Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/NW_03pRUpFClinQY9lt_tKLd4_s.roa
File: NW_03pRUpFClinQY9lt_tKLd4_s.roa (raw, json)
Hash identifier: q8fSj8scLBB/9H9+qe3EXrZq9GfehiiLKAfvip90Wr4=
Subject key identifier: 35:6F:F4:DE:94:54:A4:50:A5:8A:74:18:F6:5B:7F:B4:A2:DD:E3:FB
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 01856E2FAEC016BD7D29A247DCEFAC343AAB
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/NW_03pRUpFClinQY9lt_tKLd4_s.roa
Signing time: Sun 01 Jan 2023 16:34:56 +0000
ROA not before: Sun 01 Jan 2023 16:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 931
IP address blocks: 89.35.48.0/24 maxlen: 24
89.37.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:ae:c0:16:bd:7d:29:a2:47:dc:ef:ac:34:3a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 1 16:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=356ff4de9454a450a58a7418f65b7fb4a2dde3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:03:54:66:30:1e:91:b1:c8:8d:8f:49:5f:14:
74:bb:83:67:1b:13:2a:56:be:8b:aa:9c:89:cc:ce:
c9:ea:4f:1f:81:89:30:fa:20:8a:b1:b7:55:d5:8e:
df:63:88:f2:ca:96:25:b4:1d:36:00:83:74:29:2d:
0c:a2:a3:ab:06:01:54:8a:f2:91:3b:1b:2d:48:09:
91:3b:73:fd:35:87:56:e0:1c:56:4f:95:ad:0d:8a:
ce:bb:29:03:ef:1f:de:ca:01:7c:79:06:13:c9:d6:
67:e8:59:c6:8a:de:31:29:a7:e1:14:f8:a4:96:8b:
32:aa:c6:ee:ce:1a:ed:70:6e:c0:0e:73:e8:10:85:
51:ff:a2:95:2a:fb:eb:29:18:36:3a:73:fb:28:d6:
43:77:df:40:a6:61:5c:2d:ec:88:46:17:06:77:29:
33:12:f4:bc:ce:23:c9:39:55:ac:45:b3:f0:be:15:
19:92:5b:f4:af:da:46:c5:ac:89:b3:20:b6:33:a3:
4b:37:a1:63:f0:72:4f:f9:8d:95:d3:e3:23:bc:5b:
db:b2:27:5c:b9:fc:2c:a3:d5:bd:fc:3a:fe:76:d7:
7a:fb:07:bb:25:4f:d8:69:a1:0e:3a:2b:37:17:cd:
dd:1d:85:a1:21:de:e5:78:53:02:70:ce:a2:e3:43:
cc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6F:F4:DE:94:54:A4:50:A5:8A:74:18:F6:5B:7F:B4:A2:DD:E3:FB
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/NW_03pRUpFClinQY9lt_tKLd4_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.48.0/24
89.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0e:16:0f:ad:3b:00:9f:92:3a:47:71:88:38:57:27:6f:d3:
4a:c7:e6:3a:34:da:a1:c1:bf:20:60:15:d5:72:72:94:f9:81:
3e:1a:ed:9d:af:71:a7:2a:31:21:88:7a:4b:45:3f:3a:b7:f8:
33:9c:8d:1b:cb:15:89:e5:66:81:e7:24:dc:d0:5c:8a:c6:a6:
fb:9d:3d:38:9c:35:ed:29:09:d6:27:b7:ae:41:88:3c:e1:c4:
74:2d:1d:0d:ab:c0:ab:cd:56:5b:87:a6:72:15:c2:07:70:f7:
aa:92:11:4e:d3:2e:e1:5f:6c:fd:e6:79:46:ad:0c:60:e2:80:
74:aa:f1:54:55:3f:c7:eb:dc:c9:fc:79:bb:fa:24:93:da:69:
74:3e:07:3b:1c:9e:e9:54:43:43:d4:8c:0c:0e:68:8e:6d:13:
40:6c:a1:f9:f5:8a:6f:f8:e5:52:16:9e:f0:b7:90:ae:c6:84:
ab:cf:90:2d:8e:74:b9:d4:ae:54:14:5f:51:b9:eb:5b:ff:8f:
b4:ac:ec:02:e4:32:b6:b5:b1:9b:c9:a4:e3:a1:af:b3:82:0c:
56:6d:0f:a5:f9:70:a3:a0:fa:43:54:6c:6d:d5:98:e8:54:c8:
6e:01:47:df:d0:bb:51:69:31:9e:41:71:25:22:b4:49:c0:e4:
6b:90:93:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuL67AFr19KaJH3O+sNDqrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0
MzI2MTIwHhcNMjMwMTAxMTYzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTZmZjRkZTk0NTRhNDUwYTU4YTc0MThmNjViN2ZiNGEyZGRlM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQNUZjAekbHIjY9JXxR0u4NnGxMq
Vr6LqpyJzM7J6k8fgYkw+iCKsbdV1Y7fY4jyypYltB02AIN0KS0MoqOrBgFUivKR
OxstSAmRO3P9NYdW4BxWT5WtDYrOuykD7x/eygF8eQYTydZn6FnGit4xKafhFPik
losyqsbuzhrtcG7ADnPoEIVR/6KVKvvrKRg2OnP7KNZDd99ApmFcLeyIRhcGdykz
EvS8ziPJOVWsRbPwvhUZklv0r9pGxayJsyC2M6NLN6Fj8HJP+Y2V0+MjvFvbsidc
ufwso9W9/Dr+dtd6+we7JU/YaaEOOis3F83dHYWhId7leFMCcM6i40PMjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDVv9N6UVKRQpYp0GPZbf7Si3eP7MB8GA1UdIwQY
MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt
MmNkZTY1ZjMxMTJhLzEvTldfMDNwUlVwRkNsaW5RWTlsdF90S0xkNF9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh
LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSMwAwQA
WSVjMA0GCSqGSIb3DQEBCwUAA4IBAQAeDhYPrTsAn5I6R3GIOFcnb9NKx+Y6NNqh
wb8gYBXVcnKU+YE+Gu2dr3GnKjEhiHpLRT86t/gznI0byxWJ5WaB5yTc0FyKxqb7
nT04nDXtKQnWJ7euQYg84cR0LR0Nq8CrzVZbh6ZyFcIHcPeqkhFO0y7hX2z95nlG
rQxg4oB0qvFUVT/H69zJ/Hm7+iST2ml0Pgc7HJ7pVEND1IwMDmiObRNAbKH59Ypv
+OVSFp7wt5CuxoSrz5AtjnS51K5UFF9Ruetb/4+0rOwC5DK2tbGbyaTjoa+zggxW
bQ+l+XCjoPpDVGxt1ZjoVMhuAUff0LtRaTGeQXElIrRJwORrkJNM
-----END CERTIFICATE-----
Generated at Thu Sep 14 14:07:31 2023 by rpki-client on console-ams.rpki-client.org