Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/nfomusWLG0PBpHxo2eWfIbViN74.roa
File: nfomusWLG0PBpHxo2eWfIbViN74.roa (raw, json)
Hash identifier: sjJ1eZfbs8di3i8aPydOdeoHU+NK0XffxepUPDD25wQ=
Subject key identifier: 9D:FA:26:BA:C5:8B:1B:43:C1:A4:7C:68:D9:E5:9F:21:B5:62:37:BE
Certificate issuer: /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial: 018572311C63A4AF9D0AD371AFBEA33B4161
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/nfomusWLG0PBpHxo2eWfIbViN74.roa
Signing time: Mon 02 Jan 2023 11:14:59 +0000
ROA not before: Mon 02 Jan 2023 11:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198903
IP address blocks: 80.243.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:1c:63:a4:af:9d:0a:d3:71:af:be:a3:3b:41:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
Validity
Not Before: Jan 2 11:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dfa26bac58b1b43c1a47c68d9e59f21b56237be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f4:07:c9:56:4b:33:d3:4e:90:55:ef:e4:e9:
dd:1f:52:5a:17:0a:99:15:40:b6:ac:d4:49:0b:88:
15:f9:49:e0:1f:10:98:48:1e:d9:28:3b:26:eb:01:
6c:8e:50:81:f9:e6:87:0d:20:07:27:38:cd:ae:5b:
9f:45:a5:5d:d2:39:93:dd:b0:1b:f4:45:cb:40:0e:
d3:1a:5a:fd:20:b2:b3:51:b3:0e:52:c8:33:fd:26:
4b:2a:2a:02:bd:78:a4:63:43:47:ea:5a:07:54:80:
40:76:0b:4b:ec:f9:ee:4b:af:0a:0b:3c:4c:49:05:
3c:7c:d1:b6:8d:5b:ad:7f:fd:93:fb:94:db:c1:fc:
20:08:8b:fc:d4:15:c0:60:7e:4a:9e:39:9a:33:bb:
ba:03:23:78:98:e6:26:8e:c7:81:ec:39:22:ef:f0:
2e:ed:07:43:29:dd:04:69:cb:ed:48:a6:4d:fa:ab:
7a:7f:97:1d:d3:05:32:79:ae:94:c1:76:94:df:fd:
7f:a5:b4:c2:88:f4:d2:9f:44:0f:5a:ed:9b:0c:93:
5f:88:75:73:86:e5:26:92:2f:00:07:22:ad:13:19:
53:9d:85:71:e6:30:af:63:f1:f1:eb:36:33:36:8e:
ed:3d:70:fd:4b:73:83:60:fb:5f:70:a1:b5:dc:6b:
78:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FA:26:BA:C5:8B:1B:43:C1:A4:7C:68:D9:E5:9F:21:B5:62:37:BE
X509v3 Authority Key Identifier:
keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/nfomusWLG0PBpHxo2eWfIbViN74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:23:d2:13:45:0c:d2:49:e0:cc:60:b7:75:91:4e:68:91:22:
47:b3:fd:6e:41:ce:6f:ac:d2:f4:c9:15:b0:04:d1:6e:dc:8e:
87:f9:5f:a4:4a:e4:7e:eb:51:07:dd:c7:6b:5a:80:9d:1c:78:
7e:f9:f6:c7:0b:55:34:2f:d1:20:1a:6b:8c:24:eb:0f:fe:ee:
d9:5f:55:97:85:d7:fd:50:9c:02:31:ce:91:eb:78:43:61:2a:
88:7d:c4:06:d3:7c:37:0f:7a:31:e2:89:06:b3:37:b3:b6:78:
a9:69:60:05:35:f7:8c:11:7a:a0:38:0c:a2:8a:8e:1a:cf:de:
6d:03:3c:e8:f0:79:1d:4d:81:c8:e5:dc:4b:c4:a9:be:be:10:
69:94:8a:be:01:c1:69:51:93:ad:1e:b4:a2:f4:39:69:6f:0d:
55:15:4f:9d:d1:0a:c7:b6:33:3e:b7:3d:6a:37:09:ca:ba:90:
6d:2a:f4:63:0d:4d:24:dd:77:5d:af:81:87:78:cc:11:7c:c4:
b2:d0:44:a9:c6:8d:3a:7b:ca:3b:a3:74:9f:5f:18:1b:ea:4d:
dd:97:d6:cc:c7:3c:0c:20:a6:70:1a:f9:a4:c5:d6:7a:70:88:
0d:9d:65:ca:a1:05:97:a4:1b:fd:37:8e:0e:3e:7a:a6:77:b9:
51:b7:18:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyMRxjpK+dCtNxr76jO0FhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0Zjg0MzYwMDNkMzc2MDIwMjZiNjU1MzE3NTVjYThmY2Qz
MWJlZDIwHhcNMjMwMTAyMTExNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGZhMjZiYWM1OGIxYjQzYzFhNDdjNjhkOWU1OWYyMWI1NjIzN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPQHyVZLM9NOkFXv5OndH1JaFwqZ
FUC2rNRJC4gV+UngHxCYSB7ZKDsm6wFsjlCB+eaHDSAHJzjNrlufRaVd0jmT3bAb
9EXLQA7TGlr9ILKzUbMOUsgz/SZLKioCvXikY0NH6loHVIBAdgtL7PnuS68KCzxM
SQU8fNG2jVutf/2T+5TbwfwgCIv81BXAYH5KnjmaM7u6AyN4mOYmjseB7Dki7/Au
7QdDKd0EacvtSKZN+qt6f5cd0wUyea6UwXaU3/1/pbTCiPTSn0QPWu2bDJNfiHVz
huUmki8AByKtExlTnYVx5jCvY/Hx6zYzNo7tPXD9S3ODYPtfcKG13Gt4sQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ36JrrFixtDwaR8aNnlnyG1Yje+MB8GA1UdIwQY
MBaAFKT4Q2AD03YCAmtlUxdVyo/NMb7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQt
MjdiZjgzY2RlZDZiLzEvbmZvbXVzV0xHMFBCcEh4bzJlV2ZJYlZpTjc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS81MTU2MDgtNTAxMi00YTQwLWIzMjQtMjdiZjgzY2RlZDZi
LzEvcFBoRFlBUFRkZ0lDYTJWVEYxWEtqODB4dnRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPN5MA0G
CSqGSIb3DQEBCwUAA4IBAQCmI9ITRQzSSeDMYLd1kU5okSJHs/1uQc5vrNL0yRWw
BNFu3I6H+V+kSuR+61EH3cdrWoCdHHh++fbHC1U0L9EgGmuMJOsP/u7ZX1WXhdf9
UJwCMc6R63hDYSqIfcQG03w3D3ox4okGszeztnipaWAFNfeMEXqgOAyiio4az95t
Azzo8HkdTYHI5dxLxKm+vhBplIq+AcFpUZOtHrSi9Dlpbw1VFU+d0QrHtjM+tz1q
NwnKupBtKvRjDU0k3Xddr4GHeMwRfMSy0ESpxo06e8o7o3SfXxgb6k3dl9bMxzwM
IKZwGvmkxdZ6cIgNnWXKoQWXpBv9N44OPnqmd7lRtxjt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:25 2024 by rpki-client on console-ams.rpki-client.org