Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/Nv0843W-ywJx93DMlR0alvtMs_w.roa
File: Nv0843W-ywJx93DMlR0alvtMs_w.roa (raw, json)
Hash identifier: xqaEltEB38mL2JoEE0KMKnbYvZY6e9qnbMxkc8QbfIQ=
Subject key identifier: 36:FD:3C:E3:75:BE:CB:02:71:F7:70:CC:95:1D:1A:96:FB:4C:B3:FC
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018B8CE05C71F47BB0B0820C407E78F6528D
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/Nv0843W-ywJx93DMlR0alvtMs_w.roa
Signing time: Wed 01 Nov 2023 21:53:15 +0000
ROA not before: Wed 01 Nov 2023 21:53:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 171.33.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 19 Nov 2023 22:32:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8c:e0:5c:71:f4:7b:b0:b0:82:0c:40:7e:78:f6:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Nov 1 21:53:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36fd3ce375becb0271f770cc951d1a96fb4cb3fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a2:76:39:40:a4:a8:78:42:35:63:c0:36:b1:
c9:b5:df:f0:73:7c:78:c7:0a:33:e9:7d:b0:06:eb:
4d:fd:3b:b4:8b:b0:3a:3f:d5:47:9e:33:e8:92:9a:
db:56:10:32:28:a8:c7:20:62:37:9f:a5:f8:74:ab:
45:0e:f8:c2:c3:21:43:01:67:b9:81:d7:53:ae:95:
0b:58:d8:8e:25:fd:4f:4d:5d:80:2e:a5:23:41:6a:
04:73:52:8f:50:ac:b9:7d:a9:f5:95:44:3f:c1:79:
dc:90:d9:01:6a:a9:be:2e:18:b2:0d:26:8f:98:d4:
c9:61:e9:d8:c6:0b:01:22:89:a5:ef:ce:9c:1f:24:
da:bf:0f:0f:88:70:b3:ea:9c:1b:01:41:0f:78:11:
c0:3c:a1:30:d3:f9:84:06:e4:af:a1:27:7b:c0:c3:
e9:98:cd:7e:52:e4:5b:85:32:0d:29:b3:aa:be:94:
cf:e8:df:28:d4:18:c6:f5:45:a1:15:fb:7d:07:5c:
f1:c9:b6:26:fe:a3:ef:5c:a3:18:6c:31:c6:2f:35:
05:a7:fe:ac:b4:28:48:39:b9:c8:8e:1b:bb:00:be:
b9:b5:8d:62:fb:9d:0e:10:44:e3:da:7d:cb:2f:00:
18:f2:d7:f2:df:76:67:82:86:11:3c:8c:b5:61:28:
0f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:FD:3C:E3:75:BE:CB:02:71:F7:70:CC:95:1D:1A:96:FB:4C:B3:FC
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/Nv0843W-ywJx93DMlR0alvtMs_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f7:37:a3:b2:31:40:84:8a:3d:79:ce:20:f8:04:40:e3:3f:
8a:2c:9f:90:ed:2f:ea:92:48:d6:20:79:22:10:52:f4:80:4d:
8c:0f:e5:9c:33:12:ba:9c:6b:c9:6f:68:50:79:ba:3b:d7:ad:
96:7d:85:7a:ef:63:99:e7:cc:91:8a:a9:f9:ed:25:4c:e1:52:
7c:a2:38:f5:f5:dc:3e:06:8f:02:33:15:c8:60:84:ee:6c:76:
46:87:cc:f7:83:00:d7:84:b0:c4:ec:9c:21:93:8b:05:c8:2a:
1a:91:dc:26:e4:ed:c1:de:2e:ca:62:18:00:fc:4d:2c:26:2b:
a9:fc:6a:b1:ab:06:15:5f:0d:9a:3d:b4:5d:ef:87:d5:a9:6c:
3d:2d:0f:f7:e7:49:06:08:84:89:db:c0:78:0e:b4:f6:1d:04:
e4:74:8d:fc:d8:69:34:e5:b0:b9:88:1e:81:1f:a4:2f:6e:6c:
39:c1:bc:c7:20:11:04:8e:e9:9e:1e:a9:aa:42:d8:5f:4f:9c:
e1:f6:3d:b5:92:73:3a:40:cf:cd:07:f6:5a:63:1e:49:33:3a:
78:52:42:d0:19:51:5c:65:0c:b7:ae:a2:cc:68:c1:28:34:b0:
5a:26:f2:74:66:67:70:c1:73:a3:25:d5:b5:97:e7:b6:e0:4a:
33:28:17:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:30 2024 by rpki-client on console-fra.rpki-client.org