Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ndrxgP5PCejuu0kyi98N5RjYEN0.roa
File: ndrxgP5PCejuu0kyi98N5RjYEN0.roa (raw, json)
Hash identifier: Hy2co1MYwg/+GBCMcuOjYLOFqIB9wq7OYAVa59K6jA4=
Subject key identifier: 9D:DA:F1:80:FE:4F:09:E8:EE:BB:49:32:8B:DF:0D:E5:18:D8:10:DD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019251D52B1CFF4BFF8484FB3CD828B33E3E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ndrxgP5PCejuu0kyi98N5RjYEN0.roa
Signing time: Thu 03 Oct 2024 10:02:57 +0000
ROA not before: Thu 03 Oct 2024 10:02:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
93.123.74.0/23 maxlen: 24
94.156.253.0/24 maxlen: 24
185.252.160.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 00:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:d5:2b:1c:ff:4b:ff:84:84:fb:3c:d8:28:b3:3e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 3 10:02:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ddaf180fe4f09e8eebb49328bdf0de518d810dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:8c:a5:9d:ef:a2:fa:90:0c:f8:9f:f5:5b:
04:59:89:da:3d:0a:f6:f5:64:60:a5:ff:3b:80:05:
57:80:63:8d:1b:f3:0c:d9:95:b0:31:c0:cc:ca:d6:
d5:34:19:91:61:22:13:0f:e9:26:24:6f:9e:ae:1f:
c4:9c:7f:61:ae:6a:34:74:22:4d:d0:b8:c8:1d:02:
e6:49:2b:8b:d1:07:de:47:5c:fc:97:0b:48:5b:0b:
97:31:a1:53:9f:f1:ff:72:cf:88:a0:cc:0e:93:39:
56:a4:56:30:b1:c8:69:21:12:36:f2:b0:07:ea:95:
bc:97:54:a3:73:7e:0f:92:51:ac:36:4a:e6:b2:b4:
84:20:26:11:a0:21:08:de:d7:a9:b3:c1:d0:d5:03:
2e:a5:7e:18:14:9e:87:36:5d:ed:e9:d9:84:c7:21:
f4:e9:73:a4:d6:b9:80:84:1d:64:9d:e2:40:07:f3:
ec:6c:aa:5c:7b:bd:8e:ea:39:c9:56:42:74:df:af:
0d:ae:b8:e5:bb:24:83:2f:40:a8:37:d3:b2:57:54:
51:d4:16:d4:78:6f:b0:b8:11:4b:65:90:9c:e3:5c:
0e:0c:d4:05:7b:13:5e:4c:e5:9a:9d:b2:dc:37:d4:
c9:70:a4:18:7b:79:48:ad:04:7f:a6:5b:11:be:ab:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:DA:F1:80:FE:4F:09:E8:EE:BB:49:32:8B:DF:0D:E5:18:D8:10:DD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ndrxgP5PCejuu0kyi98N5RjYEN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.68.0/23
93.123.74.0/23
94.156.253.0/24
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:d8:47:b5:7d:61:13:a8:2c:dc:c6:80:b8:48:65:02:b6:99:
3d:20:a8:28:49:65:6c:6d:aa:c9:21:55:7a:e7:69:72:24:19:
46:5a:ec:21:80:ba:d6:4d:8a:79:10:72:47:ca:77:ca:59:d2:
91:8e:c3:31:60:be:9c:02:dc:8b:62:39:92:32:e2:08:d0:ec:
25:bc:aa:a1:e1:b4:bd:a1:45:24:3a:54:cb:92:be:90:5e:76:
74:a9:af:aa:4a:e7:83:ee:a6:d7:d3:9f:1d:bd:c9:11:ed:83:
55:e1:d8:bd:dd:b2:a0:ad:9c:6c:bf:ab:4e:4e:b9:9e:0e:e8:
4d:86:02:b9:cb:ff:a9:9a:c9:0b:24:ca:59:12:57:cc:9d:46:
80:0c:ea:57:a1:33:5b:6c:98:50:00:7a:cf:9f:27:97:7f:9b:
e9:37:4a:55:77:cc:b1:25:36:b5:67:05:d5:ad:0b:93:d0:32:
95:fd:ce:72:2d:37:eb:60:e8:99:00:c0:52:e4:f9:e0:41:6c:
fa:a9:6f:7d:7c:55:53:d1:3f:db:1d:4d:a9:1f:ce:40:9b:86:
e8:e8:0f:b1:ce:b8:b8:17:83:8b:77:b8:e9:99:bb:86:53:b4:
df:9b:08:30:9f:9e:7f:6f:72:b6:0f:82:50:44:bd:74:a2:16:
b3:28:9e:62
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZJR1Ssc/0v/hIT7PNgosz4+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQxMDAzMTAwMjU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGRhZjE4MGZlNGYwOWU4ZWViYjQ5MzI4YmRmMGRlNTE4ZDgxMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QOMpZ3vovqQDPif9VsEWYnaPQr2
9WRgpf87gAVXgGONG/MM2ZWwMcDMytbVNBmRYSITD+kmJG+erh/EnH9hrmo0dCJN
0LjIHQLmSSuL0QfeR1z8lwtIWwuXMaFTn/H/cs+IoMwOkzlWpFYwschpIRI28rAH
6pW8l1Sjc34PklGsNkrmsrSEICYRoCEI3teps8HQ1QMupX4YFJ6HNl3t6dmExyH0
6XOk1rmAhB1kneJAB/PsbKpce72O6jnJVkJ0368NrrjluySDL0CoN9OyV1RR1BbU
eG+wuBFLZZCc41wODNQFexNeTOWanbLcN9TJcKQYe3lIrQR/plsRvqtL9wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ3a8YD+Twno7rtJMovfDeUY2BDdMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbmRyeGdQNVBDZWp1dTBreWk5OE41UmpZRU4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBV3hEAwQB
XXtKAwQAXpz9AwQBufygMA0GCSqGSIb3DQEBCwUAA4IBAQBe2Ee1fWETqCzcxoC4
SGUCtpk9IKgoSWVsbarJIVV652lyJBlGWuwhgLrWTYp5EHJHynfKWdKRjsMxYL6c
AtyLYjmSMuII0OwlvKqh4bS9oUUkOlTLkr6QXnZ0qa+qSueD7qbX058dvckR7YNV
4di93bKgrZxsv6tOTrmeDuhNhgK5y/+pmskLJMpZElfMnUaADOpXoTNbbJhQAHrP
nyeXf5vpN0pVd8yxJTa1ZwXVrQuT0DKV/c5yLTfrYOiZAMBS5PngQWz6qW99fFVT
0T/bHU2pH85Am4bo6A+xzri4F4OLd7jpmbuGU7Tfmwgwn55/b3K2D4JQRL10ohaz
KJ5i
-----END CERTIFICATE-----
Generated at Tue Oct 8 03:17:50 2024 by rpki-client on console-fra.rpki-client.org