Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/NiTECWvA0I646ILvEM-cPzkHmaM.roa
File: NiTECWvA0I646ILvEM-cPzkHmaM.roa (raw, json)
Hash identifier: A4KfMMT0l/xVNtole+lw0gmeI7ylbDOqfMVrcoDNBpk=
Subject key identifier: 36:24:C4:09:6B:C0:D0:8E:B8:E8:82:EF:10:CF:9C:3F:39:07:99:A3
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 0185711E40AB1FD0E8752EA82894B604FA48
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/NiTECWvA0I646ILvEM-cPzkHmaM.roa
Signing time: Mon 02 Jan 2023 06:14:45 +0000
ROA not before: Mon 02 Jan 2023 06:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208964
IP address blocks: 193.28.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:40:ab:1f:d0:e8:75:2e:a8:28:94:b6:04:fa:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jan 2 06:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3624c4096bc0d08eb8e882ef10cf9c3f390799a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:a3:a7:bc:69:c2:49:e5:64:47:fd:89:c7:
9f:a6:7c:00:4d:91:73:62:9b:78:35:be:50:bb:64:
da:a4:7e:bb:eb:c4:e7:e5:b9:6a:e7:e2:15:b3:61:
d3:66:2c:87:82:11:b8:b7:05:ba:f6:94:42:1e:38:
90:c9:b7:cc:88:b8:25:1b:70:7f:2a:0a:37:bf:21:
51:9e:fe:a5:5f:df:84:06:34:c8:01:78:70:e1:a4:
f0:57:8e:e6:c1:d8:fc:13:86:6d:b1:4c:e5:38:14:
83:68:2b:b1:a5:1c:f8:77:68:a1:9b:71:0f:b4:f2:
50:1f:2e:56:ce:9a:9a:65:42:c6:a5:4d:81:75:35:
32:95:96:aa:f8:89:d1:ac:a0:ba:92:78:bf:8e:dc:
b3:ef:23:cb:ce:b3:e7:f3:2e:ca:8b:04:61:ce:59:
4d:58:67:c8:91:8e:77:22:77:ea:49:4f:c1:16:bb:
cc:80:43:44:47:73:18:ec:5f:d5:5d:b5:0c:cb:cb:
20:45:9e:1b:a4:fb:45:5c:6c:63:70:7b:63:9f:cc:
93:40:b4:c4:fb:bc:89:e6:82:ed:35:e3:a4:11:9e:
3a:cd:f7:76:3e:b0:47:37:05:3a:c8:7d:2d:ac:ec:
3b:a6:eb:04:10:24:7f:79:f2:f7:f5:f8:c1:93:91:
b5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:24:C4:09:6B:C0:D0:8E:B8:E8:82:EF:10:CF:9C:3F:39:07:99:A3
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/NiTECWvA0I646ILvEM-cPzkHmaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.243.0/24
Signature Algorithm: sha256WithRSAEncryption
69:98:f9:7f:da:e2:35:fb:f3:2e:aa:2e:72:74:f5:70:f7:18:
9f:4d:0a:ba:71:17:04:69:35:aa:b1:b8:96:be:3c:48:b5:d7:
fc:63:ac:e1:65:9b:07:7f:a4:e9:16:af:e5:76:03:01:e9:f6:
7c:28:9d:98:1e:26:d1:04:20:01:13:43:59:ee:f6:bd:49:df:
57:f3:3a:f1:d4:2b:9e:fb:d6:87:82:14:c9:d1:79:75:29:49:
a6:fd:eb:53:fa:80:1c:38:3e:46:e9:45:99:ff:65:69:4a:da:
3d:64:78:a8:97:76:9b:9f:95:40:16:b5:47:79:e6:12:12:94:
da:fe:45:ce:ab:86:b8:f2:f0:ec:ef:27:72:22:e7:6f:fa:36:
bf:a3:b5:2b:f0:3b:2d:0e:81:af:1f:9e:fc:1b:96:1a:f2:5e:
13:8e:57:00:b3:ae:3a:a7:cd:08:3a:ad:1d:23:7b:26:df:0c:
8f:d4:42:ad:3c:c0:66:65:c6:d3:96:fa:d7:33:dd:72:42:d0:
1c:c5:5f:23:e3:1f:41:b4:26:b6:d9:7b:fd:74:54:64:54:0a:
fd:77:8a:07:6a:db:9f:fb:84:ef:3c:b8:66:ea:c1:82:f0:a6:
70:0f:3e:ec:6f:c9:ff:85:f3:f9:27:87:e4:bd:4d:3e:99:0a:
aa:0c:2c:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxHkCrH9DodS6oKJS2BPpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1
Mjg1ZDEwHhcNMjMwMTAyMDYxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjI0YzQwOTZiYzBkMDhlYjhlODgyZWYxMGNmOWMzZjM5MDc5OWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAOjp7xpwknlZEf9icefpnwATZFz
Ypt4Nb5Qu2TapH6768Tn5blq5+IVs2HTZiyHghG4twW69pRCHjiQybfMiLglG3B/
Kgo3vyFRnv6lX9+EBjTIAXhw4aTwV47mwdj8E4ZtsUzlOBSDaCuxpRz4d2ihm3EP
tPJQHy5WzpqaZULGpU2BdTUylZaq+InRrKC6kni/jtyz7yPLzrPn8y7KiwRhzllN
WGfIkY53InfqSU/BFrvMgENER3MY7F/VXbUMy8sgRZ4bpPtFXGxjcHtjn8yTQLTE
+7yJ5oLtNeOkEZ46zfd2PrBHNwU6yH0trOw7pusEECR/efL39fjBk5G1AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDYkxAlrwNCOuOiC7xDPnD85B5mjMB8GA1UdIwQY
MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt
ZjJiYjY5ZTc1ZTc0LzEvTmlURUNXdkEwSTY0NklMdkVNLWNQemtIbWFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0
LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRzzMA0G
CSqGSIb3DQEBCwUAA4IBAQBpmPl/2uI1+/Muqi5ydPVw9xifTQq6cRcEaTWqsbiW
vjxItdf8Y6zhZZsHf6TpFq/ldgMB6fZ8KJ2YHibRBCABE0NZ7va9Sd9X8zrx1Cue
+9aHghTJ0Xl1KUmm/etT+oAcOD5G6UWZ/2VpSto9ZHiol3abn5VAFrVHeeYSEpTa
/kXOq4a48vDs7ydyIudv+ja/o7Ur8DstDoGvH578G5Ya8l4TjlcAs646p80IOq0d
I3sm3wyP1EKtPMBmZcbTlvrXM91yQtAcxV8j4x9BtCa22Xv9dFRkVAr9d4oHatuf
+4TvPLhm6sGC8KZwDz7sb8n/hfP5J4fkvU0+mQqqDCwf
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:01 2024 by rpki-client on console-ams.rpki-client.org