Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/NVIMN2MjjxohHSxuzBBrdnwuxI8.roa
File: NVIMN2MjjxohHSxuzBBrdnwuxI8.roa (raw, json)
Hash identifier: kaFfgxCIYyDEwbLWrfOJf3rlHbKDDbvglxDEvFEL3jk=
Subject key identifier: 35:52:0C:37:63:23:8F:1A:21:1D:2C:6E:CC:10:6B:76:7C:2E:C4:8F
Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial: 018EC2C45CCEFF5896D262D729ECA4C7D2CD
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/NVIMN2MjjxohHSxuzBBrdnwuxI8.roa
Signing time: Tue 09 Apr 2024 12:10:32 +0000
ROA not before: Tue 09 Apr 2024 12:10:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35571
IP address blocks: 87.236.80.0/24 maxlen: 24
87.236.81.0/24 maxlen: 24
87.236.82.0/24 maxlen: 24
87.236.83.0/24 maxlen: 24
87.236.84.0/24 maxlen: 24
87.236.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 18:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:c4:5c:ce:ff:58:96:d2:62:d7:29:ec:a4:c7:d2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Validity
Not Before: Apr 9 12:10:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35520c3763238f1a211d2c6ecc106b767c2ec48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:01:84:87:61:2e:41:6b:4b:02:2c:01:53:71:
b0:4e:f3:ee:fa:bf:ce:8e:54:bd:b4:8f:4a:5e:9d:
d0:2d:35:ad:3e:f8:23:e8:f8:88:cf:8a:f5:81:d8:
08:4f:09:c7:76:ef:32:97:04:12:7e:3b:e6:7d:82:
c4:54:95:e9:1b:2f:28:ca:83:39:cd:c3:38:91:fc:
bf:60:32:39:3b:1a:0c:d2:24:d9:a2:1d:68:2f:0e:
82:56:8d:1f:3e:ec:9e:40:0b:b7:eb:30:6a:88:70:
88:3e:91:b6:50:28:20:47:d7:75:64:1e:0b:ef:c0:
07:0c:ee:1c:4a:82:e9:08:9b:4c:4e:af:7b:b6:81:
65:0b:9c:f3:e3:65:f9:99:8d:77:e4:52:33:5a:6c:
0e:0a:e8:82:f7:1c:35:10:71:7a:5b:31:ba:1f:d7:
34:1c:2c:80:63:ac:2d:41:f3:07:29:0b:38:05:6d:
fc:6c:e1:4e:14:17:1c:64:a2:95:b4:7c:b1:30:6f:
1e:df:c7:98:4c:a7:7d:9e:eb:44:1e:18:ad:1b:74:
b5:54:de:46:c5:27:24:a5:cd:87:8e:6b:2d:76:60:
47:de:8d:44:15:b2:74:27:9f:9d:b1:bb:67:03:bc:
80:78:19:73:59:16:23:09:67:c6:16:52:31:60:c7:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:52:0C:37:63:23:8F:1A:21:1D:2C:6E:CC:10:6B:76:7C:2E:C4:8F
X509v3 Authority Key Identifier:
keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/NVIMN2MjjxohHSxuzBBrdnwuxI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.80.0-87.236.85.255
Signature Algorithm: sha256WithRSAEncryption
27:9f:71:bd:95:a0:cd:66:48:a6:82:8b:e4:8a:a1:08:87:74:
2a:57:de:09:3c:89:bf:74:1d:32:f1:e3:66:ca:f7:d8:33:3e:
1b:0c:bb:b0:89:71:4e:65:42:f9:1f:92:ab:8a:fc:6d:4a:f1:
9b:05:1b:2a:fa:ab:dc:8d:a0:28:da:7f:a6:97:fe:3c:3c:41:
d4:1d:76:32:a1:f3:d3:d2:1e:17:ab:4f:72:97:e2:1e:0a:96:
de:13:21:52:14:0e:18:d4:47:0b:fb:ef:bf:78:0a:1b:fd:70:
85:cd:01:9f:70:5a:3f:e4:9b:7b:23:bb:05:68:c7:86:6a:96:
79:e5:2a:30:d1:ae:03:89:a8:c5:23:65:68:d0:d2:60:06:5d:
df:38:ee:f1:81:8f:06:58:6e:a7:e8:27:aa:e7:64:b8:c2:01:
78:86:5d:de:ed:c6:58:b8:e6:d6:a1:42:5a:23:71:5c:b0:19:
c7:b2:b9:25:00:b9:84:79:80:aa:08:9c:4f:95:34:81:27:84:
d8:2b:46:84:57:ab:13:ec:b3:12:68:46:81:0c:c0:bc:21:4c:
22:12:15:79:30:3a:e3:6d:ef:be:73:56:b0:b3:a3:d9:69:41:
f8:ac:f1:57:f4:db:0d:54:66:10:96:2c:51:39:cd:58:d4:b0:
f2:e7:78:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:19 2024 by rpki-client on console-ams.rpki-client.org