Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nrCpjRNWE4-52nW_aLMisZhfQLE.roa
File: nrCpjRNWE4-52nW_aLMisZhfQLE.roa (raw, json)
Hash identifier: PEa/Dqi4TirB1KrfhvVlvFCq3CFrBqkTiUOJNHNYRO0=
Subject key identifier: 9E:B0:A9:8D:13:56:13:8F:B9:DA:75:BF:68:B3:22:B1:98:5F:40:B1
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01895A0FCA4CA628CB04C465524E0DCB4D71
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nrCpjRNWE4-52nW_aLMisZhfQLE.roa
Signing time: Sat 15 Jul 2023 14:58:51 +0000
ROA not before: Sat 15 Jul 2023 14:58:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198361
IP address blocks: 45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 07:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:0f:ca:4c:a6:28:cb:04:c4:65:52:4e:0d:cb:4d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 15 14:58:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eb0a98d1356138fb9da75bf68b322b1985f40b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:36:9b:27:16:30:b7:94:bb:98:e6:93:01:b5:
67:3e:1a:e6:00:32:ca:df:95:27:de:3e:dc:df:cd:
b8:c0:6e:24:21:c6:76:ea:c0:e4:5a:2f:69:6a:3f:
da:b0:9a:b4:2d:58:be:0b:cf:e0:db:a5:e8:6f:d9:
cb:5b:71:03:2e:26:8f:5d:35:6c:a7:3a:73:f3:82:
36:50:83:7a:46:da:b6:87:e6:c9:90:ca:17:ee:89:
52:47:82:96:e0:30:9e:19:ac:ad:b5:9e:f3:69:e5:
b6:5a:59:aa:8f:56:e3:18:c6:16:c4:37:7a:eb:73:
2c:58:fb:d2:b3:e5:4e:86:5a:dd:44:aa:55:54:66:
06:89:64:30:65:7a:10:f5:59:72:05:4c:fa:55:72:
4b:a8:4c:03:d4:80:f3:49:fb:5c:00:6c:0e:ae:c7:
b2:9e:eb:93:b9:df:e8:03:d2:3a:20:5b:dc:77:74:
cc:ad:0f:51:0d:f1:3e:62:02:a7:cd:c5:89:bb:ba:
51:e1:26:73:e6:90:e5:76:b6:66:ea:b6:e5:d8:ed:
69:ca:90:04:95:f3:2c:f6:48:8a:c6:0b:d1:52:1b:
2e:a0:19:6d:66:df:90:ce:99:e5:e5:0e:29:89:1a:
1d:75:59:d6:d9:e0:94:02:1c:c7:0a:e9:f3:27:e9:
dc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B0:A9:8D:13:56:13:8F:B9:DA:75:BF:68:B3:22:B1:98:5F:40:B1
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nrCpjRNWE4-52nW_aLMisZhfQLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:83:15:e6:28:50:2f:04:2a:75:4e:43:ac:35:c3:32:d6:b1:
84:55:b1:dd:fa:b9:f2:57:cd:d5:96:f5:cb:d8:2f:1e:71:12:
44:76:43:d1:47:cd:35:c4:a7:5e:0e:cf:59:5c:25:e6:74:fc:
9d:7d:6d:c8:6a:d1:19:ce:82:47:3d:2f:c1:f9:36:19:1a:ee:
db:17:7a:38:45:5e:c1:f7:8a:f4:f6:8c:7b:3b:ea:54:e5:12:
40:f2:64:a5:14:4c:99:c3:87:52:8c:3c:0b:53:cc:a3:63:4a:
68:0d:d5:d9:bc:42:d3:1d:b1:32:39:53:23:f9:81:d6:0e:74:
c4:f4:da:31:ef:61:f3:ac:07:dc:21:b8:c3:33:97:97:26:d7:
74:01:cd:1f:08:b0:5a:70:63:66:ae:b6:6e:10:cd:ff:44:dc:
e6:07:d9:0d:82:91:4e:16:e2:56:2d:89:ed:43:52:a0:c6:61:
1f:ba:7a:83:4b:1b:58:e7:96:61:90:5a:7c:38:4d:c1:75:85:
b4:89:a4:29:22:ff:05:b4:3b:d2:c7:d3:70:da:1c:1e:e8:08:
b0:81:77:e0:a6:fa:a4:6a:dd:7c:0c:f0:fe:dd:8b:8e:c3:e8:
8b:02:46:de:d0:08:8a:e0:50:5a:98:56:15:f7:2f:38:ad:aa:
93:90:ee:c5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlaD8pMpijLBMRlUk4Ny01xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwNzE1MTQ1ODUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWIwYTk4ZDEzNTYxMzhmYjlkYTc1YmY2OGIzMjJiMTk4NWY0MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDabJxYwt5S7mOaTAbVnPhrmADLK
35Un3j7c3824wG4kIcZ26sDkWi9paj/asJq0LVi+C8/g26Xob9nLW3EDLiaPXTVs
pzpz84I2UIN6Rtq2h+bJkMoX7olSR4KW4DCeGayttZ7zaeW2Wlmqj1bjGMYWxDd6
63MsWPvSs+VOhlrdRKpVVGYGiWQwZXoQ9VlyBUz6VXJLqEwD1IDzSftcAGwOrsey
nuuTud/oA9I6IFvcd3TMrQ9RDfE+YgKnzcWJu7pR4SZz5pDldrZm6rbl2O1pypAE
lfMs9kiKxgvRUhsuoBltZt+Qzpnl5Q4piRoddVnW2eCUAhzHCunzJ+ncGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ6wqY0TVhOPudp1v2izIrGYX0CxMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvbnJDcGpSTldFNC01Mm5XX2FMTWlzWmhmUUxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALViKAwQA
TVMmMA0GCSqGSIb3DQEBCwUAA4IBAQA8gxXmKFAvBCp1TkOsNcMy1rGEVbHd+rny
V83VlvXL2C8ecRJEdkPRR801xKdeDs9ZXCXmdPydfW3IatEZzoJHPS/B+TYZGu7b
F3o4RV7B94r09ox7O+pU5RJA8mSlFEyZw4dSjDwLU8yjY0poDdXZvELTHbEyOVMj
+YHWDnTE9Nox72HzrAfcIbjDM5eXJtd0Ac0fCLBacGNmrrZuEM3/RNzmB9kNgpFO
FuJWLYntQ1KgxmEfunqDSxtY55ZhkFp8OE3BdYW0iaQpIv8FtDvSx9Nw2hwe6Aiw
gXfgpvqkat18DPD+3YuOw+iLAkbe0AiK4FBamFYV9y84raqTkO7F
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org