Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/NUxSn-hc5YgLS8CkGwIn9rqp2Sc.roa
File: NUxSn-hc5YgLS8CkGwIn9rqp2Sc.roa (raw, json)
Hash identifier: 0Iz18VHhTkLpKhCFdbAUxI+7XPQk+sv2xcjfxI8M468=
Subject key identifier: 35:4C:52:9F:E8:5C:E5:88:0B:4B:C0:A4:1B:02:27:F6:BA:A9:D9:27
Certificate issuer: /CN=89b332d57ce14fab1ebd746817dd701062c74a88
Certificate serial: 018572B42DAB3AF4E65CDA892F1E7BD2F3BC
Authority key identifier: 89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/NUxSn-hc5YgLS8CkGwIn9rqp2Sc.roa
Signing time: Mon 02 Jan 2023 13:38:08 +0000
ROA not before: Mon 02 Jan 2023 13:38:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34572
IP address blocks: 83.173.72.0/21 maxlen: 21
83.173.88.0/21 maxlen: 24
83.173.96.0/21 maxlen: 21
83.173.112.0/22 maxlen: 24
185.170.151.0/24 maxlen: 24
83.173.64.0/19 maxlen: 19
83.173.64.0/21 maxlen: 21
2a02:6100::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 11 Dec 2023 08:35:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:2d:ab:3a:f4:e6:5c:da:89:2f:1e:7b:d2:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89b332d57ce14fab1ebd746817dd701062c74a88
Validity
Not Before: Jan 2 13:38:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=354c529fe85ce5880b4bc0a41b0227f6baa9d927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:19:7c:ac:c3:38:f4:a2:4a:f8:17:25:ac:ae:
12:f2:86:99:ee:b7:1d:d4:90:3d:44:7e:40:25:86:
60:bf:b5:f6:08:65:70:44:84:21:08:6e:22:f7:d9:
13:5c:d8:b0:b8:af:27:1b:8d:0a:30:0f:de:1e:b3:
68:05:ff:b4:95:6b:ed:eb:c2:2d:d6:2a:9e:ba:d8:
0f:8f:28:1e:03:a0:15:2b:f0:db:73:54:15:ed:99:
70:a9:e0:b9:78:2d:85:45:ae:57:5b:c9:f1:62:a7:
d4:65:f6:cc:f0:ca:60:c4:47:cc:33:1d:95:6c:74:
53:21:9e:d6:27:84:27:c3:44:7f:2b:29:0b:9c:19:
a5:5d:38:b4:71:db:e3:00:4e:4f:d8:04:89:7c:0f:
5e:25:66:05:77:b5:38:1f:fc:2e:70:4c:82:ce:f8:
58:c6:03:b6:83:ea:81:9d:b4:71:44:d9:ad:f3:d2:
66:0c:1f:cd:05:a5:64:7f:38:fe:09:d7:aa:a8:20:
3c:c3:dd:6f:b3:5f:d5:5d:42:51:14:4e:ee:d2:ff:
4d:f0:e9:52:ee:42:5d:98:04:8d:59:30:1f:35:21:
a8:39:ae:b9:f2:ed:00:84:b4:fc:67:d6:dd:e8:15:
41:9c:01:52:8c:ff:a1:9c:1d:33:cd:d1:5f:07:7a:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4C:52:9F:E8:5C:E5:88:0B:4B:C0:A4:1B:02:27:F6:BA:A9:D9:27
X509v3 Authority Key Identifier:
keyid:89:B3:32:D5:7C:E1:4F:AB:1E:BD:74:68:17:DD:70:10:62:C7:4A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ibMy1XzhT6sevXRoF91wEGLHSog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/NUxSn-hc5YgLS8CkGwIn9rqp2Sc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81719d-467c-4af7-a824-46a0df774fe1/1/ibMy1XzhT6sevXRoF91wEGLHSog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.173.64.0-83.173.103.255
83.173.112.0/22
185.170.151.0/24
IPv6:
2a02:6100::/32
Signature Algorithm: sha256WithRSAEncryption
34:7b:13:2e:69:d3:9b:8f:bb:9e:7e:7b:52:af:45:e4:43:13:
73:ac:f2:64:07:0a:ac:0a:2e:b1:f2:11:b1:3b:69:19:e8:9d:
44:8b:f7:31:e8:8e:99:c5:51:e2:21:0f:c5:aa:e6:f2:84:f7:
27:74:99:70:d6:06:4d:ca:39:4a:b5:14:42:75:40:c7:cc:1d:
98:8c:9f:9d:8e:c1:d8:ce:09:22:88:df:89:05:0f:45:ac:4c:
41:79:73:a7:c0:9a:a2:8b:99:a3:cf:86:53:79:5b:c3:44:15:
12:46:ad:e1:52:44:8d:eb:8b:7b:c6:30:6b:25:41:db:3b:59:
a6:fc:4c:da:81:2d:39:85:4b:ad:25:d8:91:34:69:16:8b:81:
47:7c:1b:8e:53:44:9a:99:5a:41:13:07:9b:cb:bc:a4:cf:a2:
02:fe:61:2d:da:01:e6:47:4b:8f:b8:1a:36:3b:9f:3b:33:2b:
31:ce:97:d1:86:0a:c6:57:ac:44:35:a0:86:ad:7b:f8:75:f8:
80:f0:15:9f:a2:95:b6:3c:a8:fc:5e:30:57:c9:14:76:76:d3:
74:45:02:82:83:f2:ac:ae:c1:c2:22:20:74:ba:f4:3f:86:65:
26:82:09:d7:a5:a8:bc:a3:76:29:71:6a:a3:fd:67:68:93:cf:
88:3c:57:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org