Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/NWPBzj6F8T1F0sr2iJUdGczjPO8.roa
File: NWPBzj6F8T1F0sr2iJUdGczjPO8.roa (raw, json)
Hash identifier: 1IzVXBz7euXoDeFRSeFrRBdTUj4/zS76KIMbinUybCk=
Subject key identifier: 35:63:C1:CE:3E:85:F1:3D:45:D2:CA:F6:88:95:1D:19:CC:E3:3C:EF
Certificate issuer: /CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Certificate serial: 0191CABAC354F496DF976E6FCBD1089376F4
Authority key identifier: D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/NWPBzj6F8T1F0sr2iJUdGczjPO8.roa
Signing time: Sat 07 Sep 2024 04:25:22 +0000
ROA not before: Sat 07 Sep 2024 04:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.200.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 20:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ca:ba:c3:54:f4:96:df:97:6e:6f:cb:d1:08:93:76:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d03c73b60f2103ee3b2a2c3cbe920e212a92ee65
Validity
Not Before: Sep 7 04:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3563c1ce3e85f13d45d2caf688951d19cce33cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:77:7c:ef:e0:3d:ff:76:81:3b:6b:18:79:
d8:cc:2e:8f:ca:6a:d6:ae:6f:bf:0c:7f:5e:f3:3b:
61:a1:c2:db:9c:bd:ea:2e:6b:37:ca:0e:c7:f8:64:
6b:42:e2:84:e8:8e:24:c9:87:4e:c4:f6:0f:45:01:
96:ca:54:d4:97:44:d9:d0:54:c3:07:94:0c:3c:a3:
1f:c2:9c:63:4c:51:38:87:99:bd:d6:03:42:e6:63:
2c:01:f1:eb:af:f0:9b:13:24:d5:89:86:3d:47:bb:
82:71:d3:32:2b:56:49:18:95:e9:c0:b7:68:2c:60:
c3:06:af:16:da:a8:64:03:59:d4:a7:8d:af:d5:07:
27:ca:93:d5:fd:bd:af:e3:8c:9e:0a:9e:d5:a7:70:
5b:d5:6e:ad:1b:5f:3f:fd:25:c9:e8:0c:ae:4d:45:
6e:83:ea:de:57:af:d8:37:ed:64:0d:ed:ce:03:03:
41:f5:e9:64:75:77:23:d9:43:50:dd:ea:70:34:c8:
2e:89:b2:0e:80:a3:68:76:ca:b9:3f:90:83:b0:34:
80:7d:13:e5:48:5e:c7:df:8c:7c:92:ee:2f:2f:f3:
bb:35:a5:8c:ff:58:ea:29:6e:fc:d3:94:02:49:c7:
3b:9b:7b:d7:24:9a:d3:53:39:6b:94:20:cf:eb:00:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:63:C1:CE:3E:85:F1:3D:45:D2:CA:F6:88:95:1D:19:CC:E3:3C:EF
X509v3 Authority Key Identifier:
keyid:D0:3C:73:B6:0F:21:03:EE:3B:2A:2C:3C:BE:92:0E:21:2A:92:EE:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Dxztg8hA-47Kiw8vpIOISqS7mU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/NWPBzj6F8T1F0sr2iJUdGczjPO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/011132-eae3-4e9d-b6f0-46f004a19591/1/0Dxztg8hA-47Kiw8vpIOISqS7mU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.78.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c9:5a:eb:5d:e7:78:61:70:01:9c:69:7f:c7:51:a3:b0:f0:
c2:63:7d:b5:42:a1:f5:b6:b9:8b:bc:60:a5:b0:1b:0d:aa:d4:
69:d4:96:a6:db:f7:bd:b9:3f:89:d2:5c:95:90:da:85:86:66:
3b:f7:29:a6:71:d0:af:b5:d5:2d:07:4e:7f:41:2b:e2:d5:e3:
55:da:12:da:66:be:98:0b:28:d7:71:ee:ed:99:e3:99:09:97:
94:ea:0d:7d:90:b5:60:8a:f3:08:98:c5:01:17:56:e7:9c:b6:
c8:8d:22:79:24:17:99:a9:9c:72:f9:5f:ce:1c:89:67:dd:3d:
9e:ff:8b:59:6d:4a:4a:98:2b:9d:e0:f6:85:5f:27:92:89:f5:
b2:d1:3f:69:26:82:4d:ce:bf:ff:bd:07:65:d4:d7:76:cf:36:
56:c1:9b:ae:54:57:0f:02:5f:65:18:02:6b:4d:76:9b:c8:a5:
c6:7c:8a:13:55:f4:35:ca:30:0d:63:7e:08:5b:5e:af:76:87:
0b:21:6a:57:db:0d:85:66:38:dc:a1:2d:90:b7:1e:50:10:0f:
56:02:e3:f9:40:be:22:bb:ca:f0:c1:cf:0c:5a:95:15:ff:ed:
a7:e6:05:81:e0:fb:80:11:c5:c9:af:47:3f:c0:73:c4:91:fb:
1b:15:c0:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHKusNU9Jbfl25vy9EIk3b0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwM2M3M2I2MGYyMTAzZWUzYjJhMmMzY2JlOTIwZTIxMmE5
MmVlNjUwHhcNMjQwOTA3MDQyNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTYzYzFjZTNlODVmMTNkNDVkMmNhZjY4ODk1MWQxOWNjZTMzY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybZ3fO/gPf92gTtrGHnYzC6PymrW
rm+/DH9e8zthocLbnL3qLms3yg7H+GRrQuKE6I4kyYdOxPYPRQGWylTUl0TZ0FTD
B5QMPKMfwpxjTFE4h5m91gNC5mMsAfHrr/CbEyTViYY9R7uCcdMyK1ZJGJXpwLdo
LGDDBq8W2qhkA1nUp42v1QcnypPV/b2v44yeCp7Vp3Bb1W6tG18//SXJ6AyuTUVu
g+reV6/YN+1kDe3OAwNB9elkdXcj2UNQ3epwNMguibIOgKNodsq5P5CDsDSAfRPl
SF7H34x8ku4vL/O7NaWM/1jqKW7805QCScc7m3vXJJrTUzlrlCDP6wCAqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVjwc4+hfE9RdLK9oiVHRnM4zzvMB8GA1UdIwQY
MBaAFNA8c7YPIQPuOyosPL6SDiEqku5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAt
NDZmMDA0YTE5NTkxLzEvTldQQnpqNkY4VDFGMHNyMmlKVWRHY3pqUE84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wMTExMzItZWFlMy00ZTlkLWI2ZjAtNDZmMDA0YTE5NTkx
LzEvMER4enRnOGhBLTQ3S2l3OHZwSU9JU3FTN21VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwchOMA0G
CSqGSIb3DQEBCwUAA4IBAQAHyVrrXed4YXABnGl/x1GjsPDCY321QqH1trmLvGCl
sBsNqtRp1Jam2/e9uT+J0lyVkNqFhmY79ymmcdCvtdUtB05/QSvi1eNV2hLaZr6Y
CyjXce7tmeOZCZeU6g19kLVgivMImMUBF1bnnLbIjSJ5JBeZqZxy+V/OHIln3T2e
/4tZbUpKmCud4PaFXyeSifWy0T9pJoJNzr//vQdl1Nd2zzZWwZuuVFcPAl9lGAJr
TXabyKXGfIoTVfQ1yjANY34IW16vdocLIWpX2w2FZjjcoS2Qtx5QEA9WAuP5QL4i
u8rwwc8MWpUV/+2n5gWB4PuAEcXJr0c/wHPEkfsbFcD+
-----END CERTIFICATE-----
Generated at Sun Sep 15 23:08:08 2024 by rpki-client on console-fra.rpki-client.org