Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/NkOb3gS8P_GpXCsdn2FndDXoKm4.roa
File: NkOb3gS8P_GpXCsdn2FndDXoKm4.roa (raw, json)
Hash identifier: 9UKNzIXlQ6/Br2DQJSeiY5s37aChHncF09Ul6PxbinE=
Subject key identifier: 36:43:9B:DE:04:BC:3F:F1:A9:5C:2B:1D:9F:61:67:74:35:E8:2A:6E
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 01857067207691F51E986DEA3FDCBACB6B31
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/NkOb3gS8P_GpXCsdn2FndDXoKm4.roa
Signing time: Mon 02 Jan 2023 02:54:44 +0000
ROA not before: Mon 02 Jan 2023 02:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 94.137.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:20:76:91:f5:1e:98:6d:ea:3f:dc:ba:cb:6b:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 02:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36439bde04bc3ff1a95c2b1d9f61677435e82a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:cf:88:fa:e9:26:f3:34:26:76:1c:3e:2f:
db:59:a0:53:30:0f:74:f3:f9:95:a3:f0:f6:4d:e0:
da:82:23:c7:cb:b8:4c:e8:86:7c:2b:e2:a2:7a:53:
d9:74:1c:a0:3b:53:96:2b:ae:aa:11:3a:68:d4:c7:
1e:92:ef:52:62:04:43:ec:77:90:56:b3:c5:b1:8a:
57:1c:5a:da:b8:46:17:05:36:16:dd:03:a5:03:fc:
f5:04:65:d2:10:e4:9e:98:66:5a:bb:b3:4b:09:cf:
c3:01:37:a0:88:a8:a9:04:04:5b:ad:ac:f9:d9:3e:
36:f3:19:83:39:da:ae:6c:f3:b6:6d:27:7a:ff:90:
90:b2:ee:a5:d0:df:16:75:93:46:23:2b:ad:3c:a3:
ee:27:51:78:8e:72:24:fe:63:bf:14:2f:21:5b:51:
63:ce:9c:4b:81:b2:f0:61:df:89:92:d3:f5:3a:1d:
50:64:0a:07:e0:95:14:1e:a9:98:85:61:b3:00:08:
dc:f9:2b:54:1b:c6:64:17:c1:67:3e:4e:01:d8:24:
e2:4b:53:42:31:ca:4b:0d:ab:f8:0c:8d:c8:e8:d0:
fe:55:b8:70:b4:c1:4a:b0:02:a9:d8:f8:6e:78:b2:
a2:ce:4e:25:52:6a:b1:aa:40:1b:62:31:1e:d3:cc:
f9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:43:9B:DE:04:BC:3F:F1:A9:5C:2B:1D:9F:61:67:74:35:E8:2A:6E
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/NkOb3gS8P_GpXCsdn2FndDXoKm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.77.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:92:ad:1b:f2:d6:d6:c6:b5:46:9c:a0:5c:21:7a:22:c3:3e:
a2:ea:15:24:d7:46:47:54:37:ff:3a:9a:5d:fc:97:83:16:bb:
f3:07:fb:f7:e7:28:f7:be:e8:51:31:6e:e7:3b:d5:7d:26:d4:
b9:9b:60:3c:6b:ef:2f:d4:c8:47:23:3a:24:79:5e:a7:cb:2d:
ba:73:e5:a1:f7:e8:1b:59:3c:0c:a7:47:c5:3f:a3:5d:b0:d0:
53:26:35:1d:36:79:3c:3c:2d:9a:ae:e5:70:14:de:2c:d9:65:
37:a1:41:03:9a:43:45:ac:90:5a:b6:85:08:d2:5a:1f:d7:c3:
f7:38:03:c0:92:9e:5d:ba:f5:f3:a0:4d:23:a4:d5:4a:14:87:
a4:72:ec:1a:af:ab:ad:82:e4:3f:33:71:0e:31:1e:ba:49:ca:
cb:fb:2d:f0:ef:47:e3:5e:29:b1:ab:4d:e3:67:f3:71:9f:be:
6f:c3:ec:14:30:60:c3:ac:27:66:3b:9b:ef:d8:78:98:7c:60:
79:dc:3a:5d:95:1a:e2:f4:bf:78:7e:94:ea:9e:8c:87:21:56:
f2:24:ec:11:58:fe:fd:4b:21:8f:99:a6:d0:af:84:e2:98:01:
0a:e3:53:30:8e:df:1b:9e:7f:76:5d:11:69:41:00:69:d6:aa:
c2:a3:df:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZyB2kfUemG3qP9y6y2sxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMwMTAyMDI1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjQzOWJkZTA0YmMzZmYxYTk1YzJiMWQ5ZjYxNjc3NDM1ZTgyYTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdLPiPrpJvM0JnYcPi/bWaBTMA90
8/mVo/D2TeDagiPHy7hM6IZ8K+KielPZdBygO1OWK66qETpo1Mceku9SYgRD7HeQ
VrPFsYpXHFrauEYXBTYW3QOlA/z1BGXSEOSemGZau7NLCc/DATegiKipBARbraz5
2T428xmDOdqubPO2bSd6/5CQsu6l0N8WdZNGIyutPKPuJ1F4jnIk/mO/FC8hW1Fj
zpxLgbLwYd+JktP1Oh1QZAoH4JUUHqmYhWGzAAjc+StUG8ZkF8FnPk4B2CTiS1NC
McpLDav4DI3I6ND+VbhwtMFKsAKp2PhueLKizk4lUmqxqkAbYjEe08z5AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZDm94EvD/xqVwrHZ9hZ3Q16CpuMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvTmtPYjNnUzhQX0dwWENzZG4yRm5kRFhvS200LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXolNMA0G
CSqGSIb3DQEBCwUAA4IBAQClkq0b8tbWxrVGnKBcIXoiwz6i6hUk10ZHVDf/Oppd
/JeDFrvzB/v35yj3vuhRMW7nO9V9JtS5m2A8a+8v1MhHIzokeV6nyy26c+Wh9+gb
WTwMp0fFP6NdsNBTJjUdNnk8PC2aruVwFN4s2WU3oUEDmkNFrJBatoUI0lof18P3
OAPAkp5duvXzoE0jpNVKFIekcuwar6utguQ/M3EOMR66ScrL+y3w70fjXimxq03j
Z/Nxn75vw+wUMGDDrCdmO5vv2HiYfGB53DpdlRri9L94fpTqnoyHIVbyJOwRWP79
SyGPmabQr4TimAEK41Mwjt8bnn92XRFpQQBp1qrCo9/h
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org