Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/NrCAXcJyTH5W9isRb7J4YEYwMaU.roa
File: NrCAXcJyTH5W9isRb7J4YEYwMaU.roa (raw, json)
Hash identifier: e1hHmcjXh06IrHgMAkAV81w5chnjcq5qkAMTcSWpJRg=
Subject key identifier: 36:B0:80:5D:C2:72:4C:7E:56:F6:2B:11:6F:B2:78:60:46:30:31:A5
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 01856CB81831EE5C6468EE659D6098ACC9CA
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/NrCAXcJyTH5W9isRb7J4YEYwMaU.roa
Signing time: Sun 01 Jan 2023 09:44:42 +0000
ROA not before: Sun 01 Jan 2023 09:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 91.194.236.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 03 Feb 2023 14:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:18:31:ee:5c:64:68:ee:65:9d:60:98:ac:c9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jan 1 09:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36b0805dc2724c7e56f62b116fb27860463031a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:ef:e6:54:31:37:75:90:66:3a:5d:93:e8:
c6:6a:d8:9c:6b:be:6d:6b:30:cb:f2:11:0e:1a:e4:
93:b4:53:0f:3a:c6:98:fc:43:0f:5b:d3:b6:d6:25:
f4:19:16:35:30:03:91:d1:9a:4c:a4:a9:33:1e:26:
8e:e9:67:db:c6:d7:68:c8:53:ad:45:e0:3b:f7:e4:
2d:35:62:97:21:b1:90:3b:96:c8:95:4a:11:1b:72:
d4:bc:de:f8:b4:cc:a9:ed:fa:d5:75:d0:46:4b:61:
03:70:7b:0c:3f:a5:af:4b:30:7f:a7:df:49:9b:e8:
2a:8a:39:30:7b:84:63:9c:1e:22:53:80:4b:3f:fa:
fa:95:9b:84:0c:b8:12:d4:0e:60:d9:a1:8d:c6:61:
fa:68:7d:0e:98:83:cb:dd:5a:ff:c9:d0:ec:69:19:
71:d1:e2:82:f9:8c:86:f4:f5:2b:87:2c:8e:3a:35:
74:c7:ab:33:8a:c1:90:09:64:40:df:e5:5f:1f:e4:
01:8a:35:16:f3:83:08:91:fb:77:c7:49:1c:14:46:
b8:7e:e4:bf:cc:29:12:77:71:f6:65:3f:b8:23:21:
20:14:f8:2b:a1:72:d4:47:da:e9:e7:74:f1:90:cb:
cb:e6:ad:00:10:12:37:5e:bc:48:3e:5b:ae:26:08:
48:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B0:80:5D:C2:72:4C:7E:56:F6:2B:11:6F:B2:78:60:46:30:31:A5
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/NrCAXcJyTH5W9isRb7J4YEYwMaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.236.0/23
Signature Algorithm: sha256WithRSAEncryption
92:0a:58:4a:c5:40:e9:8d:37:ca:d7:b2:82:b1:04:94:7d:28:
ce:6a:35:10:fa:d5:bc:15:46:dc:6e:08:5d:94:28:e0:a4:b9:
14:9a:71:ed:b6:ec:a4:6b:6d:9f:f6:ec:06:0b:c0:0d:3c:c3:
80:6a:69:78:be:1a:94:b3:71:73:65:11:a4:f6:42:c8:24:32:
b2:35:8e:07:c9:92:71:5c:04:ad:1a:68:dd:e3:88:00:ad:74:
3a:49:12:09:e3:3e:2a:fa:1c:38:aa:4c:71:2f:08:50:c2:dd:
62:ec:97:a8:36:4e:f1:a4:35:cb:41:04:70:f5:65:6c:d6:c8:
24:b9:a4:1a:c9:38:09:3a:3b:aa:81:30:e7:11:8e:62:b0:b3:
d4:0a:e3:a2:dd:26:ea:20:42:e5:81:99:ab:64:24:69:25:ff:
87:8d:80:09:b4:99:ef:b6:e8:98:7e:9e:65:04:ea:e4:bc:20:
7d:5a:a7:5c:6a:c5:4f:ae:01:3a:0f:6b:e0:76:49:a1:11:ec:
c1:4f:cc:5f:cd:55:29:98:f7:21:09:e4:6f:a8:76:dc:0f:73:
ba:18:a8:44:e5:5a:4a:c0:43:02:cc:34:7a:c5:52:86:28:33:
b8:8f:66:91:a0:6a:df:4d:1b:ec:66:76:27:35:46:b0:9c:f1:
a5:5e:43:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsuBgx7lxkaO5lnWCYrMnKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzAzMTU4YWVkODExNjFkNGY1N2MxNzQyZDQ2MDgzNDE3
M2E3OWUwHhcNMjMwMTAxMDk0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmIwODA1ZGMyNzI0YzdlNTZmNjJiMTE2ZmIyNzg2MDQ2MzAzMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptjv5lQxN3WQZjpdk+jGatica75t
azDL8hEOGuSTtFMPOsaY/EMPW9O21iX0GRY1MAOR0ZpMpKkzHiaO6WfbxtdoyFOt
ReA79+QtNWKXIbGQO5bIlUoRG3LUvN74tMyp7frVddBGS2EDcHsMP6WvSzB/p99J
m+gqijkwe4RjnB4iU4BLP/r6lZuEDLgS1A5g2aGNxmH6aH0OmIPL3Vr/ydDsaRlx
0eKC+YyG9PUrhyyOOjV0x6szisGQCWRA3+VfH+QBijUW84MIkft3x0kcFEa4fuS/
zCkSd3H2ZT+4IyEgFPgroXLUR9rp53TxkMvL5q0AEBI3XrxIPluuJghIjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDawgF3Cckx+VvYrEW+yeGBGMDGlMB8GA1UdIwQY
MBaAFKPAMViu2BFh1PV8F0LUYINBc6eeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2Yjgt
NGMxMGUzMzYwNTc3LzEvTnJDQVhjSnlUSDVXOWlzUmI3SjRZRVl3TWFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9iNjY0MjktNGYyMC00YjkwLWE2YjgtNGMxMGUzMzYwNTc3
LzEvbzhBeFdLN1lFV0hVOVh3WFF0UmdnMEZ6cDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8LsMA0G
CSqGSIb3DQEBCwUAA4IBAQCSClhKxUDpjTfK17KCsQSUfSjOajUQ+tW8FUbcbghd
lCjgpLkUmnHttuyka22f9uwGC8ANPMOAaml4vhqUs3FzZRGk9kLIJDKyNY4HyZJx
XAStGmjd44gArXQ6SRIJ4z4q+hw4qkxxLwhQwt1i7JeoNk7xpDXLQQRw9WVs1sgk
uaQayTgJOjuqgTDnEY5isLPUCuOi3SbqIELlgZmrZCRpJf+HjYAJtJnvtuiYfp5l
BOrkvCB9WqdcasVPrgE6D2vgdkmhEezBT8xfzVUpmPchCeRvqHbcD3O6GKhE5VpK
wEMCzDR6xVKGKDO4j2aRoGrfTRvsZnYnNUawnPGlXkMg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:22 2024 by rpki-client on console-ams.rpki-client.org