Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/nxdVERPdjGX_8qZ1kcee_T0jgRM.roa
File: nxdVERPdjGX_8qZ1kcee_T0jgRM.roa (raw, json)
Hash identifier: QqBgoYkxSGY9rfRmr/Y9JKS7u+B+6WZFaCjOGriqZWg=
Subject key identifier: 9F:17:55:11:13:DD:8C:65:FF:F2:A6:75:91:C7:9E:FD:3D:23:81:13
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A0A17A039DD506AA4E9C7EA78A47
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/nxdVERPdjGX_8qZ1kcee_T0jgRM.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 194.195.101.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a0:a1:7a:03:9d:d5:06:aa:4e:9c:7e:a7:8a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f17551113dd8c65fff2a67591c79efd3d238113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:0b:22:d6:4b:ca:84:e3:5e:ce:92:bc:f0:
74:0d:1f:94:ac:3c:d2:fd:57:ed:e1:8b:59:c7:b6:
6d:c4:98:6b:1b:ec:6c:6c:5f:3e:e2:3c:26:9d:d7:
e1:de:80:24:af:a6:09:11:9b:2b:20:11:f9:00:4f:
32:7a:ca:d5:6a:29:7a:bb:a9:b8:19:1c:69:7c:3a:
4c:12:05:28:b2:13:6d:03:26:96:2b:43:cc:f2:ab:
3c:fd:00:77:f7:08:ec:e9:36:1a:5e:dc:3e:f2:f5:
1f:56:2e:18:4d:97:5b:0c:2b:31:67:96:37:b6:a1:
be:18:af:b0:2f:71:d1:5c:79:33:58:7a:9d:e1:32:
fe:ff:9c:6e:97:8e:c1:2e:aa:91:80:54:84:4d:9e:
aa:97:e1:1a:21:28:86:f8:ae:57:8b:0b:a7:15:8c:
46:65:09:27:92:5b:ab:01:ee:f8:68:16:6a:62:3a:
36:73:f0:3a:e6:6c:09:8e:2e:08:dc:e5:90:5b:e7:
74:7f:98:b6:75:02:78:32:41:47:37:f0:bb:b4:aa:
e8:71:f4:d7:18:8c:d7:8f:fd:b2:96:17:43:56:c6:
fb:5a:c3:ee:a1:0e:c5:0f:5d:ec:1f:34:4c:44:c7:
4d:7e:2a:30:3d:80:3f:ca:7a:50:be:c1:18:2c:21:
71:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:17:55:11:13:DD:8C:65:FF:F2:A6:75:91:C7:9E:FD:3D:23:81:13
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/nxdVERPdjGX_8qZ1kcee_T0jgRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.195.101.0/24
Signature Algorithm: sha256WithRSAEncryption
75:7e:a2:4e:42:a1:a9:5a:36:36:b9:5a:fe:01:e2:cf:01:a2:
95:b7:ed:72:7f:a1:ba:b8:de:16:9b:84:7a:95:c0:08:cc:e2:
a8:cc:bf:45:f1:9d:c0:1d:4c:59:7a:46:c2:b4:26:2e:77:31:
a1:68:f6:22:78:d2:86:ea:d7:86:68:98:4d:1b:a8:f7:31:5a:
65:45:e3:40:19:be:2a:74:a2:36:0f:b7:1d:1d:b2:bb:8c:d2:
d3:ad:db:dd:7f:f5:f0:b3:49:02:6c:e9:53:a4:27:1d:65:65:
0f:85:56:cb:9d:de:a9:c3:42:c3:81:fb:a4:14:5a:a7:8d:41:
9b:93:cd:7f:d1:8c:2e:10:8b:71:c2:16:e1:e3:6c:75:2c:91:
d6:73:14:ab:27:87:0a:ba:ff:86:eb:47:ec:73:70:a3:f1:6e:
93:fc:77:90:f2:cc:f9:14:4c:2a:b0:c1:30:39:a6:24:41:f0:
fe:bf:25:16:48:13:1c:6c:ee:d9:bd:cd:a5:ce:c5:c0:d8:3c:
a5:4d:52:99:ac:10:7e:62:ca:72:fc:b5:1f:5f:95:c4:79:7c:
39:97:fb:97:41:0b:15:30:a7:cc:f1:05:a8:7e:9e:53:a8:f0:
10:43:45:bc:76:23:dc:fa:ab:8f:af:77:ab:e9:a4:f0:81:9b:
f4:39:dd:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOaChegOd1QaqTpx+p4pHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjMwMTAyMDIwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjE3NTUxMTEzZGQ4YzY1ZmZmMmE2NzU5MWM3OWVmZDNkMjM4MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVYLItZLyoTjXs6SvPB0DR+UrDzS
/Vft4YtZx7ZtxJhrG+xsbF8+4jwmndfh3oAkr6YJEZsrIBH5AE8yesrVail6u6m4
GRxpfDpMEgUoshNtAyaWK0PM8qs8/QB39wjs6TYaXtw+8vUfVi4YTZdbDCsxZ5Y3
tqG+GK+wL3HRXHkzWHqd4TL+/5xul47BLqqRgFSETZ6ql+EaISiG+K5XiwunFYxG
ZQknklurAe74aBZqYjo2c/A65mwJji4I3OWQW+d0f5i2dQJ4MkFHN/C7tKrocfTX
GIzXj/2ylhdDVsb7WsPuoQ7FD13sHzRMRMdNfiowPYA/ynpQvsEYLCFxywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8XVRET3Yxl//KmdZHHnv09I4ETMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvbnhkVkVSUGRqR1hfOHFaMWtjZWVfVDBqZ1JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwsNlMA0G
CSqGSIb3DQEBCwUAA4IBAQB1fqJOQqGpWjY2uVr+AeLPAaKVt+1yf6G6uN4Wm4R6
lcAIzOKozL9F8Z3AHUxZekbCtCYudzGhaPYieNKG6teGaJhNG6j3MVplReNAGb4q
dKI2D7cdHbK7jNLTrdvdf/Xws0kCbOlTpCcdZWUPhVbLnd6pw0LDgfukFFqnjUGb
k81/0YwuEItxwhbh42x1LJHWcxSrJ4cKuv+G60fsc3Cj8W6T/HeQ8sz5FEwqsMEw
OaYkQfD+vyUWSBMcbO7Zvc2lzsXA2DylTVKZrBB+Yspy/LUfX5XEeXw5l/uXQQsV
MKfM8QWofp5TqPAQQ0W8diPc+quPr3er6aTwgZv0Od26
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:12 2024 by rpki-client on console-fra.rpki-client.org