Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/NPSIB1us-ERTQgrDgCpZH_BwbfU.roa
File: NPSIB1us-ERTQgrDgCpZH_BwbfU.roa (raw, json)
Hash identifier: shLvAOG2A4e7Qi/g5CESQnzbO4K/K5S/+SsUG9yltxQ=
Subject key identifier: 34:F4:88:07:5B:AC:F8:44:53:42:0A:C3:80:2A:59:1F:F0:70:6D:F5
Certificate issuer: /CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Certificate serial: 01856FCBB190D54B603950E31E6DB1906F2A
Authority key identifier: EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/NPSIB1us-ERTQgrDgCpZH_BwbfU.roa
Signing time: Mon 02 Jan 2023 00:04:58 +0000
ROA not before: Mon 02 Jan 2023 00:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15598
IP address blocks: 62.146.192.0/22 maxlen: 22
62.146.188.0/22 maxlen: 22
62.146.196.0/22 maxlen: 22
62.146.204.0/22 maxlen: 22
62.146.200.0/22 maxlen: 22
62.146.212.0/22 maxlen: 22
62.146.208.0/22 maxlen: 22
62.146.216.0/22 maxlen: 22
62.146.220.0/22 maxlen: 22
62.146.240.0/22 maxlen: 22
62.146.136.0/22 maxlen: 22
62.146.144.0/22 maxlen: 22
212.112.224.0/19 maxlen: 19
62.146.140.0/22 maxlen: 22
62.146.152.0/22 maxlen: 22
62.146.148.0/22 maxlen: 22
62.146.156.0/22 maxlen: 22
62.146.164.0/22 maxlen: 22
62.146.160.0/22 maxlen: 22
62.146.184.0/22 maxlen: 22
62.146.252.0/22 maxlen: 22
62.146.248.0/22 maxlen: 22
62.146.4.0/22 maxlen: 22
62.146.0.0/22 maxlen: 22
62.146.8.0/22 maxlen: 22
62.146.12.0/22 maxlen: 22
62.146.17.0/24 maxlen: 24
62.146.16.0/22 maxlen: 22
62.146.24.0/22 maxlen: 22
62.146.20.0/22 maxlen: 22
62.146.84.0/22 maxlen: 22
62.146.80.0/22 maxlen: 22
62.146.88.0/22 maxlen: 22
62.146.96.0/22 maxlen: 22
62.146.92.0/22 maxlen: 22
62.146.104.0/22 maxlen: 22
62.146.100.0/22 maxlen: 22
62.146.112.0/22 maxlen: 22
62.146.108.0/22 maxlen: 22
62.146.116.0/22 maxlen: 22
62.146.124.0/22 maxlen: 22
62.146.120.0/22 maxlen: 22
62.146.132.0/22 maxlen: 22
62.146.128.0/22 maxlen: 22
62.146.28.0/22 maxlen: 22
62.146.36.0/22 maxlen: 22
62.146.32.0/22 maxlen: 22
62.146.44.0/22 maxlen: 22
62.146.40.0/22 maxlen: 22
62.146.48.0/22 maxlen: 22
62.146.56.0/22 maxlen: 22
62.146.52.0/22 maxlen: 22
62.146.64.0/22 maxlen: 22
62.146.60.0/22 maxlen: 22
62.146.68.0/22 maxlen: 22
62.146.76.0/22 maxlen: 22
62.146.72.0/22 maxlen: 22
81.17.104.0/22 maxlen: 22
81.17.112.0/22 maxlen: 22
81.17.108.0/22 maxlen: 22
81.17.116.0/22 maxlen: 22
80.190.136.0/21 maxlen: 21
80.190.144.0/21 maxlen: 21
80.190.152.0/21 maxlen: 21
80.190.160.0/21 maxlen: 21
80.190.168.0/21 maxlen: 21
80.190.176.0/21 maxlen: 21
80.190.184.0/21 maxlen: 21
80.190.88.0/21 maxlen: 21
80.190.96.0/21 maxlen: 21
80.190.104.0/21 maxlen: 21
80.190.112.0/21 maxlen: 21
80.190.120.0/21 maxlen: 21
80.190.128.0/21 maxlen: 21
80.190.240.0/21 maxlen: 21
80.190.248.0/21 maxlen: 21
80.190.192.0/21 maxlen: 21
212.123.96.0/19 maxlen: 19
80.190.200.0/21 maxlen: 21
80.190.208.0/21 maxlen: 21
80.190.216.0/21 maxlen: 21
80.190.224.0/21 maxlen: 21
80.190.232.0/21 maxlen: 21
82.149.68.0/22 maxlen: 22
82.149.84.0/22 maxlen: 22
82.149.88.0/22 maxlen: 22
82.149.92.0/22 maxlen: 22
82.149.64.0/22 maxlen: 22
80.190.32.0/21 maxlen: 21
80.190.40.0/21 maxlen: 21
80.190.48.0/21 maxlen: 21
80.190.56.0/21 maxlen: 21
80.190.64.0/21 maxlen: 21
80.190.0.0/21 maxlen: 21
80.190.8.0/21 maxlen: 21
80.190.16.0/21 maxlen: 21
80.190.24.0/21 maxlen: 21
2a01:138::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:b1:90:d5:4b:60:39:50:e3:1e:6d:b1:90:6f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3543aa00373e9e4d10e64c83d3779b378888c1
Validity
Not Before: Jan 2 00:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34f488075bacf84453420ac3802a591ff0706df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:0d:46:93:5a:68:4a:98:99:e6:f0:59:50:
9f:b6:d1:a8:fc:30:7f:48:35:71:e1:42:9f:9c:6b:
6e:9c:ba:bf:a8:e5:37:6b:ac:69:52:cd:2d:b6:54:
3d:cc:82:a3:74:bd:56:fa:d9:d5:8d:90:22:3b:bf:
b7:fa:58:25:5d:66:24:a0:6c:33:e7:19:e8:cb:bc:
ad:1c:b8:ec:c4:2d:99:46:77:89:ac:0b:e3:25:c6:
01:11:06:7e:31:61:bd:70:43:01:cd:fc:c2:09:16:
ea:cd:63:4b:af:40:8b:a7:1c:f7:aa:2b:4e:3c:f2:
0e:c1:5a:bc:cc:07:2f:33:86:4b:c4:24:fc:a6:fd:
ae:6d:16:7f:d4:99:5c:18:54:2e:a7:6c:5e:76:e3:
67:0f:9c:a4:a8:8c:32:36:d9:cc:97:6d:c1:96:91:
5b:77:ae:08:86:19:c7:6d:c4:05:a7:74:0e:55:23:
af:4b:c6:fc:22:7b:78:9c:85:7d:c4:44:42:f5:85:
04:22:ac:44:e2:49:59:de:0d:71:25:74:ff:83:04:
09:e9:41:ca:b2:7a:0f:9c:1c:b2:e5:b0:f7:d1:62:
b9:16:26:f1:7a:bb:f9:9c:aa:6d:20:a0:a9:18:7d:
7f:81:25:c2:8d:fb:88:21:0e:c5:06:85:df:e3:6a:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F4:88:07:5B:AC:F8:44:53:42:0A:C3:80:2A:59:1F:F0:70:6D:F5
X509v3 Authority Key Identifier:
keyid:EC:35:43:AA:00:37:3E:9E:4D:10:E6:4C:83:D3:77:9B:37:88:88:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DVDqgA3Pp5NEOZMg9N3mzeIiME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/NPSIB1us-ERTQgrDgCpZH_BwbfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/19e715-ffaa-4c43-b79a-56f6ecc1c121/1/7DVDqgA3Pp5NEOZMg9N3mzeIiME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.146.0.0-62.146.167.255
62.146.184.0-62.146.223.255
62.146.240.0/22
62.146.248.0/21
80.190.0.0-80.190.71.255
80.190.88.0-80.190.255.255
81.17.104.0-81.17.119.255
82.149.64.0/21
82.149.84.0-82.149.95.255
212.112.224.0/19
212.123.96.0/19
IPv6:
2a01:138::/32
Signature Algorithm: sha256WithRSAEncryption
29:cb:ba:3a:a3:10:9f:92:df:97:dd:0a:ef:1d:1c:39:ed:6f:
00:b9:22:ad:de:23:90:9b:2d:a5:7b:b3:9b:dc:9c:ea:ad:4b:
d0:d2:e4:21:dd:56:08:8b:c0:78:84:ee:8d:e5:9d:6f:8c:1f:
c7:67:95:59:00:89:ae:c0:2d:13:e2:2f:f9:99:71:68:0f:5c:
19:28:68:82:20:e4:b5:6b:07:8e:dd:16:b6:0f:fb:ee:34:40:
c3:d4:b9:ef:be:22:c6:55:05:26:f8:26:30:ed:8f:52:bd:52:
8f:eb:bb:f7:f1:ef:15:8e:49:db:e0:e1:cf:b5:d9:84:2a:07:
8e:47:39:4a:c8:2c:9a:e7:35:97:bf:f6:cb:54:58:35:54:fe:
1e:9a:b3:50:17:5d:d7:89:0f:bf:66:ea:46:4b:3a:6c:7a:a7:
1c:47:d4:18:42:da:80:1e:db:01:bd:06:d0:5f:c4:94:40:d8:
f9:f3:53:98:38:19:06:e4:72:52:63:e2:16:01:27:9b:df:fa:
a1:31:fd:d0:94:94:35:e7:df:fd:77:fb:8b:c6:7a:9b:ce:f4:
30:2a:62:04:b5:13:8a:24:d1:ce:5e:32:9d:39:33:0b:21:4b:
bf:34:60:b1:dd:99:eb:1d:c5:43:4e:65:eb:07:f5:fc:44:eb:
d2:4a:58:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:09 2024 by rpki-client on console-ams.rpki-client.org