Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/NM129UjS66Uy3hdG0y94kl_B-KM.roa
File: NM129UjS66Uy3hdG0y94kl_B-KM.roa (raw, json)
Hash identifier: BfSdbvhf00tnGNqCmg5e3z6AkKSCUp5YWLyBbQNbfOs=
Subject key identifier: 34:CD:76:F5:48:D2:EB:A5:32:DE:17:46:D3:2F:78:92:5F:C1:F8:A3
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 01870F71C48BD0232694BE043338541F0F69
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/NM129UjS66Uy3hdG0y94kl_B-KM.roa
Signing time: Thu 23 Mar 2023 17:08:46 +0000
ROA not before: Thu 23 Mar 2023 17:08:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62263
IP address blocks: 185.42.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0f:71:c4:8b:d0:23:26:94:be:04:33:38:54:1f:0f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Mar 23 17:08:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34cd76f548d2eba532de1746d32f78925fc1f8a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:98:91:61:79:3b:fa:6b:61:43:f5:a2:87:cb:
f4:04:b2:e9:33:2a:e9:32:59:c1:97:88:0e:d8:ae:
f4:bc:0a:97:f2:00:d8:ed:69:77:9f:65:55:8c:a8:
f5:5f:36:a9:e3:6a:98:59:c4:c2:82:cf:e7:dd:1a:
df:8a:b4:9e:d4:e8:56:3c:d5:a6:73:5c:3e:d4:bd:
7b:a2:d5:c3:ea:91:a4:8a:fd:6d:15:73:e3:82:1c:
67:c4:2a:61:da:75:0e:c2:bd:1e:2c:e4:28:87:58:
3e:2e:eb:9d:5a:6d:42:a1:9c:b3:4e:85:e9:20:7e:
5d:ea:9d:af:10:8d:62:fb:6f:b8:10:64:4a:ed:00:
7a:2b:c2:4a:75:8c:89:fc:d0:3a:85:2b:fa:ba:f3:
0e:e7:8a:ac:d5:de:c4:b6:22:70:42:a0:c1:fb:3d:
27:b7:98:01:21:3e:ed:ba:7f:1b:ac:91:07:16:5b:
26:4c:27:fb:90:1a:c0:b8:e7:fc:32:83:7f:56:a7:
66:5e:c5:15:c0:89:bd:ea:c0:47:eb:bd:ca:79:ed:
1f:05:20:bc:2f:79:58:8f:5f:79:45:8d:94:2c:83:
a2:74:43:f2:da:33:f6:cf:e8:b5:16:2f:a0:0e:a6:
41:cf:4b:bf:f7:45:39:fb:8e:45:0e:05:6f:c9:f9:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CD:76:F5:48:D2:EB:A5:32:DE:17:46:D3:2F:78:92:5F:C1:F8:A3
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/NM129UjS66Uy3hdG0y94kl_B-KM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.26.0/24
Signature Algorithm: sha256WithRSAEncryption
62:74:f9:b7:81:3f:38:8e:cd:2f:ae:3f:b7:47:cb:f6:d7:73:
f6:b5:64:4d:f5:76:2b:f2:45:38:ce:69:b9:8e:1b:86:2e:db:
7b:05:b3:36:f0:54:ea:e8:41:dd:88:17:4e:d7:17:b2:47:4f:
18:88:29:a6:76:57:d7:15:a4:83:d4:c5:5d:f0:cb:71:bf:f1:
d8:44:25:a6:e5:f8:b9:63:a3:65:af:b3:e1:76:62:42:2a:0c:
d4:39:63:f5:83:fc:0b:02:8d:d3:c8:36:7d:fa:8e:8d:64:0d:
74:35:f9:2f:38:5c:1d:3c:89:76:78:b7:1d:86:59:52:49:db:
56:39:a6:b7:2f:2a:4b:a3:d4:89:7d:03:a3:9f:21:92:fa:49:
8f:01:fc:a7:6f:99:13:15:2a:8d:bf:bd:af:c1:8e:f4:e6:b7:
38:f6:f1:dd:47:e3:fc:05:18:3e:5f:a6:9e:e9:74:32:b2:e6:
60:08:86:af:de:cb:9c:37:bd:ce:32:d7:b8:7a:9d:c4:34:f2:
9e:e8:03:c5:b0:49:6d:92:60:96:87:fa:d6:7c:2e:d8:01:41:
f1:aa:a3:9a:23:4a:63:ae:bc:ae:45:2e:c5:1a:25:ff:cb:c0:
66:ff:4e:ce:28:cf:b8:db:0d:ae:34:3d:a8:d0:cd:a9:3c:3e:
33:10:6e:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcPccSL0CMmlL4EMzhUHw9pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDFjNDQzODMxY2Y5MzBiNzQ3ODcwOGQ3NmEzY2Y0NGQ4
OWExNjIwHhcNMjMwMzIzMTcwODQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGNkNzZmNTQ4ZDJlYmE1MzJkZTE3NDZkMzJmNzg5MjVmYzFmOGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZiRYXk7+mthQ/Wih8v0BLLpMyrp
MlnBl4gO2K70vAqX8gDY7Wl3n2VVjKj1Xzap42qYWcTCgs/n3RrfirSe1OhWPNWm
c1w+1L17otXD6pGkiv1tFXPjghxnxCph2nUOwr0eLOQoh1g+LuudWm1CoZyzToXp
IH5d6p2vEI1i+2+4EGRK7QB6K8JKdYyJ/NA6hSv6uvMO54qs1d7EtiJwQqDB+z0n
t5gBIT7tun8brJEHFlsmTCf7kBrAuOf8MoN/VqdmXsUVwIm96sBH673Kee0fBSC8
L3lYj195RY2ULIOidEPy2jP2z+i1Fi+gDqZBz0u/90U5+45FDgVvyfl59QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDTNdvVI0uulMt4XRtMveJJfwfijMB8GA1UdIwQY
MBaAFN4BxEODHPkwt0eHCNdqPPRNiaFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUt
ZWU3MzI4YWRjYzdjLzEvTk0xMjlValM2NlV5M2hkRzB5OTRrbF9CLUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUtZWU3MzI4YWRjYzdj
LzEvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSoaMA0G
CSqGSIb3DQEBCwUAA4IBAQBidPm3gT84js0vrj+3R8v213P2tWRN9XYr8kU4zmm5
jhuGLtt7BbM28FTq6EHdiBdO1xeyR08YiCmmdlfXFaSD1MVd8Mtxv/HYRCWm5fi5
Y6Nlr7PhdmJCKgzUOWP1g/wLAo3TyDZ9+o6NZA10NfkvOFwdPIl2eLcdhllSSdtW
Oaa3LypLo9SJfQOjnyGS+kmPAfynb5kTFSqNv72vwY705rc49vHdR+P8BRg+X6ae
6XQysuZgCIav3sucN73OMte4ep3ENPKe6APFsEltkmCWh/rWfC7YAUHxqqOaI0pj
rryuRS7FGiX/y8Bm/07OKM+42w2uND2o0M2pPD4zEG5+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org