Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/NGnliLAgzk1JJbjRexoHsi8RVmA.roa
File: NGnliLAgzk1JJbjRexoHsi8RVmA.roa (raw, json)
Hash identifier: 5Rhddq68PyD+HW6gbZLVrFZ2diTf5QjWz49+iuocCPY=
Subject key identifier: 34:69:E5:88:B0:20:CE:4D:49:25:B8:D1:7B:1A:07:B2:2F:11:56:60
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 0189A3426E51404007DCF2369DA20C5FBEBA
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/NGnliLAgzk1JJbjRexoHsi8RVmA.roa
Signing time: Sat 29 Jul 2023 20:06:27 +0000
ROA not before: Sat 29 Jul 2023 20:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205240
IP address blocks: 193.218.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Aug 2023 06:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a3:42:6e:51:40:40:07:dc:f2:36:9d:a2:0c:5f:be:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jul 29 20:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3469e588b020ce4d4925b8d17b1a07b22f115660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:5c:2c:33:da:a3:10:6a:83:4b:26:f6:2e:
b3:4c:7c:1b:57:22:6a:e0:5d:4f:47:9c:9b:f6:25:
ef:74:93:b2:55:35:2e:b5:5d:f5:3e:31:4c:cb:eb:
cd:7e:cd:c2:55:48:94:bc:23:66:b5:5d:95:eb:e6:
70:86:d5:02:74:5f:30:ed:dc:4e:15:ca:be:f2:35:
e8:36:5c:ed:c5:6e:d2:bc:7d:06:55:10:b0:1a:d8:
ae:84:32:82:da:fb:cc:b7:47:c6:1f:40:ae:05:d9:
4f:03:ac:f3:93:cb:d3:9d:07:d3:bc:09:76:b1:8c:
19:d1:7d:21:01:67:31:8e:7a:3e:89:fa:b7:54:2d:
9b:35:a0:a8:1c:33:72:60:23:0b:26:92:ad:04:62:
94:c7:45:fc:81:02:a2:f9:ac:67:a3:9a:e6:3e:d7:
83:2f:51:5d:16:25:5b:c4:63:09:43:ad:b0:1a:7d:
0e:96:6e:35:e7:4b:e7:47:43:61:5c:e6:ff:a6:c3:
5f:fb:25:14:d7:42:56:11:48:d2:37:79:3d:65:4e:
dd:1b:10:87:34:58:08:04:89:87:52:64:1d:3d:20:
85:70:77:61:23:dd:55:2a:36:86:0d:10:4c:c7:df:
bf:65:9e:ab:ac:7c:01:50:f6:69:13:b6:a7:2a:11:
b0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:69:E5:88:B0:20:CE:4D:49:25:B8:D1:7B:1A:07:B2:2F:11:56:60
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/NGnliLAgzk1JJbjRexoHsi8RVmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:50:9c:0e:36:89:3a:9d:9f:40:a5:61:fb:5b:9c:72:a9:db:
a3:6d:ef:19:31:30:7f:da:bf:e9:55:81:0d:81:3a:41:9f:30:
6a:30:01:d7:64:e8:74:c4:58:6d:74:ff:0a:03:83:37:f8:d7:
4f:f0:e2:35:67:16:4e:c2:76:47:c6:9a:a6:4e:c5:ef:ef:6d:
09:82:8d:22:66:1b:3b:e3:86:09:57:42:af:46:7c:fa:bc:2a:
58:b0:7e:ad:78:ef:d2:cd:10:e5:2f:0f:44:08:0b:7a:52:84:
e2:5b:27:cb:5a:b9:62:06:f6:0f:42:33:9f:65:4c:da:85:55:
43:07:c4:31:09:d1:2a:cd:eb:4d:af:cc:9e:1a:33:49:9c:da:
91:14:60:fc:88:ad:9b:15:5e:cf:46:2f:fd:05:9b:e6:6b:ae:
81:6f:6d:f5:3f:0e:2b:9f:1a:dd:fa:eb:e9:20:8c:2b:55:7d:
3c:8e:8d:64:b0:e2:10:67:dd:97:0d:98:4c:54:63:be:0f:62:
23:65:0c:b4:b0:fa:1d:a5:80:2f:65:a9:71:a6:8e:fc:12:83:
16:27:0f:01:72:fb:7d:6b:99:e3:b0:fa:4b:37:82:28:fb:e6:
8e:29:62:d2:09:b0:e4:f7:80:38:9b:5c:b3:40:d6:ff:a0:89:
ee:02:53:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmjQm5RQEAH3PI2naIMX766MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi
ODg2NWMwHhcNMjMwNzI5MjAwNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDY5ZTU4OGIwMjBjZTRkNDkyNWI4ZDE3YjFhMDdiMjJmMTE1NjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn19cLDPaoxBqg0sm9i6zTHwbVyJq
4F1PR5yb9iXvdJOyVTUutV31PjFMy+vNfs3CVUiUvCNmtV2V6+ZwhtUCdF8w7dxO
Fcq+8jXoNlztxW7SvH0GVRCwGtiuhDKC2vvMt0fGH0CuBdlPA6zzk8vTnQfTvAl2
sYwZ0X0hAWcxjno+ifq3VC2bNaCoHDNyYCMLJpKtBGKUx0X8gQKi+axno5rmPteD
L1FdFiVbxGMJQ62wGn0Olm4150vnR0NhXOb/psNf+yUU10JWEUjSN3k9ZU7dGxCH
NFgIBImHUmQdPSCFcHdhI91VKjaGDRBMx9+/ZZ6rrHwBUPZpE7anKhGw4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDRp5YiwIM5NSSW40XsaB7IvEVZgMB8GA1UdIwQY
MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It
ODk3OTlkZWFkYzQ3LzEvTkdubGlMQWd6azFKSmJqUmV4b0hzaThSVm1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3
LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwdrMMA0G
CSqGSIb3DQEBCwUAA4IBAQBqUJwONok6nZ9ApWH7W5xyqdujbe8ZMTB/2r/pVYEN
gTpBnzBqMAHXZOh0xFhtdP8KA4M3+NdP8OI1ZxZOwnZHxpqmTsXv720Jgo0iZhs7
44YJV0KvRnz6vCpYsH6teO/SzRDlLw9ECAt6UoTiWyfLWrliBvYPQjOfZUzahVVD
B8QxCdEqzetNr8yeGjNJnNqRFGD8iK2bFV7PRi/9BZvma66Bb231Pw4rnxrd+uvp
IIwrVX08jo1ksOIQZ92XDZhMVGO+D2IjZQy0sPodpYAvZalxpo78EoMWJw8Bcvt9
a5njsPpLN4Io++aOKWLSCbDk94A4m1yzQNb/oInuAlMt
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:00 2024 by rpki-client on console-ams.rpki-client.org