Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NB6qXyNH-4TifgHp1CZX0RVB1yw.roa
File: NB6qXyNH-4TifgHp1CZX0RVB1yw.roa (raw, json)
Hash identifier: Z8XW1pf9/9lNyGb0Zq131uqp516TLnH/qxtPLbIG51w=
Subject key identifier: 34:1E:AA:5F:23:47:FB:84:E2:7E:01:E9:D4:26:57:D1:15:41:D7:2C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188C39BC0BAE74CB921E9EEA41BDCB76160
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NB6qXyNH-4TifgHp1CZX0RVB1yw.roa
Signing time: Fri 16 Jun 2023 09:49:04 +0000
ROA not before: Fri 16 Jun 2023 09:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.157.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 23:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:9b:c0:ba:e7:4c:b9:21:e9:ee:a4:1b:dc:b7:61:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 16 09:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=341eaa5f2347fb84e27e01e9d42657d11541d72c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a1:09:6a:a3:cc:9c:cb:84:85:3b:5a:13:bd:
05:ad:b7:23:2c:41:4f:50:42:2f:81:32:4a:62:91:
e1:24:75:cf:96:05:3a:cd:c1:4e:0f:14:9a:01:f3:
39:db:dd:a6:97:0f:27:0c:1c:8d:01:80:1f:d8:e5:
aa:09:e3:d6:29:39:11:56:b2:ad:cf:4d:20:ec:38:
15:de:2e:9e:4e:3c:13:53:d5:e3:c8:c1:31:4e:71:
dc:ca:f1:2a:9d:1f:78:7d:0f:82:7d:5f:c4:f3:70:
50:1d:b8:2b:c1:db:f1:07:7d:b2:66:4b:90:b1:eb:
ea:28:e4:ae:16:0f:44:e1:56:cb:05:bc:f9:fe:fb:
3d:12:85:6c:4a:fb:36:78:fb:47:10:1c:8a:a2:9d:
de:d1:d2:8a:bd:ee:ec:8e:d7:f5:27:d2:f2:f5:1b:
cf:01:e3:41:0a:f0:e9:a8:c0:4d:58:11:3b:62:ed:
92:41:f1:fb:3c:29:9c:60:68:92:f8:5d:b2:ea:de:
bc:ba:2f:86:ad:b9:c4:5d:1c:db:d1:1a:6b:1a:25:
eb:3c:53:b3:a7:f0:e0:72:3d:42:f8:ca:d8:fd:2b:
f0:6b:5a:41:03:4e:bd:9c:15:1e:1f:c9:c6:c3:91:
b6:35:6d:cc:22:3a:2e:aa:f7:61:27:33:dd:18:c1:
81:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1E:AA:5F:23:47:FB:84:E2:7E:01:E9:D4:26:57:D1:15:41:D7:2C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NB6qXyNH-4TifgHp1CZX0RVB1yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a8:27:58:05:28:d3:31:6e:04:6c:c0:3b:87:47:ea:6d:ce:
9a:32:7a:9d:f0:1c:b4:f0:ba:41:bd:0b:bd:88:2a:e5:94:03:
f7:7a:17:51:a9:c7:5d:d0:9e:da:5a:a8:53:67:44:17:d8:74:
70:00:36:0c:2c:6e:e4:b8:84:82:24:36:de:ea:40:8d:06:56:
c7:8a:39:6b:2f:39:ed:60:89:a1:ea:98:f5:7e:8b:34:21:e8:
b8:a6:00:1b:8d:27:0d:cf:6f:26:4a:fa:7c:7c:68:04:c6:6b:
80:cb:a2:a8:5e:0a:8c:26:9f:aa:6f:c4:12:09:7e:00:75:16:
66:1b:2c:f1:f9:cc:b7:9b:af:da:4b:6b:3a:dd:cc:df:9d:99:
16:f8:90:b8:07:1e:7c:90:3a:80:ec:c5:a9:10:d1:cf:bb:78:
3d:f2:b2:a0:b3:66:51:60:2e:77:5b:bf:2a:09:2a:5f:14:0b:
84:76:d3:ff:87:21:1c:a8:68:65:76:28:0b:62:98:d7:fa:6a:
f1:4a:04:cf:c8:fc:35:99:eb:c7:c0:25:b7:7c:9d:17:86:c4:
93:50:ba:29:6d:ea:5e:2a:dd:d1:ce:d0:5c:11:6c:48:d7:2d:
7c:3d:22:1f:1a:ad:e9:9f:b5:08:57:32:de:a8:39:b2:6a:70:
88:d8:b5:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjDm8C650y5IenupBvct2FgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNjE2MDk0OTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDFlYWE1ZjIzNDdmYjg0ZTI3ZTAxZTlkNDI2NTdkMTE1NDFkNzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqEJaqPMnMuEhTtaE70FrbcjLEFP
UEIvgTJKYpHhJHXPlgU6zcFODxSaAfM5292mlw8nDByNAYAf2OWqCePWKTkRVrKt
z00g7DgV3i6eTjwTU9XjyMExTnHcyvEqnR94fQ+CfV/E83BQHbgrwdvxB32yZkuQ
sevqKOSuFg9E4VbLBbz5/vs9EoVsSvs2ePtHEByKop3e0dKKve7sjtf1J9Ly9RvP
AeNBCvDpqMBNWBE7Yu2SQfH7PCmcYGiS+F2y6t68ui+GrbnEXRzb0RprGiXrPFOz
p/Dgcj1C+MrY/Svwa1pBA069nBUeH8nGw5G2NW3MIjouqvdhJzPdGMGBQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQeql8jR/uE4n4B6dQmV9EVQdcsMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTkI2cVh5TkgtNFRpZmdIcDFDWlgwUlZCMXl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ3QMA0G
CSqGSIb3DQEBCwUAA4IBAQBNqCdYBSjTMW4EbMA7h0fqbc6aMnqd8By08LpBvQu9
iCrllAP3ehdRqcdd0J7aWqhTZ0QX2HRwADYMLG7kuISCJDbe6kCNBlbHijlrLznt
YImh6pj1fos0Iei4pgAbjScNz28mSvp8fGgExmuAy6KoXgqMJp+qb8QSCX4AdRZm
Gyzx+cy3m6/aS2s63czfnZkW+JC4Bx58kDqA7MWpENHPu3g98rKgs2ZRYC53W78q
CSpfFAuEdtP/hyEcqGhldigLYpjX+mrxSgTPyPw1mevHwCW3fJ0XhsSTULopbepe
Kt3RztBcEWxI1y18PSIfGq3pn7UIVzLeqDmyanCI2LUR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org