Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/NwEcHgCJGtjzHtotykCZN7jn6nk.roa
File: NwEcHgCJGtjzHtotykCZN7jn6nk.roa (raw, json)
Hash identifier: 3A3C+Y+wrS/0lioY6Xr5vU8pQ51ae+9GC/GEARB95o8=
Subject key identifier: 37:01:1C:1E:00:89:1A:D8:F3:1E:DA:2D:CA:40:99:37:B8:E7:EA:79
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 018CC5DC7D684E86F6C67683875A077C3D52
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/NwEcHgCJGtjzHtotykCZN7jn6nk.roa
Signing time: Mon 01 Jan 2024 16:30:10 +0000
ROA not before: Mon 01 Jan 2024 16:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200982
IP address blocks: 213.59.156.0/23 maxlen: 23
81.177.196.0/23 maxlen: 23
213.59.136.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7d:68:4e:86:f6:c6:76:83:87:5a:07:7c:3d:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37011c1e00891ad8f31eda2dca409937b8e7ea79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:ac:09:5e:48:ea:45:44:f5:de:c3:d8:8d:
fa:c2:59:b6:e5:1f:e8:6c:4b:d8:7e:a7:ae:17:0b:
85:0e:fb:58:d6:43:f1:0b:9e:54:23:23:68:85:3f:
2a:ed:2a:c1:e0:6b:3e:a0:d7:a0:04:25:57:fe:02:
ed:cc:79:1a:aa:7c:8f:d5:c5:55:fc:a0:c2:37:14:
c0:10:c5:1a:68:06:33:2a:b4:f5:37:9f:9c:70:67:
bd:79:b0:17:2a:a7:ca:ae:c3:2b:bc:d4:29:85:ea:
e3:10:54:74:19:8d:7c:a5:63:f0:26:1b:65:75:c4:
40:63:c4:b0:d9:6e:04:e9:18:ba:54:73:5a:b6:9b:
48:79:86:42:12:1f:9d:e0:9b:c9:88:fe:a6:c2:27:
fe:b0:4b:fa:c0:6a:24:f1:df:b4:99:d0:8b:4c:eb:
eb:c5:c5:17:8c:14:6e:5d:3c:1c:0e:20:d9:f8:f0:
9a:d8:97:e2:86:b6:d2:f2:a8:1f:7d:b6:88:de:99:
97:39:d6:57:27:cc:e5:cf:7e:9d:87:23:46:a0:80:
63:21:34:12:ff:1a:79:2c:a1:23:a2:61:61:df:89:
0e:b3:7d:30:9f:8d:f1:ec:0a:ec:9a:a9:12:a5:b6:
38:53:5e:70:ae:2c:7d:2c:fc:4a:fb:37:44:84:c7:
9c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:01:1C:1E:00:89:1A:D8:F3:1E:DA:2D:CA:40:99:37:B8:E7:EA:79
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/NwEcHgCJGtjzHtotykCZN7jn6nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.196.0/23
213.59.136.0/22
213.59.156.0/23
Signature Algorithm: sha256WithRSAEncryption
40:63:bb:61:02:26:9c:ce:2e:f4:cf:84:82:55:20:60:9e:33:
05:9b:d8:6d:f3:3c:e3:e8:d9:06:58:cc:c9:48:ae:d9:0a:25:
2b:94:75:2c:89:f0:21:ce:47:bb:0e:d2:a4:db:24:d0:72:49:
83:92:59:db:8c:60:13:c1:71:26:f9:61:27:36:4b:5a:4d:3a:
36:cb:d6:ca:6d:14:de:45:ca:9d:df:04:29:b9:2c:83:77:4b:
ce:56:bf:c3:f1:05:bc:18:46:8c:ec:53:13:5f:3b:fc:a6:87:
18:ef:60:27:3e:ef:d5:f8:99:bb:4a:51:98:a8:56:70:83:57:
fe:93:47:c5:1a:03:4b:e2:37:78:53:49:01:82:71:6d:27:09:
19:20:33:c5:c5:4d:0a:b6:0b:87:d6:ff:89:f4:00:48:43:3f:
1f:e2:f2:00:57:f4:a7:8c:39:fe:c9:c6:9f:b1:8d:9f:40:a4:
fb:90:b5:17:c6:0f:98:24:13:1c:e5:2d:a1:19:eb:3a:18:a2:
da:fb:37:36:c3:a8:41:d0:c8:9b:e6:fe:bc:11:29:90:5e:0c:
46:70:8c:c2:c2:d6:e9:2f:ae:fe:c9:49:61:14:57:c3:05:84:
35:d6:53:b7:70:c1:f7:25:c1:80:83:32:c6:d0:f5:1b:68:74:
a7:b5:d9:d0
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzF3H1oTob2xnaDh1oHfD1SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZjRiMWMwYmZiYWQ0NmI4MTFlZWU1NjhhMThmYmFhMTRh
OWQ2ODcwHhcNMjQwMTAxMTYzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzAxMWMxZTAwODkxYWQ4ZjMxZWRhMmRjYTQwOTkzN2I4ZTdlYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkCsCV5I6kVE9d7D2I36wlm25R/o
bEvYfqeuFwuFDvtY1kPxC55UIyNohT8q7SrB4Gs+oNegBCVX/gLtzHkaqnyP1cVV
/KDCNxTAEMUaaAYzKrT1N5+ccGe9ebAXKqfKrsMrvNQpherjEFR0GY18pWPwJhtl
dcRAY8Sw2W4E6Ri6VHNatptIeYZCEh+d4JvJiP6mwif+sEv6wGok8d+0mdCLTOvr
xcUXjBRuXTwcDiDZ+PCa2JfihrbS8qgffbaI3pmXOdZXJ8zlz36dhyNGoIBjITQS
/xp5LKEjomFh34kOs30wn43x7ArsmqkSpbY4U15wrix9LPxK+zdEhMecfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDcBHB4AiRrY8x7aLcpAmTe45+p5MB8GA1UdIwQY
MBaAFJL0scC/utRrgR7uVooY+6oUqdaHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMt
YTA4NGY3NmM4ZTJiLzEvTndFY0hnQ0pHdGp6SHRvdHlrQ1pON2puNm5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi80Zjg1MTQtMmUyMC00OTM1LTk5NWMtYTA4NGY3NmM4ZTJi
LzEva3ZTeHdMLTYxR3VCSHU1V2loajdxaFNwMW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBUbHEAwQC
1TuIAwQB1TucMA0GCSqGSIb3DQEBCwUAA4IBAQBAY7thAiaczi70z4SCVSBgnjMF
m9ht8zzj6NkGWMzJSK7ZCiUrlHUsifAhzke7DtKk2yTQckmDklnbjGATwXEm+WEn
NktaTTo2y9bKbRTeRcqd3wQpuSyDd0vOVr/D8QW8GEaM7FMTXzv8pocY72AnPu/V
+Jm7SlGYqFZwg1f+k0fFGgNL4jd4U0kBgnFtJwkZIDPFxU0KtguH1v+J9ABIQz8f
4vIAV/SnjDn+ycafsY2fQKT7kLUXxg+YJBMc5S2hGes6GKLa+zc2w6hB0Mib5v68
ESmQXgxGcIzCwtbpL67+yUlhFFfDBYQ11lO3cMH3JcGAgzLG0PUbaHSntdnQ
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:49 2025 by rpki-client