Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/nuv-MoQxZdcgteZvE0rZOqU0Rfs.roa
File: nuv-MoQxZdcgteZvE0rZOqU0Rfs.roa (raw, json)
Hash identifier: Ye6s+cEJKehbzerrjDHjR8NSelcrNmmJczaGFHpdotw=
Subject key identifier: 9E:EB:FE:32:84:31:65:D7:20:B5:E6:6F:13:4A:D9:3A:A5:34:45:FB
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 018571FA1EDA30A95B3F5DFBD1D23E4A4708
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/nuv-MoQxZdcgteZvE0rZOqU0Rfs.roa
Signing time: Mon 02 Jan 2023 10:14:55 +0000
ROA not before: Mon 02 Jan 2023 10:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208046
IP address blocks: 185.196.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:1e:da:30:a9:5b:3f:5d:fb:d1:d2:3e:4a:47:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 10:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eebfe32843165d720b5e66f134ad93aa53445fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c1:5f:98:60:3a:dd:b8:7b:d6:d9:a0:de:f2:
c7:91:9e:eb:88:16:2b:b7:bf:02:d2:a1:ee:df:7d:
5c:4c:1f:1e:2a:b3:9a:f7:25:7b:3a:73:d4:f5:c0:
f2:56:26:39:76:65:25:31:ea:7c:7f:74:ed:77:d0:
8c:74:ed:77:b4:57:a3:c5:53:dd:b4:1a:e0:b9:3f:
f4:ba:af:09:f4:8c:44:ba:e1:d3:1d:8a:1a:d8:a4:
d6:5c:c5:eb:28:56:0b:91:a8:aa:5a:04:17:7a:a0:
85:a0:21:81:83:11:65:80:6d:c2:81:01:65:d1:b7:
3b:3a:b9:1c:53:36:95:9c:dc:00:c0:ab:5b:1e:50:
7e:74:04:3b:af:37:8a:1f:b7:8c:55:a1:1d:fd:46:
2a:9e:ca:58:b6:ac:1e:a0:ea:98:a9:e6:66:6b:15:
09:29:91:7e:24:9e:ee:c1:66:c9:50:aa:5d:f7:64:
ea:4d:f5:97:6a:77:c9:1b:fd:15:90:82:9b:c8:91:
30:bf:f8:5d:d0:fc:37:a7:7f:60:fc:b4:1a:23:95:
62:19:8c:53:48:35:c3:5e:7a:ec:26:f1:2f:d2:a2:
26:49:e8:ed:63:ee:6d:66:ab:22:9e:d5:89:02:84:
3f:29:6f:68:01:94:4c:7c:fb:e8:ea:b4:59:48:95:
93:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EB:FE:32:84:31:65:D7:20:B5:E6:6F:13:4A:D9:3A:A5:34:45:FB
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/nuv-MoQxZdcgteZvE0rZOqU0Rfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.220.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:35:e5:dd:f7:72:66:b7:18:b5:10:67:e2:76:cc:20:ec:28:
b9:b5:5c:dc:41:60:a8:eb:8b:df:06:66:70:b7:53:09:bc:2e:
20:7f:b2:c3:86:8b:32:c3:60:d2:cb:9e:0a:74:2a:20:ae:b8:
8f:ea:68:64:b7:41:2b:d3:bb:4a:26:d1:67:4f:6d:10:7b:e2:
6a:63:64:5d:13:33:10:65:d5:43:a3:bd:9d:30:78:0f:73:f9:
ee:b9:fc:20:27:07:3c:70:fd:04:dd:b2:04:3d:01:37:24:f5:
20:e1:59:4d:58:5a:5e:67:00:a1:69:47:65:4a:2c:a9:1b:40:
6c:d4:11:a7:1c:84:c9:ed:fe:82:d8:9b:d4:27:2c:67:50:60:
54:47:24:29:d1:13:1d:7f:76:ab:48:a7:b3:9d:36:c3:26:c0:
9d:89:9d:a4:b7:1e:1f:a8:a3:ba:b3:00:40:37:7c:5a:a7:bc:
e5:91:4e:ca:b7:35:a1:67:56:c0:c7:08:96:07:77:97:ed:8f:
4f:62:be:0e:04:2e:15:89:54:cb:3c:06:c0:21:06:71:ae:ef:
46:5b:b8:9b:fe:2b:72:df:c4:a4:29:35:39:d2:fb:6a:62:ea:
94:30:42:e1:d5:3a:e7:aa:99:bd:1e:7a:69:b9:99:f9:79:02:
16:d9:dd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:39 2024 by rpki-client on console-fra.rpki-client.org