Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/nx0SL8Two7RMZnMsnn7Lk6x7cJw.roa
File: nx0SL8Two7RMZnMsnn7Lk6x7cJw.roa (raw, json)
Hash identifier: cJ6otER/W+qBOafskLoaILVdX8X+/igvpjJ8jrPnCPI=
Subject key identifier: 9F:1D:12:2F:C4:F0:A3:B4:4C:66:73:2C:9E:7E:CB:93:AC:7B:70:9C
Certificate issuer: /CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Certificate serial: 01856C6EF6BF95C979DAFDC01DE7DB8FA168
Authority key identifier: 24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/nx0SL8Two7RMZnMsnn7Lk6x7cJw.roa
Signing time: Sun 01 Jan 2023 08:24:49 +0000
ROA not before: Sun 01 Jan 2023 08:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15854
IP address blocks: 195.203.152.0/23 maxlen: 23
149.250.0.0/16 maxlen: 16
192.109.236.0/24 maxlen: 24
217.27.2.0/23 maxlen: 23
217.27.0.0/23 maxlen: 23
195.203.0.0/17 maxlen: 17
195.203.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6e:f6:bf:95:c9:79:da:fd:c0:1d:e7:db:8f:a1:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24cc6b9c37faa0da3b412007c0b10b2c5bf2cf4e
Validity
Not Before: Jan 1 08:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f1d122fc4f0a3b44c66732c9e7ecb93ac7b709c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:fc:58:39:6c:66:02:c3:35:01:87:63:ee:
60:9d:15:42:38:00:87:96:87:b5:30:d0:3a:1b:9e:
eb:b5:cf:32:bd:a7:4b:2e:72:2e:63:52:ba:4a:e8:
cb:5e:be:8e:b4:df:bc:2a:f3:fd:c7:bd:ef:07:b3:
f5:6c:6f:7f:ef:d4:88:8a:c2:5a:6f:7d:bc:45:ad:
0a:ed:24:8c:1c:29:69:bc:79:5e:ad:c4:fb:92:a5:
bf:72:4a:af:c6:26:b8:28:a7:87:a7:f9:a1:35:8d:
cf:8c:a3:bf:ac:8e:0d:8e:c1:bc:3b:a4:37:3d:9f:
d9:0b:92:f7:d6:68:3a:f8:f5:ec:65:33:d5:01:13:
a6:83:1e:a0:2f:88:35:87:d9:96:23:c9:64:92:64:
61:26:34:37:19:9a:15:ea:e9:bf:35:fd:81:42:92:
47:10:ff:0c:ef:37:fd:81:8e:50:f1:9d:89:82:43:
6d:c2:28:62:6d:23:c7:75:a2:f4:38:bc:8d:f0:e3:
b2:b2:ef:0c:b0:d3:f1:b5:2e:6f:ae:9d:12:f4:cb:
0a:b7:82:8f:34:11:c3:97:eb:e5:6e:f8:cb:b4:fd:
f4:23:9d:92:40:db:38:e4:7c:65:4e:4a:77:13:92:
52:74:1a:f2:b8:6d:16:7e:2a:65:1e:02:ab:f7:af:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1D:12:2F:C4:F0:A3:B4:4C:66:73:2C:9E:7E:CB:93:AC:7B:70:9C
X509v3 Authority Key Identifier:
keyid:24:CC:6B:9C:37:FA:A0:DA:3B:41:20:07:C0:B1:0B:2C:5B:F2:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JMxrnDf6oNo7QSAHwLELLFvyz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/nx0SL8Two7RMZnMsnn7Lk6x7cJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0ff449-ad98-482d-ac75-864238bc049b/1/JMxrnDf6oNo7QSAHwLELLFvyz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.250.0.0/16
192.109.236.0/24
195.203.0.0/16
217.27.0.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:35:6a:8c:e0:b8:30:6a:cd:d4:16:63:62:7d:eb:2e:fc:2c:
53:d5:55:86:27:79:e4:21:c1:1d:2c:35:c1:b0:88:80:93:fa:
2d:f8:ee:12:1d:f1:03:bd:c0:9e:f8:a0:f3:2b:67:8e:dd:08:
aa:e4:a2:f8:9f:e4:4f:b0:08:34:24:6f:b3:67:69:a5:ec:7e:
61:59:66:e5:25:49:88:d2:82:7c:17:e4:02:1f:fe:6b:80:a9:
08:8f:8a:72:fe:5e:a0:28:0b:30:b4:f8:b0:54:45:8e:d4:42:
17:0d:b0:66:37:e7:8c:08:d8:ec:93:f0:ec:e2:6c:ee:e3:ea:
fc:ff:10:c7:28:55:2d:37:12:27:96:81:5f:da:38:7a:c8:12:
62:ab:a6:63:4b:cb:12:13:67:c3:8c:8b:2b:a4:f8:f3:f6:75:
e8:e3:74:49:4c:e5:ea:0c:71:ad:d3:78:68:da:6c:60:07:21:
29:d8:d1:82:8d:d8:7a:25:f0:4d:02:9e:b8:ad:81:b7:20:b0:
0a:b3:df:a2:a0:f9:a3:7b:ac:f2:07:24:c4:c1:b1:8e:c6:73:
79:7a:7d:af:84:6a:af:99:54:a7:2a:12:4a:88:ec:9d:d2:32:
4c:c8:10:d6:59:5e:56:e5:9a:a5:d7:e1:43:ce:74:62:71:4b:
ad:e6:24:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:18 2024 by rpki-client on console-ams.rpki-client.org