Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NgPDPvJ2yRuKu8wSRxghP4TpSNc.roa
File: NgPDPvJ2yRuKu8wSRxghP4TpSNc.roa (raw, json)
Hash identifier: lcjDr1P36gGQJAOnW7ERY07O9n8OU/mXqnskXWOHqKI=
Subject key identifier: 36:03:C3:3E:F2:76:C9:1B:8A:BB:CC:12:47:18:21:3F:84:E9:48:D7
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018746B1DDFBB6FEF91FFCE81E5ECA86BA41
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NgPDPvJ2yRuKu8wSRxghP4TpSNc.roa
Signing time: Mon 03 Apr 2023 10:37:54 +0000
ROA not before: Mon 03 Apr 2023 10:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.199.212.0/24 maxlen: 24
194.146.92.0/24 maxlen: 24
185.199.148.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
185.226.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 21:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:46:b1:dd:fb:b6:fe:f9:1f:fc:e8:1e:5e:ca:86:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Apr 3 10:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3603c33ef276c91b8abbcc124718213f84e948d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9d:f6:5b:55:aa:e0:76:dc:60:db:85:99:bb:
0b:da:9a:42:15:64:c6:f1:4d:b7:fd:3e:fa:06:15:
5b:76:9a:11:f3:4e:50:38:29:01:34:f3:11:ef:33:
6b:f0:8d:9b:b9:e3:7d:3a:d7:a4:44:c3:07:74:63:
f6:d6:dc:f4:55:40:74:a1:57:6b:ca:e3:20:db:9e:
8f:1c:af:77:ac:da:cc:87:89:38:31:ae:5e:b6:c6:
e6:88:94:f9:96:35:91:e9:b2:d8:f0:b0:91:52:54:
47:aa:4a:de:4b:42:7e:06:62:11:19:49:f8:19:ea:
d6:13:b3:81:3a:15:75:ab:b7:b3:b4:3e:9e:c3:69:
e7:6f:76:e4:0b:48:3a:82:7a:f7:fe:74:bb:18:53:
a3:aa:5b:2a:2b:d0:eb:ba:34:2d:00:1f:0b:4d:4d:
1d:6a:c6:b0:29:9e:35:75:fd:c1:13:d4:de:4f:c7:
72:8c:a4:cb:29:51:ad:b4:cc:66:57:d3:d4:1f:d5:
b0:3d:b0:20:a9:65:b9:0b:1d:9f:86:90:a3:9e:ff:
38:58:7d:f9:73:17:8e:44:60:97:98:d8:12:e3:db:
1c:a4:28:48:ef:8c:84:4f:15:81:b1:4f:07:9b:8e:
bf:4c:fe:50:77:78:da:e2:9b:5f:22:64:3c:13:03:
04:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:03:C3:3E:F2:76:C9:1B:8A:BB:CC:12:47:18:21:3F:84:E9:48:D7
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/NgPDPvJ2yRuKu8wSRxghP4TpSNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.247.0/24
185.199.148.0/24
185.199.212.0/24
185.226.180.0/24
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c5:64:09:9f:2b:43:92:c0:08:36:3d:f3:16:84:62:cf:a2:
7b:36:a0:c0:76:78:69:ae:57:e8:c8:3b:91:a4:cb:e2:60:50:
df:81:46:08:83:6e:49:b4:68:47:1b:04:ee:7e:88:f0:bc:26:
85:78:94:d2:51:69:36:d1:62:d4:c6:eb:ff:f0:d5:f6:90:0d:
9c:44:fb:71:eb:2f:04:3d:d8:3d:cd:d5:ae:41:69:0a:b9:78:
9b:d0:74:98:c5:b9:14:ef:aa:01:fa:a8:1c:c2:f0:fc:dc:bd:
b0:95:d7:9f:39:8d:f0:aa:48:ba:ab:bd:bd:84:14:c8:09:e8:
63:9c:ff:1d:ce:e6:71:06:9d:25:79:14:68:ce:63:11:5e:63:
4c:d6:3d:06:c6:62:d8:ef:dc:03:d6:97:7d:93:5d:51:63:44:
71:78:21:09:24:09:7a:80:ed:3d:e1:ea:48:82:b0:19:5f:97:
e8:bf:3f:6d:5f:c0:57:02:2b:61:f3:8f:1a:3d:34:ae:85:d5:
03:07:4a:0e:8f:b6:27:ab:c6:02:0b:8c:83:5b:b6:aa:af:da:
da:dc:f1:bd:7c:c7:f0:54:30:47:61:5a:e7:63:a4:72:d5:61:
44:92:85:a5:9c:f9:af:ad:6f:6f:f3:99:ed:26:59:69:c8:dd:
33:4a:1a:25
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYdGsd37tv75H/zoHl7KhrpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNDAzMTAzNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjAzYzMzZWYyNzZjOTFiOGFiYmNjMTI0NzE4MjEzZjg0ZTk0OGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJ32W1Wq4HbcYNuFmbsL2ppCFWTG
8U23/T76BhVbdpoR805QOCkBNPMR7zNr8I2bueN9OtekRMMHdGP21tz0VUB0oVdr
yuMg256PHK93rNrMh4k4Ma5etsbmiJT5ljWR6bLY8LCRUlRHqkreS0J+BmIRGUn4
GerWE7OBOhV1q7eztD6ew2nnb3bkC0g6gnr3/nS7GFOjqlsqK9DrujQtAB8LTU0d
asawKZ41df3BE9TeT8dyjKTLKVGttMxmV9PUH9WwPbAgqWW5Cx2fhpCjnv84WH35
cxeORGCXmNgS49scpChI74yETxWBsU8Hm46/TP5Qd3ja4ptfImQ8EwMEfwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFDYDwz7ydskbirvMEkcYIT+E6UjXMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvTmdQRFB2SjJ5UnVLdTh3U1J4Z2hQNFRwU05jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAT2L3AwQA
uceUAwQAucfUAwQAueK0AwQAwpJcMA0GCSqGSIb3DQEBCwUAA4IBAQCYxWQJnytD
ksAINj3zFoRiz6J7NqDAdnhprlfoyDuRpMviYFDfgUYIg25JtGhHGwTufojwvCaF
eJTSUWk20WLUxuv/8NX2kA2cRPtx6y8EPdg9zdWuQWkKuXib0HSYxbkU76oB+qgc
wvD83L2wldefOY3wqki6q729hBTICehjnP8dzuZxBp0leRRozmMRXmNM1j0GxmLY
79wD1pd9k11RY0RxeCEJJAl6gO094epIgrAZX5fovz9tX8BXAith848aPTSuhdUD
B0oOj7Ynq8YCC4yDW7aqr9ra3PG9fMfwVDBHYVrnY6Ry1WFEkoWlnPmvrW9v85nt
JllpyN0zShol
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:13 2024 by rpki-client on console-fra.rpki-client.org