Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/nzWIGFa3jgPTVOYfbSj5E7SQGE4.roa
File: nzWIGFa3jgPTVOYfbSj5E7SQGE4.roa (raw, json)
Hash identifier: MvE0GphEC7B2gGFH5zUJuYvBcb8CrL8rPfiak7TXXhE=
Subject key identifier: 9F:35:88:18:56:B7:8E:03:D3:54:E6:1F:6D:28:F9:13:B4:90:18:4E
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 01865EE73A6AD1B6AD68D315F053A4BCAB31
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/nzWIGFa3jgPTVOYfbSj5E7SQGE4.roa
Signing time: Fri 17 Feb 2023 10:24:17 +0000
ROA not before: Fri 17 Feb 2023 10:24:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211597
IP address blocks: 188.74.96.0/19 maxlen: 24
2a10:bcc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:e7:3a:6a:d1:b6:ad:68:d3:15:f0:53:a4:bc:ab:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Feb 17 10:24:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f35881856b78e03d354e61f6d28f913b490184e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:04:98:80:1c:96:65:33:f0:c9:b2:c9:f8:b4:
83:89:ff:e9:db:f4:08:0b:1f:4c:b8:fb:a8:cf:94:
86:12:fc:2c:02:8d:b2:63:03:34:6c:eb:5a:76:61:
f6:34:99:41:ff:6f:e3:fd:60:5b:56:04:92:c1:5f:
83:c1:9c:f6:f9:1d:16:1d:d2:a8:ad:01:2f:24:18:
44:3d:c9:7d:0e:71:96:79:de:d0:1b:81:54:42:ba:
6c:22:d0:6f:2e:9b:38:d6:c7:76:26:1d:a9:80:04:
b4:bb:06:45:10:bc:f9:ba:f0:6d:a3:c8:8d:93:a4:
37:e2:68:7c:21:d4:c5:2a:f9:37:fb:fe:1a:af:c0:
12:49:f2:ad:ac:bb:5c:49:03:69:ac:03:09:5d:76:
cf:3c:89:9f:d6:a8:fa:9c:44:6f:da:6f:0b:79:69:
66:7c:33:dc:e0:39:55:9f:73:49:4f:e0:ae:c4:dc:
84:83:7b:1d:4b:ee:fa:4b:3b:8b:22:54:54:43:68:
d1:7e:84:04:f6:37:b4:7f:41:33:2a:74:86:19:3f:
88:c4:9f:1d:f0:56:dc:56:c9:66:99:03:65:04:39:
db:b5:c7:f7:43:0a:22:62:f3:33:9c:3a:d9:8e:7b:
4d:33:ca:52:af:95:27:01:3e:bd:67:68:29:06:14:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:35:88:18:56:B7:8E:03:D3:54:E6:1F:6D:28:F9:13:B4:90:18:4E
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/nzWIGFa3jgPTVOYfbSj5E7SQGE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.96.0/19
IPv6:
2a10:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
80:f7:5f:44:5e:c9:fa:47:ea:6c:35:c7:05:de:44:8e:26:c5:
99:11:67:14:be:a3:ed:9b:6e:d1:4f:03:9e:ab:2a:4e:c6:58:
b2:3b:2f:aa:6f:4c:ca:bc:8a:17:7d:c5:f8:0f:ab:89:11:53:
d8:a6:aa:28:b0:77:04:09:73:be:65:cb:99:08:3e:dd:42:75:
1b:6f:f4:9f:be:c0:6f:9d:e4:3a:ef:59:65:89:63:77:f6:72:
89:16:5d:b3:28:9b:ff:bd:cb:05:99:9a:e4:bd:af:ee:df:a8:
c7:c8:0b:8e:c2:17:10:dc:b6:ae:32:39:50:bb:be:39:6a:e1:
60:fb:02:69:49:04:52:d5:da:63:54:77:d3:05:6b:0c:35:cc:
b0:19:52:59:fe:b9:3a:6f:d0:75:11:a1:57:32:a5:46:22:13:
15:a2:c1:f5:f9:eb:8b:a0:50:1c:b1:35:0c:91:fc:4c:e3:a2:
d6:b2:36:ea:28:ba:cf:07:a3:f7:80:78:f8:52:6f:a1:79:85:
f9:f7:49:43:4f:b1:35:2f:42:65:8f:bb:da:4b:e4:0b:8d:1f:
ef:c5:09:23:e6:52:1d:aa:15:32:36:87:55:5a:4d:75:09:3b:
2c:19:8a:f0:04:1f:ea:88:78:99:da:96:58:a9:27:2c:43:9e:
43:d9:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:53 2024 by rpki-client on console-fra.rpki-client.org