Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/NwYuMPtSYNKUJwqi86KdbbPGlqs.roa
File: NwYuMPtSYNKUJwqi86KdbbPGlqs.roa (raw, json)
Hash identifier: gdJHNlIqC4BT8ATGiAEjz5GS5vWinXJqiMqeDgmGRB8=
Subject key identifier: 37:06:2E:30:FB:52:60:D2:94:27:0A:A2:F3:A2:9D:6D:B3:C6:96:AB
Certificate issuer: /CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Certificate serial: 01867943935D7C15D3E3BFF94E99DDA0597F
Authority key identifier: 79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/NwYuMPtSYNKUJwqi86KdbbPGlqs.roa
Signing time: Wed 22 Feb 2023 13:15:17 +0000
ROA not before: Wed 22 Feb 2023 13:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213047
IP address blocks: 185.103.118.0/24 maxlen: 24
91.234.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:43:93:5d:7c:15:d3:e3:bf:f9:4e:99:dd:a0:59:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a295c80b54c2dbe77ba47de7daec6b986021b4
Validity
Not Before: Feb 22 13:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37062e30fb5260d294270aa2f3a29d6db3c696ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:99:7f:ff:91:54:22:09:e8:4e:5f:df:11:
98:3b:f6:32:18:1b:e2:74:e8:8a:7c:34:e5:56:7f:
45:e8:fc:49:62:89:9b:46:6d:7d:3d:68:d2:10:49:
bb:39:56:b1:8b:b1:84:5c:e3:74:b1:9d:8e:4b:fe:
96:b5:50:8b:2d:dd:63:04:28:d1:48:3a:bc:5c:94:
8c:9b:83:f1:f0:41:cf:af:4f:e8:f1:1d:72:58:3d:
26:6b:0f:06:19:89:58:eb:1f:57:67:aa:6f:72:54:
fa:f5:6f:e6:35:a3:d4:82:9b:11:76:ca:39:ac:8d:
c3:31:4c:9f:67:12:96:0f:c8:1c:45:21:6c:88:e1:
a9:f1:77:86:27:38:47:35:9c:de:e8:7e:9a:01:30:
f1:60:08:a7:88:62:94:98:b7:26:d2:e4:70:2d:eb:
fb:6b:de:16:f5:b8:d5:5f:2e:b6:72:bc:72:32:7c:
33:2f:b9:ad:8d:22:29:e9:52:51:b3:62:e1:db:71:
7d:63:4c:d3:40:9c:45:9c:0e:f3:ab:46:3c:8a:e9:
bc:b3:7c:a6:6f:2d:f7:c7:20:77:2e:e7:48:57:f2:
b8:93:d3:3f:92:43:ed:55:a8:fb:91:af:3f:88:23:
6f:bc:47:ab:f1:1c:f9:50:2a:eb:87:e4:dc:b1:18:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:06:2E:30:FB:52:60:D2:94:27:0A:A2:F3:A2:9D:6D:B3:C6:96:AB
X509v3 Authority Key Identifier:
keyid:79:A2:95:C8:0B:54:C2:DB:E7:7B:A4:7D:E7:DA:EC:6B:98:60:21:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaKVyAtUwtvne6R959rsa5hgIbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/NwYuMPtSYNKUJwqi86KdbbPGlqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d1da6a-4919-499a-9a41-2bbb48efb0ed/1/eaKVyAtUwtvne6R959rsa5hgIbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.236.0/24
185.103.118.0/24
Signature Algorithm: sha256WithRSAEncryption
56:61:81:8e:5d:30:05:37:a5:04:24:55:b1:c6:bb:03:4b:1e:
a8:34:e8:19:ef:06:a7:14:5d:68:d7:20:44:e8:f1:47:ec:73:
18:52:7c:a0:0f:e3:cb:50:14:14:b5:eb:96:7c:5f:72:ca:e9:
98:10:da:ca:54:e8:43:73:74:58:b4:76:7d:86:9f:13:fa:9a:
0b:08:72:94:20:da:1b:b1:da:a3:87:2e:19:f9:2e:41:3f:5d:
37:83:78:11:74:11:bb:d1:6a:56:9f:1f:eb:e9:e4:d6:06:cc:
9b:e3:e1:e3:93:42:01:f7:db:49:9c:0d:ba:86:54:ea:4d:aa:
e5:d3:87:39:b2:fe:b6:d0:97:a8:d5:75:6a:9a:a0:93:4d:46:
28:c9:5c:19:97:83:61:7f:0a:5f:a2:5e:46:01:58:6c:08:e5:
62:3c:33:3f:e6:5d:08:16:34:0f:9e:5f:93:64:82:9c:df:4a:
2c:a3:2b:a8:4d:f4:6a:fe:c0:f8:5a:90:37:7e:77:53:d7:ef:
02:8c:79:16:16:50:44:63:5d:73:ca:62:f2:9f:09:ab:d9:90:
2a:8a:65:24:a2:b5:7a:98:cf:ac:14:ed:37:76:6d:76:88:71:
51:3d:51:e2:8d:95:63:6d:2f:f7:c4:df:40:00:7e:0d:73:3e:
d0:22:ef:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ5Q5NdfBXT47/5TpndoFl/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTI5NWM4MGI1NGMyZGJlNzdiYTQ3ZGU3ZGFlYzZiOTg2
MDIxYjQwHhcNMjMwMjIyMTMxNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzA2MmUzMGZiNTI2MGQyOTQyNzBhYTJmM2EyOWQ2ZGIzYzY5NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu6Zf/+RVCIJ6E5f3xGYO/YyGBvi
dOiKfDTlVn9F6PxJYombRm19PWjSEEm7OVaxi7GEXON0sZ2OS/6WtVCLLd1jBCjR
SDq8XJSMm4Px8EHPr0/o8R1yWD0maw8GGYlY6x9XZ6pvclT69W/mNaPUgpsRdso5
rI3DMUyfZxKWD8gcRSFsiOGp8XeGJzhHNZze6H6aATDxYAiniGKUmLcm0uRwLev7
a94W9bjVXy62crxyMnwzL7mtjSIp6VJRs2Lh23F9Y0zTQJxFnA7zq0Y8ium8s3ym
by33xyB3LudIV/K4k9M/kkPtVaj7ka8/iCNvvEer8Rz5UCrrh+TcsRgMDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDcGLjD7UmDSlCcKovOinW2zxparMB8GA1UdIwQY
MBaAFHmilcgLVMLb53ukfefa7GuYYCG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFLVnlBdFV3dHZuZTZSOTU5cnNhNWhnSWJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kMWRhNmEtNDkxOS00OTlhLTlhNDEt
MmJiYjQ4ZWZiMGVkLzEvTndZdU1QdFNZTktVSndxaTg2S2RiYlBHbHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9kMWRhNmEtNDkxOS00OTlhLTlhNDEtMmJiYjQ4ZWZiMGVk
LzEvZWFLVnlBdFV3dHZuZTZSOTU5cnNhNWhnSWJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+rsAwQA
uWd2MA0GCSqGSIb3DQEBCwUAA4IBAQBWYYGOXTAFN6UEJFWxxrsDSx6oNOgZ7wan
FF1o1yBE6PFH7HMYUnygD+PLUBQUteuWfF9yyumYENrKVOhDc3RYtHZ9hp8T+poL
CHKUINobsdqjhy4Z+S5BP103g3gRdBG70WpWnx/r6eTWBsyb4+Hjk0IB99tJnA26
hlTqTarl04c5sv620Jeo1XVqmqCTTUYoyVwZl4Nhfwpfol5GAVhsCOViPDM/5l0I
FjQPnl+TZIKc30osoyuoTfRq/sD4WpA3fndT1+8CjHkWFlBEY11zymLynwmr2ZAq
imUkorV6mM+sFO03dm12iHFRPVHijZVjbS/3xN9AAH4Ncz7QIu8A
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:05 2024 by rpki-client on console-fra.rpki-client.org