Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NXnns5gtDYW6bl4Qlt2u_BBNKOM.roa
File: NXnns5gtDYW6bl4Qlt2u_BBNKOM.roa (raw, json)
Hash identifier: BDLmlbfOH4Gv7kK9vu+BvyAnZXVp0NdtL0iuCF425Kw=
Subject key identifier: 35:79:E7:B3:98:2D:0D:85:BA:6E:5E:10:96:DD:AE:FC:10:4D:28:E3
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0185708CDDCD27CD5AD427D38DA17A0C993D
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NXnns5gtDYW6bl4Qlt2u_BBNKOM.roa
Signing time: Mon 02 Jan 2023 03:35:58 +0000
ROA not before: Mon 02 Jan 2023 03:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35177
IP address blocks: 178.35.192.0/19 maxlen: 19
85.173.136.0/21 maxlen: 21
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:dd:cd:27:cd:5a:d4:27:d3:8d:a1:7a:0c:99:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Jan 2 03:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3579e7b3982d0d85ba6e5e1096ddaefc104d28e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:a3:e3:81:7c:51:b6:e3:43:21:83:2e:35:
8f:cd:a9:3a:fa:44:82:72:07:50:7d:90:4e:cf:24:
15:28:c8:3e:cc:23:da:18:4c:a5:b5:08:d3:ae:42:
71:13:c8:b1:ea:03:6b:33:da:fe:8d:28:23:f2:5a:
3e:68:0c:d6:a4:84:5b:11:2b:7a:94:0c:16:b4:88:
7b:1b:b7:ca:c2:55:8d:56:87:f8:93:9d:5b:af:93:
b7:04:05:df:47:17:73:b7:58:eb:c9:50:78:17:6f:
06:be:39:b3:f2:e9:60:cb:c4:b3:7e:97:a8:dc:76:
ab:cc:74:de:36:07:aa:aa:4e:b5:25:e4:45:d2:37:
f5:8f:37:fa:75:1f:d3:ad:1e:6a:6c:fd:a7:f7:e9:
73:1a:ef:77:e8:6e:18:92:d7:82:0c:8d:e8:34:33:
55:d3:51:21:81:0e:ee:e0:68:94:b0:05:2f:42:68:
4d:81:33:ba:98:b0:20:0c:31:d1:f1:60:b2:82:86:
a1:55:f1:99:cf:76:52:46:48:0f:54:70:19:f3:62:
9a:0c:51:2b:10:9e:07:2c:49:2b:99:53:c4:36:47:
d8:92:34:84:ce:78:16:cf:9d:8d:63:9b:ee:7e:24:
8b:85:7a:cc:f8:d7:0b:d3:63:a1:aa:25:62:40:50:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:79:E7:B3:98:2D:0D:85:BA:6E:5E:10:96:DD:AE:FC:10:4D:28:E3
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/NXnns5gtDYW6bl4Qlt2u_BBNKOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.173.136.0/21
178.35.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:0b:3b:7f:16:66:63:b6:10:fb:cb:19:9b:05:a0:55:50:3f:
ca:57:ee:ba:dc:b0:df:64:90:82:a7:79:39:fa:8c:0d:53:5d:
5c:1e:7d:da:7b:ce:ed:3d:61:79:a7:d5:78:21:aa:f1:15:02:
1f:6e:92:0c:e4:0b:ec:82:7f:c6:14:73:2a:38:c9:c9:70:27:
82:2a:b3:27:89:97:1c:5c:c9:2f:3a:79:1f:b0:5d:15:56:76:
fb:6b:34:62:47:a9:1a:08:6d:81:3c:4d:f5:6e:94:02:e1:0a:
50:0a:2d:43:4f:13:c1:dd:01:e1:f1:a1:a6:a6:e8:df:a8:b7:
eb:97:86:40:8a:ba:03:5a:0b:68:a4:32:58:0d:82:b7:a6:8f:
a6:6d:5d:41:5f:16:bf:79:f5:0a:d5:a5:89:7c:fc:f8:1a:c6:
d0:ea:f1:35:9e:1e:ed:d4:ae:98:d4:2a:89:86:6f:16:a8:5b:
c4:4c:8b:40:26:d4:2c:73:1d:31:2e:8a:73:35:69:83:bd:35:
b2:b0:75:04:4d:e8:c1:0d:e1:d7:c6:3e:f7:7d:58:3b:bc:f9:
12:e3:b3:5c:7a:f3:7b:28:fe:b8:23:b2:2b:f0:3c:2a:80:71:
96:fa:29:8d:5d:d5:ea:03:b2:bd:47:c2:d7:a2:ee:84:37:ff:
c8:a0:a9:5d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwjN3NJ81a1CfTjaF6DJk9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjMwMTAyMDMzNTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTc5ZTdiMzk4MmQwZDg1YmE2ZTVlMTA5NmRkYWVmYzEwNGQyOGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pKj44F8UbbjQyGDLjWPzak6+kSC
cgdQfZBOzyQVKMg+zCPaGEyltQjTrkJxE8ix6gNrM9r+jSgj8lo+aAzWpIRbESt6
lAwWtIh7G7fKwlWNVof4k51br5O3BAXfRxdzt1jryVB4F28Gvjmz8ulgy8Szfpeo
3HarzHTeNgeqqk61JeRF0jf1jzf6dR/TrR5qbP2n9+lzGu936G4YkteCDI3oNDNV
01EhgQ7u4GiUsAUvQmhNgTO6mLAgDDHR8WCygoahVfGZz3ZSRkgPVHAZ82KaDFEr
EJ4HLEkrmVPENkfYkjSEzngWz52NY5vufiSLhXrM+NcL02OhqiViQFB/3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDV557OYLQ2Fum5eEJbdrvwQTSjjMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvTlhubnM1Z3REWVc2Ymw0UWx0MnVfQkJOS09NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVa2IAwQF
siPAMA0GCSqGSIb3DQEBCwUAA4IBAQAbCzt/FmZjthD7yxmbBaBVUD/KV+663LDf
ZJCCp3k5+owNU11cHn3ae87tPWF5p9V4IarxFQIfbpIM5Avsgn/GFHMqOMnJcCeC
KrMniZccXMkvOnkfsF0VVnb7azRiR6kaCG2BPE31bpQC4QpQCi1DTxPB3QHh8aGm
pujfqLfrl4ZAiroDWgtopDJYDYK3po+mbV1BXxa/efUK1aWJfPz4GsbQ6vE1nh7t
1K6Y1CqJhm8WqFvETItAJtQscx0xLopzNWmDvTWysHUETejBDeHXxj73fVg7vPkS
47NcevN7KP64I7Ir8DwqgHGW+imNXdXqA7K9R8LXou6EN//IoKld
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org