Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NSbBSb-f24myag12yi_xkR4YR4Q.roa
File: NSbBSb-f24myag12yi_xkR4YR4Q.roa (raw, json)
Hash identifier: 0vhPNfzHyuDGEwAJSfKhGnwGXdj3aUuzafPzRWN/W6s=
Subject key identifier: 35:26:C1:49:BF:9F:DB:89:B2:6A:0D:76:CA:2F:F1:91:1E:18:47:84
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CE11664E0E46419720D1DC26B62DC
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NSbBSb-f24myag12yi_xkR4YR4Q.roa
Signing time: Mon 02 Jan 2023 03:35:58 +0000
ROA not before: Mon 02 Jan 2023 03:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42548
IP address blocks: 83.239.112.0/20 maxlen: 20
178.34.224.0/19 maxlen: 19
85.172.176.0/20 maxlen: 20
85.173.160.0/19 maxlen: 19
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:e1:16:64:e0:e4:64:19:72:0d:1d:c2:6b:62:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3526c149bf9fdb89b26a0d76ca2ff1911e184784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:13:54:24:93:59:55:2a:01:ef:d2:1d:c2:d9:
88:2b:15:be:38:e5:15:27:b4:e0:71:41:12:d9:8b:
5b:ec:f9:7d:5d:08:29:c0:8d:6f:dc:45:ba:26:4e:
98:9f:72:c3:fa:75:29:8a:83:75:19:f3:09:86:29:
b9:57:54:83:f3:e0:f6:58:bf:b5:38:0c:d8:76:49:
ca:35:9a:63:ad:6f:11:8e:63:10:27:c8:d6:0a:a4:
86:6e:b3:d7:90:ff:31:50:7d:1e:38:be:7f:8e:d7:
c4:ba:79:b1:3a:c5:e5:37:30:0f:a0:a7:05:69:a2:
6d:3a:47:d0:fc:1e:fc:da:04:6c:be:4e:d0:28:5e:
c6:17:ea:00:c9:f7:81:80:1f:48:66:09:2f:74:c8:
94:53:1a:41:6a:fe:e4:e4:73:a2:6b:5d:43:6c:20:
38:be:eb:47:7e:40:91:76:50:bf:18:16:13:62:6e:
5a:d2:7d:70:1d:22:33:0a:a1:d7:a8:da:e0:04:88:
8e:c4:b4:fc:0c:21:91:5e:66:fc:59:a2:80:96:a4:
38:f3:e1:14:6e:24:67:7f:ac:ac:57:71:52:e1:cb:
d9:d6:5c:99:c8:93:d6:1e:c5:28:27:cf:d6:ff:89:
0f:3e:48:1c:d7:65:63:bc:91:56:82:2c:88:e1:41:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:26:C1:49:BF:9F:DB:89:B2:6A:0D:76:CA:2F:F1:91:1E:18:47:84
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NSbBSb-f24myag12yi_xkR4YR4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.239.112.0/20
85.172.176.0/20
85.173.160.0/19
178.34.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1f:85:d4:cc:8d:f4:da:94:43:04:da:56:6c:aa:2c:6c:9a:b8:
78:e7:cd:53:c4:f5:00:56:bf:6d:21:7b:37:76:6a:98:c2:a9:
1c:fe:a5:a5:02:ab:23:e6:76:d9:43:f0:27:b4:ee:7d:a5:6c:
67:d7:26:19:d1:e6:dd:e0:ee:5d:7f:ac:8d:00:a2:fd:46:66:
0e:45:49:01:04:9a:1e:41:4e:fe:4a:9a:a7:97:3a:69:6b:1a:
69:dc:ec:97:c3:bd:48:d5:36:79:60:1f:c8:3b:82:02:ca:47:
fd:d7:93:b6:6d:e0:9c:78:08:f2:5c:c4:4d:66:6b:30:45:20:
73:f6:b4:28:34:45:f3:6b:cb:21:af:0f:12:e9:47:06:c3:04:
5c:67:ac:a0:1a:98:44:0f:26:89:22:09:b6:74:15:0d:d8:54:
d2:b6:e2:ac:2e:bf:66:c6:e0:fb:0a:80:96:aa:22:68:ac:d7:
ff:e3:8c:6b:b7:8a:72:3b:93:93:c3:00:3a:7d:40:60:74:f2:
21:ac:16:08:4a:d5:f5:66:a1:6a:32:19:f3:09:45:12:2c:d2:
5c:ea:ff:e6:0b:7f:f4:c9:c1:f9:b3:7c:8e:55:2b:23:f9:19:
01:5b:fb:f2:63:82:9d:a7:29:d6:3a:d5:b2:25:0c:53:65:1d:
db:e6:4d:1c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVwjOEWZODkZBlyDR3Ca2LcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjMwMTAyMDMzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTI2YzE0OWJmOWZkYjg5YjI2YTBkNzZjYTJmZjE5MTFlMTg0Nzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRNUJJNZVSoB79IdwtmIKxW+OOUV
J7TgcUES2Ytb7Pl9XQgpwI1v3EW6Jk6Yn3LD+nUpioN1GfMJhim5V1SD8+D2WL+1
OAzYdknKNZpjrW8RjmMQJ8jWCqSGbrPXkP8xUH0eOL5/jtfEunmxOsXlNzAPoKcF
aaJtOkfQ/B782gRsvk7QKF7GF+oAyfeBgB9IZgkvdMiUUxpBav7k5HOia11DbCA4
vutHfkCRdlC/GBYTYm5a0n1wHSIzCqHXqNrgBIiOxLT8DCGRXmb8WaKAlqQ48+EU
biRnf6ysV3FS4cvZ1lyZyJPWHsUoJ8/W/4kPPkgc12VjvJFWgiyI4UF8zwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDUmwUm/n9uJsmoNdsov8ZEeGEeEMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvTlNiQlNiLWYyNG15YWcxMnlpX3hrUjRZUjRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEU+9wAwQE
VaywAwQFVa2gAwQFsiLgMA0GCSqGSIb3DQEBCwUAA4IBAQAfhdTMjfTalEME2lZs
qixsmrh4581TxPUAVr9tIXs3dmqYwqkc/qWlAqsj5nbZQ/AntO59pWxn1yYZ0ebd
4O5df6yNAKL9RmYORUkBBJoeQU7+Spqnlzppaxpp3OyXw71I1TZ5YB/IO4ICykf9
15O2beCceAjyXMRNZmswRSBz9rQoNEXza8shrw8S6UcGwwRcZ6ygGphEDyaJIgm2
dBUN2FTStuKsLr9mxuD7CoCWqiJorNf/44xrt4pyO5OTwwA6fUBgdPIhrBYIStX1
ZqFqMhnzCUUSLNJc6v/mC3/0ycH5s3yOVSsj+RkBW/vyY4KdpynWOtWyJQxTZR3b
5k0c
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org