Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/nuzHO_PnmHJfoswRgo6q2rHsM0w.roa
File: nuzHO_PnmHJfoswRgo6q2rHsM0w.roa (raw, json)
Hash identifier: jafl2KytIeiWaVAt9DBD+YaxsJHHqjd9bIhxr2F0vZk=
Subject key identifier: 9E:EC:C7:3B:F3:E7:98:72:5F:A2:CC:11:82:8E:AA:DA:B1:EC:33:4C
Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Certificate serial: 01856FF01B56FE5600A01012BFEF19D7992A
Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/nuzHO_PnmHJfoswRgo6q2rHsM0w.roa
Signing time: Mon 02 Jan 2023 00:44:44 +0000
ROA not before: Mon 02 Jan 2023 00:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12861
IP address blocks: 212.29.67.0/24 maxlen: 24
212.29.66.0/24 maxlen: 24
212.29.69.0/24 maxlen: 24
212.29.68.0/24 maxlen: 24
212.29.90.0/24 maxlen: 24
91.237.216.0/23 maxlen: 24
212.29.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 12:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:1b:56:fe:56:00:a0:10:12:bf:ef:19:d7:99:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8
Validity
Not Before: Jan 2 00:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9eecc73bf3e798725fa2cc11828eaadab1ec334c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:14:88:39:a5:a3:d9:ce:df:bd:ca:93:7d:16:
e5:3a:a9:37:fe:17:ac:be:ec:b6:3d:34:3d:72:0e:
05:46:cc:56:d5:cc:5a:b8:c8:1d:0d:cd:ef:02:8c:
1c:97:bd:2b:7b:5e:39:d4:c4:af:a4:fb:30:e1:ef:
c7:e6:ba:a2:94:8f:79:c4:9d:bd:37:05:89:7a:2e:
e8:f7:06:3b:fb:1b:05:d0:df:35:e6:ff:8a:9f:45:
74:21:34:e2:f0:1c:0f:0f:75:46:c1:4b:db:76:3a:
6a:d6:cc:86:51:f1:73:d7:9c:6e:9b:94:e7:32:5e:
22:1b:6a:62:2e:cb:72:23:99:17:31:65:f2:7b:e7:
2e:c7:64:ee:b7:a0:96:eb:63:b3:e3:9a:58:c6:c7:
06:ff:3f:23:1f:db:ae:b3:78:15:68:01:02:df:81:
75:b5:4f:fb:72:21:bd:79:53:b5:a1:19:b7:09:9b:
fd:a8:ab:60:58:4f:b9:20:9b:24:c0:5f:19:16:d2:
6b:45:64:6c:a2:87:62:c9:93:c2:09:74:b6:25:e4:
08:80:67:68:4a:a1:92:68:2a:4d:6a:1e:cf:97:3d:
37:7a:65:8b:93:12:33:00:f0:06:8d:f5:50:82:6e:
49:82:82:b7:2b:53:63:23:ed:d8:74:d3:9d:d1:f0:
88:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EC:C7:3B:F3:E7:98:72:5F:A2:CC:11:82:8E:AA:DA:B1:EC:33:4C
X509v3 Authority Key Identifier:
keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/nuzHO_PnmHJfoswRgo6q2rHsM0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.216.0/23
212.29.64.0/24
212.29.66.0-212.29.69.255
212.29.90.0/24
Signature Algorithm: sha256WithRSAEncryption
20:1b:4e:b1:c5:83:58:62:e2:1d:22:7d:44:64:3f:ba:68:d1:
92:aa:10:64:ed:91:64:cc:03:7a:56:e3:c2:08:4f:42:52:6c:
90:3f:5f:e3:dd:34:17:7d:2e:42:aa:7c:9c:93:72:b7:fe:af:
25:4a:68:58:7d:ec:0d:47:a3:04:75:08:33:6e:24:6b:a2:cf:
5b:bc:37:38:b1:cb:c8:c2:39:12:64:de:cb:67:5a:e7:66:54:
6d:71:a8:c1:3a:3d:25:dd:1a:64:b7:be:63:5a:e1:b9:6c:09:
1e:1e:aa:cb:70:2a:03:3f:e0:cd:f4:4a:e5:ca:62:ca:6f:a2:
30:e6:da:aa:ba:99:b1:69:80:a1:c9:ad:6d:db:b1:75:57:b6:
b5:c1:0a:b0:4f:ed:87:9c:0a:27:d5:2b:8e:ee:6c:f9:80:50:
7e:d3:14:5f:17:45:a7:d3:29:86:4e:5b:22:5a:52:b6:06:fb:
42:f9:91:15:da:cb:8b:9d:b5:9f:62:43:c3:37:92:f3:5d:c5:
57:d2:fa:6a:94:d4:18:31:6d:9e:99:fb:66:61:c2:f3:36:56:
20:11:79:ef:c1:d0:26:55:51:25:4e:26:50:df:de:96:3c:e2:
0e:28:2a:69:80:6d:95:1d:3a:9f:36:85:1d:39:17:d3:b7:01:
f7:a6:bd:d4
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVv8BtW/lYAoBASv+8Z15kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1N2VkNmY1YmJhNjMzZDU1MjY5ZmRkMDU2YmNmNjBjNjhj
N2IyYjgwHhcNMjMwMTAyMDA0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWVjYzczYmYzZTc5ODcyNWZhMmNjMTE4MjhlYWFkYWIxZWMzMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxSIOaWj2c7fvcqTfRblOqk3/hes
vuy2PTQ9cg4FRsxW1cxauMgdDc3vAowcl70re1451MSvpPsw4e/H5rqilI95xJ29
NwWJei7o9wY7+xsF0N815v+Kn0V0ITTi8BwPD3VGwUvbdjpq1syGUfFz15xum5Tn
Ml4iG2piLstyI5kXMWXye+cux2Tut6CW62Oz45pYxscG/z8jH9uus3gVaAEC34F1
tU/7ciG9eVO1oRm3CZv9qKtgWE+5IJskwF8ZFtJrRWRsoodiyZPCCXS2JeQIgGdo
SqGSaCpNah7Plz03emWLkxIzAPAGjfVQgm5JgoK3K1NjI+3YdNOd0fCIOwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFJ7sxzvz55hyX6LMEYKOqtqx7DNMMB8GA1UdIwQY
MBaAFGV+1vW7pjPVUmn90Fa89gxox7K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2Qt
MGI5Yzc2YzBkOTFjLzEvbnV6SE9fUG5tSEpmb3N3UmdvNnEyckhzTTB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2QtMGI5Yzc2YzBkOTFj
LzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBW+3YAwQA
1B1AMAwDBAHUHUIDBAHUHUQDBADUHVowDQYJKoZIhvcNAQELBQADggEBACAbTrHF
g1hi4h0ifURkP7po0ZKqEGTtkWTMA3pW48IIT0JSbJA/X+PdNBd9LkKqfJyTcrf+
ryVKaFh97A1HowR1CDNuJGuiz1u8Nzixy8jCORJk3stnWudmVG1xqME6PSXdGmS3
vmNa4blsCR4eqstwKgM/4M30SuXKYspvojDm2qq6mbFpgKHJrW3bsXVXtrXBCrBP
7YecCifVK47ubPmAUH7TFF8XRafTKYZOWyJaUrYG+0L5kRXay4udtZ9iQ8M3kvNd
xVfS+mqU1BgxbZ6Z+2ZhwvM2ViARee/B0CZVUSVOJlDf3pY84g4oKmmAbZUdOp82
hR05F9O3AfemvdQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:52 2024 by rpki-client on console-ams.rpki-client.org