Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/NizORhuutqeMJE94pygdy-LpufA.roa
File: NizORhuutqeMJE94pygdy-LpufA.roa (raw, json)
Hash identifier: 3puYDoW5zwGVjmMNCMEfwBGUIf9ySyaQmEG9W3LGcTg=
Subject key identifier: 36:2C:CE:46:1B:AE:B6:A7:8C:24:4F:78:A7:28:1D:CB:E2:E9:B9:F0
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 01856DCB0727B04DA5280D25041821D869EC
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/NizORhuutqeMJE94pygdy-LpufA.roa
Signing time: Sun 01 Jan 2023 14:45:00 +0000
ROA not before: Sun 01 Jan 2023 14:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47301
IP address blocks: 195.182.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:cb:07:27:b0:4d:a5:28:0d:25:04:18:21:d8:69:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Jan 1 14:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=362cce461baeb6a78c244f78a7281dcbe2e9b9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:31:2c:ba:bf:17:e7:8b:3c:d9:87:6e:94:a4:
1d:13:5a:a5:ec:fa:24:f8:d8:e0:9e:af:93:7e:44:
7c:60:73:ea:d1:98:7d:00:42:8c:5f:8e:a3:8a:da:
af:11:98:2d:12:71:b6:f6:c6:27:9a:3b:8c:a0:ad:
9e:1a:09:c8:8b:0b:97:0c:e6:aa:27:7b:c2:62:42:
09:16:c7:ba:d8:6a:20:9d:39:62:be:a0:dd:aa:24:
19:83:07:61:0f:16:77:96:99:1d:f4:ad:0e:8f:8d:
8d:cc:84:38:42:20:30:95:50:9c:4c:59:8a:c1:ca:
ff:e6:bf:00:ca:ba:c8:33:05:ca:11:65:dc:15:9b:
41:ad:07:c0:00:94:d9:7f:e3:ef:4e:a8:09:e9:7b:
59:93:d9:c3:94:ee:09:b6:44:42:b7:97:70:7c:33:
09:ea:e5:71:bc:3e:56:4c:de:35:56:6c:2b:39:74:
9a:dc:74:74:3f:54:55:67:d4:bf:8f:95:7e:05:0b:
a4:0f:9a:0b:6d:36:51:39:93:ac:d3:58:f0:fd:a8:
c1:6c:f7:e8:33:d1:16:4a:ce:9b:6e:16:29:ff:1b:
80:f2:cd:bc:bd:38:34:5f:cc:cd:b1:5f:92:77:0a:
fe:2e:71:9e:0f:9c:e7:25:e4:74:f3:35:40:0e:0c:
63:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2C:CE:46:1B:AE:B6:A7:8C:24:4F:78:A7:28:1D:CB:E2:E9:B9:F0
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/NizORhuutqeMJE94pygdy-LpufA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:f8:25:de:50:cb:87:ed:c2:1b:e3:12:a3:f1:f2:b0:02:f9:
e1:53:17:09:ff:52:9b:5c:e3:85:c8:e8:a5:ce:8e:1e:7c:60:
c4:d4:64:8c:41:49:da:6d:2c:2e:30:24:1b:d7:aa:c9:e1:60:
9d:58:b4:b1:d9:99:d4:25:c3:db:3b:f3:cd:5a:8b:69:f9:94:
cb:62:80:2f:28:d2:6b:70:14:ab:86:51:64:7a:44:08:96:fe:
f8:4d:1c:cd:ce:62:61:aa:81:60:2b:4b:e5:92:50:a6:6f:4d:
b8:08:44:d3:e2:67:41:44:7b:79:e1:1e:06:25:f5:24:d1:c4:
fd:9d:61:f2:68:b8:1a:70:2a:82:36:32:70:41:6c:39:6f:80:
a6:9b:4f:3c:20:c3:e9:f0:02:06:20:ff:56:87:1e:ea:89:df:
5d:0a:5c:04:38:28:d0:44:5d:a9:25:30:41:b0:ba:a0:16:05:
8c:38:27:8c:53:c2:81:10:4a:13:23:17:c6:d0:5b:9d:95:96:
4a:be:a3:5d:9b:9c:f9:3e:5c:ca:57:82:db:72:df:47:da:e9:
94:d4:c6:39:cd:78:ee:51:57:7c:a4:ab:03:13:2f:da:2c:71:
bf:4a:f7:ec:09:c5:0d:c2:c2:56:8f:79:55:31:14:66:d1:ef:
8a:ad:bc:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtywcnsE2lKA0lBBgh2GnsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMTk1MjA0Njc3MGY1NGU4YmUxZmQ3ZDY3MzEzMjI2NWFk
NzBmYTgwHhcNMjMwMTAxMTQ0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjJjY2U0NjFiYWViNmE3OGMyNDRmNzhhNzI4MWRjYmUyZTliOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDEsur8X54s82YdulKQdE1ql7Pok
+Njgnq+TfkR8YHPq0Zh9AEKMX46jitqvEZgtEnG29sYnmjuMoK2eGgnIiwuXDOaq
J3vCYkIJFse62GognTlivqDdqiQZgwdhDxZ3lpkd9K0Oj42NzIQ4QiAwlVCcTFmK
wcr/5r8AyrrIMwXKEWXcFZtBrQfAAJTZf+PvTqgJ6XtZk9nDlO4JtkRCt5dwfDMJ
6uVxvD5WTN41VmwrOXSa3HR0P1RVZ9S/j5V+BQukD5oLbTZROZOs01jw/ajBbPfo
M9EWSs6bbhYp/xuA8s28vTg0X8zNsV+Sdwr+LnGeD5znJeR08zVADgxjIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDYszkYbrranjCRPeKcoHcvi6bnwMB8GA1UdIwQY
MBaAFEEZUgRncPVOi+H9fWcxMiZa1w+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUt
OGI5MWJjNjFlN2MzLzEvTml6T1JodXV0cWVNSkU5NHB5Z2R5LUxwdWZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zOTUwZDQtOWQ3Mi00ZmYwLTgxZGUtOGI5MWJjNjFlN2Mz
LzEvUVJsU0JHZHc5VTZMNGYxOVp6RXlKbHJYRDZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YiMA0G
CSqGSIb3DQEBCwUAA4IBAQBf+CXeUMuH7cIb4xKj8fKwAvnhUxcJ/1KbXOOFyOil
zo4efGDE1GSMQUnabSwuMCQb16rJ4WCdWLSx2ZnUJcPbO/PNWotp+ZTLYoAvKNJr
cBSrhlFkekQIlv74TRzNzmJhqoFgK0vlklCmb024CETT4mdBRHt54R4GJfUk0cT9
nWHyaLgacCqCNjJwQWw5b4Cmm088IMPp8AIGIP9Whx7qid9dClwEOCjQRF2pJTBB
sLqgFgWMOCeMU8KBEEoTIxfG0FudlZZKvqNdm5z5PlzKV4Lbct9H2umU1MY5zXju
UVd8pKsDEy/aLHG/SvfsCcUNwsJWj3lVMRRm0e+Krbwk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:02 2024 by rpki-client on console-ams.rpki-client.org