Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/NymJd9U0olrwc_KL5Ju7YkbSkx8.roa
File: NymJd9U0olrwc_KL5Ju7YkbSkx8.roa (raw, json)
Hash identifier: T+nTKM721AkcamJ6Ez30qIqgCEU4TAI5IVnucLDGil4=
Subject key identifier: 37:29:89:77:D5:34:A2:5A:F0:73:F2:8B:E4:9B:BB:62:46:D2:93:1F
Certificate issuer: /CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Certificate serial: 01856FE71670D7942DF2AE660FA30655C403
Authority key identifier: 8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/NymJd9U0olrwc_KL5Ju7YkbSkx8.roa
Signing time: Mon 02 Jan 2023 00:34:53 +0000
ROA not before: Mon 02 Jan 2023 00:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58083
IP address blocks: 91.238.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:e7:16:70:d7:94:2d:f2:ae:66:0f:a3:06:55:c4:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2c73fa170c3ab9ec434d1f29d3dbde7920bf88
Validity
Not Before: Jan 2 00:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37298977d534a25af073f28be49bbb6246d2931f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:78:2c:14:92:86:bc:d4:df:d5:01:c2:bc:df:
4d:b3:a7:82:bf:0d:fb:08:31:78:f3:e2:62:03:b9:
a1:bd:96:b3:f1:48:44:66:23:bf:f9:ab:94:15:97:
53:51:fb:87:f7:76:6d:15:bd:98:3d:d2:29:64:2f:
3f:7d:10:61:fb:49:50:f0:a7:8f:c7:34:2d:f2:12:
7a:f9:49:da:fa:58:bd:84:aa:bb:7c:91:dd:33:a6:
00:30:df:5a:27:14:ff:4a:0c:e9:ac:47:f4:5c:74:
26:8d:3a:38:57:e6:47:e6:2b:4d:d2:91:26:3f:c2:
03:c0:be:08:1f:17:30:91:3a:32:ab:b6:5c:0d:c7:
d6:1b:14:b5:1c:4a:18:85:b4:cf:3b:e9:91:d1:08:
fb:f2:cb:df:0d:99:dd:6b:93:a3:fd:08:af:e2:87:
2f:03:96:df:15:26:c2:f8:41:ea:82:ec:95:c0:23:
56:01:b3:21:05:b3:8d:38:66:98:86:52:63:d4:52:
77:a5:c0:7a:63:b1:b3:82:34:99:e1:dc:8b:1f:9c:
50:83:9d:0e:5f:bb:b9:ed:99:72:75:ce:f6:29:c4:
79:f2:a3:cd:af:93:f2:56:17:5e:d5:c8:ca:c8:fb:
ed:d7:da:4f:c2:c8:69:50:38:9f:ff:4b:60:c4:c5:
c9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:29:89:77:D5:34:A2:5A:F0:73:F2:8B:E4:9B:BB:62:46:D2:93:1F
X509v3 Authority Key Identifier:
keyid:8E:2C:73:FA:17:0C:3A:B9:EC:43:4D:1F:29:D3:DB:DE:79:20:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jixz-hcMOrnsQ00fKdPb3nkgv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/NymJd9U0olrwc_KL5Ju7YkbSkx8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f0c317-e39d-4bc1-bf8c-fee12bfd3bd1/1/jixz-hcMOrnsQ00fKdPb3nkgv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.141.0/24
Signature Algorithm: sha256WithRSAEncryption
33:8d:ed:49:4c:6f:23:a8:b9:b2:0d:38:20:da:97:38:5c:75:
56:86:85:7c:59:3b:b6:51:22:ae:a8:89:25:39:e3:80:4e:ec:
30:79:c5:3a:fd:3e:4f:65:56:40:a1:fb:f4:f0:01:59:75:63:
4b:04:02:2b:12:b9:80:ba:10:1f:9a:1a:01:86:01:d0:68:6d:
59:32:00:68:86:9b:96:28:0d:d2:d8:2f:8d:29:8a:77:d7:50:
44:6a:65:92:5b:bc:00:e6:1b:f8:fe:92:77:98:8c:78:9e:e0:
71:9f:09:44:79:77:39:52:ff:03:2a:38:d2:5c:62:71:c4:c4:
78:07:2d:1b:60:a7:6e:47:bb:df:f6:fd:b9:21:4d:be:ea:42:
a4:4f:74:84:8d:c3:32:10:a0:12:34:68:fb:dc:ba:23:5d:af:
d3:27:03:a5:4e:59:71:cb:e6:ef:56:80:71:b5:58:53:73:2b:
af:8c:e9:ac:fc:53:ec:e3:62:63:1b:6a:c4:14:28:e4:92:42:
88:7b:3a:10:13:34:f9:37:d6:6b:3d:2a:fd:24:53:77:af:92:
86:18:05:97:51:97:95:53:26:0a:66:14:08:8e:19:f3:78:57:
f3:11:1c:03:0c:fc:17:51:af:9e:e9:f9:3e:f3:10:4f:83:0b:
e9:57:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org