Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NguMATEDBoYog1VDHRHzrGuPPGs.roa
File: NguMATEDBoYog1VDHRHzrGuPPGs.roa (raw, json)
Hash identifier: PQoE+pzTLumW7XDJ44aJTkCayqWCPQ0vzyAHOUHu49U=
Subject key identifier: 36:0B:8C:01:31:03:06:86:28:83:55:43:1D:11:F3:AC:6B:8F:3C:6B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 018E498E96A89F949419DC7976A71BA2F7C6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NguMATEDBoYog1VDHRHzrGuPPGs.roa
Signing time: Sat 16 Mar 2024 23:17:45 +0000
ROA not before: Sat 16 Mar 2024 23:17:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204160
IP address blocks: 77.90.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 04:06:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:49:8e:96:a8:9f:94:94:19:dc:79:76:a7:1b:a2:f7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Mar 16 23:17:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=360b8c0131030686288355431d11f3ac6b8f3c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:05:7e:79:33:ea:c7:bf:b4:6e:80:62:d4:
bb:18:44:6a:04:e6:b5:f9:c1:6e:33:fd:95:af:9a:
34:4f:13:d3:72:5d:24:4b:ab:e2:c7:3b:3b:ba:d9:
6f:e1:2f:b1:0c:e2:c6:d8:05:77:3c:70:75:b6:d6:
d7:9a:f8:b4:ef:24:0c:08:58:be:c0:4d:07:88:4f:
76:09:28:76:62:f8:5b:6e:91:94:ce:23:b3:47:96:
8f:75:84:48:d0:c6:38:5c:e8:a6:3f:84:a4:34:4a:
2c:ea:ff:e9:73:72:76:12:76:cd:51:65:a1:a5:0c:
fa:08:66:c5:f5:17:46:08:7e:e0:fa:b5:f6:73:a9:
09:29:13:32:ed:dc:d6:7b:77:d4:7e:73:aa:db:4c:
15:e2:9d:7c:cc:47:98:09:5b:34:8b:5d:e2:5f:bc:
f3:8c:0f:f3:8a:f8:f0:0e:e3:c9:e7:d4:c2:8f:2c:
2e:64:fa:8a:23:de:37:8d:56:54:4b:bc:70:56:d2:
99:af:6c:3c:ad:25:4b:d9:cf:df:58:6a:c4:3e:12:
3d:eb:96:ff:81:19:a2:a6:94:07:0a:91:5c:ee:69:
5c:78:0d:e2:5e:5b:83:1d:10:4e:3d:5d:12:99:02:
d8:9e:aa:73:c9:a0:26:0d:e8:fd:f2:ae:c5:3b:17:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0B:8C:01:31:03:06:86:28:83:55:43:1D:11:F3:AC:6B:8F:3C:6B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/NguMATEDBoYog1VDHRHzrGuPPGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.14.0/24
Signature Algorithm: sha256WithRSAEncryption
70:6b:95:f0:cb:c2:86:e3:38:6c:e6:5f:ff:c8:e9:28:e7:d7:
92:87:75:c4:c4:b7:c8:b5:2f:eb:e5:99:5e:f3:d3:31:a8:4d:
32:5c:9f:77:2a:0c:fe:ff:fd:1f:75:1b:dd:c0:a2:cf:4f:e4:
0c:09:f2:66:10:f1:93:81:7d:f8:60:5f:92:af:93:fe:d3:9e:
59:cc:dd:f2:ff:b3:35:97:4a:a3:54:a3:65:0d:ac:17:39:34:
c2:00:85:67:b7:76:3e:3b:72:1d:22:ee:66:b0:f4:5e:57:fc:
67:6c:9c:f3:0e:e9:9f:cf:07:29:cf:6e:46:ef:17:0d:c3:45:
f3:8d:ed:08:1a:19:8a:cd:27:9c:ae:30:87:d2:d2:c1:16:ac:
78:c0:7d:83:cd:f8:19:91:38:af:ba:fe:1e:51:8d:70:69:50:
a6:70:b9:35:20:dc:66:a3:2c:a9:dc:60:da:ff:c1:27:4d:07:
14:58:c1:12:1a:10:d7:83:87:0f:1f:4c:f3:17:21:dd:e9:02:
17:59:dd:32:6c:95:70:b4:55:fe:60:f9:f4:af:69:72:5c:c1:
00:d9:74:29:18:76:1d:7f:b4:71:1e:08:2d:cf:c4:f0:56:89:
f8:2c:86:11:f5:4b:73:9f:29:fc:5b:92:d6:7b:61:21:62:23:
fa:1f:0b:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5Jjpaon5SUGdx5dqcbovfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwMzE2MjMxNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjBiOGMwMTMxMDMwNjg2Mjg4MzU1NDMxZDExZjNhYzZiOGYzYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt4Ffnkz6se/tG6AYtS7GERqBOa1
+cFuM/2Vr5o0TxPTcl0kS6vixzs7utlv4S+xDOLG2AV3PHB1ttbXmvi07yQMCFi+
wE0HiE92CSh2YvhbbpGUziOzR5aPdYRI0MY4XOimP4SkNEos6v/pc3J2EnbNUWWh
pQz6CGbF9RdGCH7g+rX2c6kJKRMy7dzWe3fUfnOq20wV4p18zEeYCVs0i13iX7zz
jA/zivjwDuPJ59TCjywuZPqKI943jVZUS7xwVtKZr2w8rSVL2c/fWGrEPhI965b/
gRmippQHCpFc7mlceA3iXluDHRBOPV0SmQLYnqpzyaAmDej98q7FOxdtRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDYLjAExAwaGKINVQx0R86xrjzxrMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvTmd1TUFURURCb1lvZzFWREhSSHpyR3VQUEdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATVoOMA0G
CSqGSIb3DQEBCwUAA4IBAQBwa5Xwy8KG4zhs5l//yOko59eSh3XExLfItS/r5Zle
89MxqE0yXJ93Kgz+//0fdRvdwKLPT+QMCfJmEPGTgX34YF+Sr5P+055ZzN3y/7M1
l0qjVKNlDawXOTTCAIVnt3Y+O3IdIu5msPReV/xnbJzzDumfzwcpz25G7xcNw0Xz
je0IGhmKzSecrjCH0tLBFqx4wH2DzfgZkTivuv4eUY1waVCmcLk1INxmoyyp3GDa
/8EnTQcUWMESGhDXg4cPH0zzFyHd6QIXWd0ybJVwtFX+YPn0r2lyXMEA2XQpGHYd
f7RxHggtz8TwVon4LIYR9Utznyn8W5LWe2EhYiP6Hwsl
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:54 2024 by rpki-client on console-ams.rpki-client.org