Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/NN7jts0UH3FjNza_pDvnJOJPPk4.roa
File: NN7jts0UH3FjNza_pDvnJOJPPk4.roa (raw, json)
Hash identifier: d0H5t9JlJHVJVUcWsbzdG5TAHeDxoPdRuS4+L4DJUNo=
Subject key identifier: 34:DE:E3:B6:CD:14:1F:71:63:37:36:BF:A4:3B:E7:24:E2:4F:3E:4E
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 01856D0189C6D13DF2AB10D70BC270A70C7E
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/NN7jts0UH3FjNza_pDvnJOJPPk4.roa
Signing time: Sun 01 Jan 2023 11:04:55 +0000
ROA not before: Sun 01 Jan 2023 11:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39320
IP address blocks: 195.250.58.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:89:c6:d1:3d:f2:ab:10:d7:0b:c2:70:a7:0c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Jan 1 11:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34dee3b6cd141f71633736bfa43be724e24f3e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:2a:12:47:03:13:76:d2:63:8e:7b:99:61:
03:1a:cf:61:ea:f6:56:4c:5c:1a:83:dc:d4:94:a2:
1a:8d:bf:ba:7a:a9:d7:73:59:67:cd:08:3a:c8:66:
3e:8a:ae:d5:a5:46:8b:86:15:83:60:25:cb:d2:25:
cf:d1:34:c9:79:91:9a:e9:5a:ac:72:f2:7f:cb:97:
a8:43:5b:ec:06:b7:78:a2:21:d3:c2:65:47:67:28:
c6:77:8c:d3:99:49:8e:da:ab:f5:ec:9c:2e:2b:25:
02:65:2e:e9:86:f6:8d:a9:67:01:ee:03:f0:5e:22:
95:64:d1:41:5f:ff:95:c0:1e:4d:00:15:40:37:99:
39:70:4e:de:f0:a0:a4:eb:99:2b:01:27:2a:7b:9e:
71:4f:61:6b:bf:c2:86:93:3a:b7:5d:e4:0a:f6:a1:
0d:2a:c8:96:7e:01:f8:36:d8:5f:7f:0a:77:53:65:
36:ab:73:17:d7:cb:17:75:ea:c9:2f:a6:2f:85:0d:
8c:22:a7:2b:c8:58:ac:1e:3b:0f:7e:5d:da:ad:f2:
ea:5f:06:4d:2e:4c:5e:28:a0:eb:e4:e1:cc:9c:f9:
9a:01:e1:d4:6b:d9:7a:6d:de:fb:69:e3:95:e6:ac:
24:62:6f:c3:f8:44:ec:c7:9a:e2:42:db:97:e6:e8:
16:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:DE:E3:B6:CD:14:1F:71:63:37:36:BF:A4:3B:E7:24:E2:4F:3E:4E
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/NN7jts0UH3FjNza_pDvnJOJPPk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.58.0/24
Signature Algorithm: sha256WithRSAEncryption
86:3a:85:f0:39:98:45:3d:f9:28:e6:36:d6:fd:f8:66:7b:b9:
19:49:a9:1e:0b:17:d7:c4:91:cc:f5:c6:5c:cf:c8:62:8f:1f:
29:6e:f5:03:c6:ea:bd:a2:af:8a:52:9c:95:67:d1:80:9d:a7:
4c:77:2f:b1:fa:92:f8:6b:e0:86:fa:2c:9f:76:2e:40:41:b0:
38:c8:b2:5b:76:6c:4d:f8:3f:a3:f2:40:a4:7e:e3:77:34:2b:
71:b5:5d:25:ac:75:44:66:a4:16:35:97:c0:85:0e:05:fa:bc:
34:9c:a8:81:eb:35:b4:62:8c:f0:b8:1a:52:dd:24:7f:11:54:
f2:6d:1a:1f:f4:0f:fa:37:73:ba:57:7d:78:e8:92:72:03:4a:
bc:3a:8f:3d:0e:cf:8e:f8:0c:a4:d6:e5:5b:2f:a3:40:2b:89:
11:2d:24:41:54:1d:c0:76:2a:2b:93:f4:df:b9:4b:8c:10:d4:
88:3a:77:51:6d:96:bb:23:e6:d4:d0:1f:3d:4f:54:e3:6e:07:
b3:7f:c1:66:91:a3:e6:93:48:00:ba:c1:46:95:79:d7:60:9c:
d3:4d:59:15:1a:ee:69:77:ce:98:19:c0:a3:2e:b7:dc:2a:74:
a6:9b:01:b8:5c:26:be:5a:da:c5:7b:fe:19:45:e6:cc:37:f7:
34:0a:27:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:01 2024 by rpki-client on console-ams.rpki-client.org