Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/nixhTZIgUHgSX15NlLjBKHF13GA.roa
File: nixhTZIgUHgSX15NlLjBKHF13GA.roa (raw, json)
Hash identifier: PAiKoiLop2X9GF9G9Eo+VuyQqB+bMzEkYAqINdrDWog=
Subject key identifier: 9E:2C:61:4D:92:20:50:78:12:5F:5E:4D:94:B8:C1:28:71:75:DC:60
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 0185707978FE30FA5469C81D4342ADDB162D
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/nixhTZIgUHgSX15NlLjBKHF13GA.roa
Signing time: Mon 02 Jan 2023 03:14:47 +0000
ROA not before: Mon 02 Jan 2023 03:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 94.176.212.0/24 maxlen: 24
89.34.239.0/24 maxlen: 24
77.81.103.0/24 maxlen: 24
89.43.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Jan 2023 17:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:78:fe:30:fa:54:69:c8:1d:43:42:ad:db:16:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Jan 2 03:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e2c614d92205078125f5e4d94b8c1287175dc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:d1:10:b3:a6:33:d3:3e:5c:c2:9a:22:1d:
f8:6d:1e:36:aa:9a:04:1d:d7:f4:f5:45:22:cd:f3:
bb:02:70:6b:7a:e6:67:da:ca:74:1c:81:fc:92:93:
8c:c3:60:94:11:1b:91:b6:53:90:8f:e9:bc:91:00:
2f:4b:6a:e2:96:95:a7:8f:ac:04:e8:33:84:f8:a7:
6c:7d:43:e8:99:84:bc:b2:dc:fa:6e:9d:47:9f:1d:
0d:0b:83:c1:33:50:14:7c:d2:90:2b:4e:f8:05:00:
b6:87:12:3a:8d:ea:65:c5:07:1f:9c:d7:c9:5d:f7:
b7:44:bd:a5:0d:3e:ed:83:c2:69:a3:ea:88:94:92:
1a:6b:dc:f2:80:08:8a:a6:fa:ab:92:ae:38:25:a2:
2c:6c:84:4a:16:23:c9:f3:56:0f:27:cd:70:b4:5b:
fc:6b:00:97:2c:08:3f:f0:17:21:76:d8:57:39:a1:
98:8b:d2:3a:9f:a5:33:d8:8b:af:fc:6b:97:11:d3:
1b:30:6e:01:2b:e8:08:23:4b:74:04:e7:53:d8:78:
d6:2d:4e:02:50:8d:6d:19:e5:31:c9:cc:56:b3:c8:
91:d2:36:0f:a1:6e:f1:dc:67:f7:7e:9a:c4:6d:e4:
f7:d1:e4:f0:2e:8e:d8:da:75:20:95:84:2f:23:d6:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2C:61:4D:92:20:50:78:12:5F:5E:4D:94:B8:C1:28:71:75:DC:60
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/nixhTZIgUHgSX15NlLjBKHF13GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.103.0/24
89.34.239.0/24
89.43.34.0/24
94.176.212.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:30:1b:db:c7:5d:82:76:dc:1e:da:54:d5:62:f3:27:e5:48:
85:16:3a:90:95:70:18:2c:82:d4:56:e1:bb:4f:24:3e:b4:a6:
17:11:7c:c9:95:ab:c7:33:d0:3f:ab:f7:4b:d2:43:b9:83:d7:
c2:55:f5:20:17:4c:f9:a3:96:4b:f9:d6:fe:e4:38:2f:eb:88:
c0:d4:b2:da:83:d1:8b:e5:f4:59:d0:e1:64:1a:17:04:dc:fa:
d0:2b:2b:e7:74:1c:74:af:81:8d:ea:00:a2:58:5a:c0:4e:16:
53:10:f7:8f:b1:73:d5:05:07:9e:3c:70:0d:de:1d:8e:30:71:
cd:28:4b:b2:4e:df:e4:c4:bf:c4:da:f9:07:0f:28:bf:0e:68:
02:53:2c:5f:39:02:36:c7:3a:76:95:b1:58:3a:64:f8:ff:ce:
8a:4f:e8:12:73:b9:16:e8:ec:26:f3:d0:ca:e8:58:e7:25:21:
87:4e:99:a4:b8:5c:d6:5d:d0:cd:bc:cf:65:3c:7f:d7:6c:99:
04:a6:46:24:2a:f2:ab:cb:10:4c:a3:6c:a4:92:95:35:63:26:
b0:fe:83:04:ad:ad:ef:c3:aa:04:eb:50:1b:88:64:8d:f8:72:
ec:11:f3:a5:38:c8:d6:6e:89:a4:b9:5b:e5:7e:f6:77:52:d0:
72:8c:01:1c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVweXj+MPpUacgdQ0Kt2xYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjMwMTAyMDMxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTJjNjE0ZDkyMjA1MDc4MTI1ZjVlNGQ5NGI4YzEyODcxNzVkYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz7RELOmM9M+XMKaIh34bR42qpoE
Hdf09UUizfO7AnBreuZn2sp0HIH8kpOMw2CUERuRtlOQj+m8kQAvS2rilpWnj6wE
6DOE+KdsfUPomYS8stz6bp1Hnx0NC4PBM1AUfNKQK074BQC2hxI6jeplxQcfnNfJ
Xfe3RL2lDT7tg8Jpo+qIlJIaa9zygAiKpvqrkq44JaIsbIRKFiPJ81YPJ81wtFv8
awCXLAg/8BchdthXOaGYi9I6n6Uz2Iuv/GuXEdMbMG4BK+gII0t0BOdT2HjWLU4C
UI1tGeUxycxWs8iR0jYPoW7x3Gf3fprEbeT30eTwLo7Y2nUglYQvI9b5lwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ4sYU2SIFB4El9eTZS4wShxddxgMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvbml4aFRaSWdVSGdTWDE1TmxMakJLSEYxM0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATVFnAwQA
WSLvAwQAWSsiAwQAXrDUMA0GCSqGSIb3DQEBCwUAA4IBAQCrMBvbx12Cdtwe2lTV
YvMn5UiFFjqQlXAYLILUVuG7TyQ+tKYXEXzJlavHM9A/q/dL0kO5g9fCVfUgF0z5
o5ZL+db+5Dgv64jA1LLag9GL5fRZ0OFkGhcE3PrQKyvndBx0r4GN6gCiWFrAThZT
EPePsXPVBQeePHAN3h2OMHHNKEuyTt/kxL/E2vkHDyi/DmgCUyxfOQI2xzp2lbFY
OmT4/86KT+gSc7kW6Owm89DK6FjnJSGHTpmkuFzWXdDNvM9lPH/XbJkEpkYkKvKr
yxBMo2ykkpU1Yyaw/oMEra3vw6oE61AbiGSN+HLsEfOlOMjWbomkuVvlfvZ3UtBy
jAEc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:06 2024 by rpki-client on console-ams.rpki-client.org