Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/NfNDjtbsvRTQIFk0XV3xz46Xxa4.roa
File: NfNDjtbsvRTQIFk0XV3xz46Xxa4.roa (raw, json)
Hash identifier: UU+TI4Z3fAGVqbgPEmZ+TvnTlgWkI/kNQKyhKR4XZMQ=
Subject key identifier: 35:F3:43:8E:D6:EC:BD:14:D0:20:59:34:5D:5D:F1:CF:8E:97:C5:AE
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 01856ECB62874477D5AAC21E55CEDBB2AA47
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/NfNDjtbsvRTQIFk0XV3xz46Xxa4.roa
Signing time: Sun 01 Jan 2023 19:25:00 +0000
ROA not before: Sun 01 Jan 2023 19:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202098
IP address blocks: 158.47.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:62:87:44:77:d5:aa:c2:1e:55:ce:db:b2:aa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Jan 1 19:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35f3438ed6ecbd14d02059345d5df1cf8e97c5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:74:7e:c3:31:8e:1e:06:b2:b2:ec:ca:34:
d6:25:8e:a3:92:9a:37:5a:06:9a:e8:f6:ba:1b:e2:
3f:bd:c2:1b:32:48:10:e6:48:95:76:96:5c:9b:7b:
85:19:64:84:88:42:54:7f:62:4e:e2:7a:38:30:43:
1e:05:c5:cf:63:49:3b:5b:0c:3b:fb:84:25:fa:46:
cc:3a:33:e2:db:00:a5:d7:0d:a2:05:ee:b7:b8:55:
7c:c6:f7:0d:06:b4:45:94:66:ce:aa:78:c3:83:a0:
28:34:26:5f:97:eb:0b:e5:3a:c9:6b:44:b8:ba:f4:
80:61:dd:c1:a2:8e:29:45:57:14:22:f0:a8:82:4c:
d8:13:3d:5f:28:e1:7c:dd:f0:45:14:e9:b6:60:f6:
fb:5d:02:0d:5f:37:02:30:e6:78:b1:59:36:c0:7b:
ec:2e:dc:4b:7e:a6:ec:a9:cf:88:49:fd:14:1a:e6:
66:6a:4b:9c:21:5b:ce:1d:07:4a:c0:54:dc:45:6e:
ad:f5:af:f9:20:6a:77:bc:af:46:fd:9f:cc:a7:c4:
e5:5f:fb:bf:33:62:af:2e:e6:29:52:e6:2e:4c:16:
2e:0a:3f:8a:dc:41:9b:09:dc:73:c0:8f:bd:1e:ef:
56:7c:a7:1a:5b:9b:d9:11:ad:fc:bf:1a:2b:22:39:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F3:43:8E:D6:EC:BD:14:D0:20:59:34:5D:5D:F1:CF:8E:97:C5:AE
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/NfNDjtbsvRTQIFk0XV3xz46Xxa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.47.224.0/19
Signature Algorithm: sha256WithRSAEncryption
66:44:7d:b7:a2:6a:29:ff:67:22:9b:55:fa:61:9b:eb:8b:32:
97:27:77:cf:5b:5e:47:a1:09:3e:67:40:99:28:cd:d2:27:c1:
89:91:53:58:64:5f:ca:fc:3b:1b:3c:5b:6e:61:37:64:57:dd:
79:0c:2e:85:60:8c:58:37:48:b7:9d:04:1a:29:c0:cc:1b:1b:
bf:6a:2b:3d:40:05:3b:84:5e:67:2d:71:a8:bd:2a:c0:03:87:
a4:79:f8:fc:0a:c1:4b:15:92:e9:ca:35:6b:d6:55:41:c0:bb:
65:ce:f1:bf:8b:69:79:58:a8:4f:65:a1:60:ba:9c:6e:08:33:
53:b8:9d:7e:43:85:82:9f:b2:d2:c5:ea:75:32:e1:29:ca:93:
5a:d2:29:e8:31:0c:7b:e0:18:db:e7:8d:95:a0:a1:76:7d:bd:
03:b8:15:15:45:07:0c:ba:52:e1:67:f1:99:5e:9a:9b:e4:72:
d3:8a:30:05:d2:db:d4:80:d0:3a:df:d4:c9:82:5e:07:50:9d:
3f:50:26:dd:60:79:47:3a:5f:89:ed:a7:c0:c4:61:6d:9f:e0:
53:1a:4c:6e:93:0d:a0:e3:a2:1e:f6:91:f6:7c:b3:1a:22:ad:
9d:f6:c2:39:90:5f:b4:52:69:c9:ca:0b:b3:83:2d:f7:ea:4a:
e2:06:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:29 2024 by rpki-client on console-fra.rpki-client.org