Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/nbFfP_BA_mLJXgLmVnkkAsZKtjc.roa
File: nbFfP_BA_mLJXgLmVnkkAsZKtjc.roa (raw, json)
Hash identifier: AlPOCzItpd5+D6kBXB+YaNsaY7c+kYLppxAGIftIE7c=
Subject key identifier: 9D:B1:5F:3F:F0:40:FE:62:C9:5E:02:E6:56:79:24:02:C6:4A:B6:37
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018C8D48A82664B69D7BF703098F76342D74
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/nbFfP_BA_mLJXgLmVnkkAsZKtjc.roa
Signing time: Thu 21 Dec 2023 16:49:58 +0000
ROA not before: Thu 21 Dec 2023 16:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400909
IP address blocks: 213.145.76.0/23 maxlen: 23
213.145.78.0/23 maxlen: 23
213.145.72.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:48:a8:26:64:b6:9d:7b:f7:03:09:8f:76:34:2d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Dec 21 16:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9db15f3ff040fe62c95e02e656792402c64ab637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e2:7b:3e:3b:3b:3a:9d:a2:a2:5a:fb:f0:35:
c0:5a:c7:a3:ed:6c:b6:44:b9:25:b0:88:48:d4:01:
de:e6:e1:73:a8:89:1c:8b:f5:6f:14:9f:f5:6c:7b:
91:0a:4b:e6:8e:bf:b2:02:c0:69:cf:cf:ed:43:2a:
2a:c0:28:0f:8c:e4:08:86:8e:ba:ae:1d:92:a3:d1:
3d:a4:31:b9:ef:11:9d:b5:2f:aa:3a:b4:ab:26:65:
2c:3d:9f:39:8a:83:11:fd:ef:4d:dd:19:df:1b:9f:
47:55:a8:c5:b9:b0:20:32:e0:18:00:28:9e:35:19:
8b:ae:33:24:3e:d3:57:c3:56:01:d3:99:00:67:93:
5e:97:65:8b:bb:29:d9:fd:c1:71:49:e6:6e:ae:7a:
b2:b6:e1:f2:c3:27:ce:58:9f:30:90:a6:bd:b6:e2:
3f:9a:57:25:b7:ba:5d:7c:9c:5c:dd:50:5f:2b:d5:
a7:25:60:da:48:a4:90:63:8d:2a:dd:00:0d:f1:fa:
ac:10:e7:79:a9:44:c3:56:3d:52:d6:6f:5e:d9:8a:
73:1f:8f:46:1a:53:06:82:f4:a0:57:86:6b:50:2a:
64:7b:2e:69:c6:55:f9:a5:c4:15:fc:11:51:0b:14:
4c:fc:ba:2d:31:9d:b2:6e:89:46:87:03:35:43:c9:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B1:5F:3F:F0:40:FE:62:C9:5E:02:E6:56:79:24:02:C6:4A:B6:37
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/nbFfP_BA_mLJXgLmVnkkAsZKtjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.72.0/23
213.145.76.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:0c:a8:02:03:60:65:fb:13:78:e1:91:1a:53:14:3e:a6:df:
7f:76:ca:34:3a:a6:51:f8:7b:10:49:bf:93:ba:b3:a5:8b:32:
7c:26:92:a0:1f:98:e2:c8:eb:02:ab:91:b8:1a:cc:92:84:7b:
ff:ce:ec:c0:f1:84:87:f6:d3:33:ef:bd:23:15:8f:06:94:b1:
52:2b:01:6c:97:0c:7f:75:3f:4c:65:6b:d0:c7:f3:92:5c:92:
82:72:c9:5d:a9:4d:64:f0:2e:09:ff:62:38:de:d0:8d:05:bc:
bb:1f:14:66:9e:b2:43:43:04:8c:f8:ba:aa:64:05:f6:c4:22:
c6:2c:85:3c:b8:c9:a2:39:02:0b:c7:c1:5d:ea:ad:00:a9:ee:
9b:b7:31:fd:40:90:70:64:6a:0f:e8:c3:2a:1b:24:e0:0b:55:
37:43:16:7c:ee:f1:fa:fb:d0:60:ce:f8:65:88:e6:24:8f:5e:
a3:47:84:23:82:d3:54:47:03:76:cc:b9:6d:eb:ab:f9:2d:fd:
87:b7:32:24:e8:d7:3d:9f:2b:a7:07:6b:46:35:67:c2:e8:0a:
69:cc:35:70:9b:0f:71:1d:14:35:b3:d5:80:d4:9e:68:4e:8d:
85:a5:56:bd:a2:ad:44:a4:6a:65:f4:f1:f0:4b:73:cd:1a:de:
08:1a:58:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org