Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/NcrZUEuMjKl-swhSm_71OFwIcHQ.roa
File: NcrZUEuMjKl-swhSm_71OFwIcHQ.roa (raw, json)
Hash identifier: 0hbtNxKvrGF80dIMZ5yjNo2R7oFXik41ICMUNP4YHeg=
Subject key identifier: 35:CA:D9:50:4B:8C:8C:A9:7E:B3:08:52:9B:FE:F5:38:5C:08:70:74
Certificate issuer: /CN=4978d328bcde5294f372765c11aeef28155b0f02
Certificate serial: 018F2F3A6942D64E0BCFB16BDC8A67DCF09E
Authority key identifier: 49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/NcrZUEuMjKl-swhSm_71OFwIcHQ.roa
Signing time: Tue 30 Apr 2024 13:38:28 +0000
ROA not before: Tue 30 Apr 2024 13:38:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47745
IP address blocks: 85.187.1.0/24 maxlen: 24
151.237.60.0/24 maxlen: 24
151.237.61.0/24 maxlen: 24
185.255.59.0/24 maxlen: 24
212.5.56.0/24 maxlen: 24
212.5.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 17 Sep 2024 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2f:3a:69:42:d6:4e:0b:cf:b1:6b:dc:8a:67:dc:f0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4978d328bcde5294f372765c11aeef28155b0f02
Validity
Not Before: Apr 30 13:38:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35cad9504b8c8ca97eb308529bfef5385c087074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:19:96:c9:62:83:d2:22:f6:7c:a0:97:ef:
00:30:de:cf:ea:aa:fe:be:a5:dc:19:a4:62:78:5a:
bd:f8:09:0e:6d:5c:4a:27:23:d5:de:44:8b:16:29:
d3:45:07:13:99:5c:fd:36:84:96:85:83:cd:a7:09:
7e:73:68:fa:b4:3c:e0:6e:47:26:4c:08:77:20:85:
d5:ec:6b:c9:f4:71:1c:41:50:f6:17:49:95:1a:9c:
6b:31:e7:d2:97:7a:80:d7:ed:7e:d1:2a:fe:b3:37:
a0:9d:3f:db:fc:bc:73:d9:40:47:f9:ee:84:db:12:
54:d2:58:d7:99:b4:05:80:6c:7c:a8:64:d9:6d:2e:
3a:f0:8b:3a:5d:48:85:7a:f9:d9:c8:f7:b8:3b:6c:
d4:96:3f:66:e2:95:c1:67:0c:96:3a:5a:86:55:1b:
c9:ce:df:6b:63:73:76:f2:f4:87:b6:fe:c5:02:59:
da:fe:f7:a5:17:ae:82:00:ea:a7:f5:5a:03:30:62:
27:7e:44:20:0e:06:3b:93:ca:44:2a:1a:54:34:3d:
ef:62:a1:39:b5:e7:f8:74:22:21:a2:eb:6e:24:b7:
9e:55:67:9f:4b:a0:f7:a7:50:9a:fc:46:41:60:00:
54:6c:29:4c:40:dd:a9:56:dc:7f:1e:f8:98:67:42:
2c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CA:D9:50:4B:8C:8C:A9:7E:B3:08:52:9B:FE:F5:38:5C:08:70:74
X509v3 Authority Key Identifier:
keyid:49:78:D3:28:BC:DE:52:94:F3:72:76:5C:11:AE:EF:28:15:5B:0F:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXjTKLzeUpTzcnZcEa7vKBVbDwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/NcrZUEuMjKl-swhSm_71OFwIcHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe173b-f87f-464f-b1b9-8c7d20923b08/1/SXjTKLzeUpTzcnZcEa7vKBVbDwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.1.0/24
151.237.60.0/23
185.255.59.0/24
212.5.56.0/23
Signature Algorithm: sha256WithRSAEncryption
91:d8:2c:cf:e9:76:37:14:34:60:8a:ec:b4:a7:66:89:fe:a7:
92:d7:f2:ec:07:c1:e7:fe:14:0e:c5:2c:5e:eb:8a:fc:98:94:
51:31:c9:5c:cb:80:38:53:66:b1:82:5a:40:4a:df:3d:a6:5f:
ac:31:62:03:de:16:37:41:90:3c:93:c5:8e:fb:4f:03:6b:27:
d5:8e:6b:63:b3:67:c8:02:2e:d0:ae:2f:6d:d5:a0:e0:1d:81:
82:77:c2:14:52:cf:68:fb:14:83:6a:99:8e:22:c8:20:87:8e:
5b:d7:88:25:46:50:59:c5:6d:49:64:f0:de:df:d3:86:ff:b9:
cc:90:08:87:32:93:48:c0:8a:f1:8d:80:1d:66:4b:b5:94:fd:
ae:73:92:18:78:ad:36:bf:34:80:26:e1:3d:ed:ed:ce:8b:2d:
ca:f2:e8:f6:a8:e7:a8:ed:aa:a6:b2:05:f8:1f:21:89:00:57:
f8:fa:41:52:0b:e2:f0:59:11:46:21:ec:92:13:3c:ed:99:fa:
64:42:15:79:e3:23:d2:f4:d5:6d:b5:13:21:30:d8:79:7b:ab:
4e:45:be:36:f6:bb:50:f6:f0:ad:a3:1b:d7:d7:da:f5:b8:16:
06:fe:3f:e2:73:ab:09:5e:65:41:1e:b6:29:a7:9b:02:5a:d3:
f1:4e:c1:97
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY8vOmlC1k4Lz7Fr3Ipn3PCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NzhkMzI4YmNkZTUyOTRmMzcyNzY1YzExYWVlZjI4MTU1
YjBmMDIwHhcNMjQwNDMwMTMzODI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWNhZDk1MDRiOGM4Y2E5N2ViMzA4NTI5YmZlZjUzODVjMDg3MDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeoZlslig9Ii9nygl+8AMN7P6qr+
vqXcGaRieFq9+AkObVxKJyPV3kSLFinTRQcTmVz9NoSWhYPNpwl+c2j6tDzgbkcm
TAh3IIXV7GvJ9HEcQVD2F0mVGpxrMefSl3qA1+1+0Sr+szegnT/b/Lxz2UBH+e6E
2xJU0ljXmbQFgGx8qGTZbS468Is6XUiFevnZyPe4O2zUlj9m4pXBZwyWOlqGVRvJ
zt9rY3N28vSHtv7FAlna/velF66CAOqn9VoDMGInfkQgDgY7k8pEKhpUND3vYqE5
tef4dCIhoutuJLeeVWefS6D3p1Ca/EZBYABUbClMQN2pVtx/HviYZ0IszwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDXK2VBLjIypfrMIUpv+9ThcCHB0MB8GA1UdIwQY
MBaAFEl40yi83lKU83J2XBGu7ygVWw8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjkt
OGM3ZDIwOTIzYjA4LzEvTmNyWlVFdU1qS2wtc3doU21fNzFPRndJY0hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9mZTE3M2ItZjg3Zi00NjRmLWIxYjktOGM3ZDIwOTIzYjA4
LzEvU1hqVEtMemVVcFR6Y25aY0VhN3ZLQlZiRHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVbsBAwQB
l+08AwQAuf87AwQB1AU4MA0GCSqGSIb3DQEBCwUAA4IBAQCR2CzP6XY3FDRgiuy0
p2aJ/qeS1/LsB8Hn/hQOxSxe64r8mJRRMclcy4A4U2axglpASt89pl+sMWID3hY3
QZA8k8WO+08DayfVjmtjs2fIAi7Qri9t1aDgHYGCd8IUUs9o+xSDapmOIsggh45b
14glRlBZxW1JZPDe39OG/7nMkAiHMpNIwIrxjYAdZku1lP2uc5IYeK02vzSAJuE9
7e3Oiy3K8uj2qOeo7aqmsgX4HyGJAFf4+kFSC+LwWRFGIeySEzztmfpkQhV54yPS
9NVttRMhMNh5e6tORb429rtQ9vCtoxvX19r1uBYG/j/ic6sJXmVBHrYpp5sCWtPx
TsGX
-----END CERTIFICATE-----
Generated at Tue Sep 17 19:07:43 2024 by rpki-client on console-fra.rpki-client.org