8F:82:CF:2E:99:F1
X509v3 Authority Key Identifier:
keyid:9B:63:2E:DB:63:5A:A8:F9:C4:0A:04:95:A7:A6:3B:B6:53:95:80:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2Mu22NaqPnECgSVp6Y7tlOVgLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/nOgMhMly-yN1ViQ-vDyPgs8umfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d02983-b11c-4bf7-b4b5-e8c9ad5f051a/1/m2Mu22NaqPnECgSVp6Y7tlOVgLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.224.0/19
84.201.64.0/18
212.62.64.0/19
IPv6:
2a00:1348::/32
Signature Algorithm: sha256WithRSAEncryption
6a:7e:69:39:b4:33:0b:dc:6e:85:dc:57:00:4c:9c:98:58:f6:
64:38:16:52:9e:3d:f2:59:a2:c3:62:7d:9a:37:cd:d3:dd:71:
54:d1:d6:f2:00:75:af:63:6a:73:0f:f7:ba:92:69:8a:24:0f:
57:c1:f2:37:e6:53:a8:ab:c6:9a:a6:1c:d3:4a:7c:28:43:23:
a7:62:c4:46:f3:b8:05:39:4a:38:af:60:87:3b:ef:08:09:5c:
42:2d:6e:0d:08:2d:28:ba:3d:a1:5a:4b:0a:cd:81:72:aa:8b:
f3:d3:db:6f:3e:60:43:7e:bb:aa:bd:be:85:fa:9a:2b:c1:62:
46:77:ac:a8:b7:78:ac:bf:4d:c2:7e:9d:cd:bf:02:a5:70:47:
c0:73:3c:9e:79:bc:2c:6d:fd:0e:11:2d:35:98:db:fe:34:43:
b7:55:d1:95:16:c4:3d:e1:d6:33:72:ff:06:f6:5d:6c:18:66:
0b:f0:a7:8d:a5:b8:cd:2c:95:35:ec:04:9e:dd:2d:db:09:5a:
a5:61:a1:6a:d8:16:22:f8:7e:56:be:da:2c:bc:8d:84:f2:86:
fc:6b:06:68:d6:9d:bc:25:7a:76:de:ac:31:5b:ea:1f:ee:d8:
83:79:01:88:09:97:63:40:4a:da:f1:94:c9:6a:e9:da:f6:5e:
ed:35:43:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:49 2024 by rpki-client on console-ams.rpki-client.org