Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/NWsoAgg_w0XlTSykqJ0xOQuvktg.roa
File: NWsoAgg_w0XlTSykqJ0xOQuvktg.roa (raw, json)
Hash identifier: bqI9Xb8Xu0ZjBfi/e0Cstrr7EMglcGk2TH1d74c/xOE=
Subject key identifier: 35:6B:28:02:08:3F:C3:45:E5:4D:2C:A4:A8:9D:31:39:0B:AF:92:D8
Certificate issuer: /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial: 0187CCBC8D5F7C53B1A75CD14DE732960EDE
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/NWsoAgg_w0XlTSykqJ0xOQuvktg.roa
Signing time: Sat 29 Apr 2023 11:18:41 +0000
ROA not before: Sat 29 Apr 2023 11:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48601
IP address blocks: 185.42.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:bc:8d:5f:7c:53:b1:a7:5c:d1:4d:e7:32:96:0e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
Validity
Not Before: Apr 29 11:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=356b2802083fc345e54d2ca4a89d31390baf92d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b0:92:f3:91:c1:77:3a:61:2f:1b:95:d3:2e:
d1:0f:42:05:83:88:84:5f:49:0b:76:b8:89:3e:61:
82:52:5e:97:ed:8a:00:0e:a4:e1:ef:f1:df:be:3b:
32:cb:f4:ce:9c:8e:54:a6:aa:51:e7:67:5e:35:81:
be:1c:16:e1:7f:98:9f:34:24:a7:10:ab:d7:e7:5e:
9b:2d:9d:4c:98:54:61:ed:b7:70:4e:d0:3e:68:d9:
18:7f:1b:3c:48:3f:9b:0f:95:42:6c:d4:6d:eb:84:
1b:26:7e:27:ee:d6:46:e8:cf:ef:76:45:d0:db:75:
e6:d4:83:31:e9:d1:99:83:53:fd:86:a8:43:b1:85:
7a:22:c3:bc:fb:ad:b5:d9:54:72:2b:53:98:8c:ac:
fe:bc:7a:3e:b0:8e:ff:1f:2a:e7:fc:9f:74:8f:e2:
dd:af:ac:37:5f:8d:71:7e:23:91:bc:18:48:85:1c:
96:bc:35:19:82:e3:84:b0:49:9e:63:0f:c2:1d:1f:
1a:64:56:aa:6f:c1:3b:63:fd:56:e8:6d:38:d4:e4:
d0:f9:ae:53:3e:e0:e4:23:29:ea:bd:af:48:3c:b1:
74:3a:c9:19:d0:c9:a1:0f:7d:38:dd:1b:9d:65:95:
66:4e:9f:c7:f2:57:3e:05:71:86:40:35:93:99:d5:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:28:02:08:3F:C3:45:E5:4D:2C:A4:A8:9D:31:39:0B:AF:92:D8
X509v3 Authority Key Identifier:
keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/NWsoAgg_w0XlTSykqJ0xOQuvktg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.25.0/24
Signature Algorithm: sha256WithRSAEncryption
78:93:a7:be:25:b3:d0:82:63:d1:df:26:f9:f6:c2:49:0c:ac:
4f:e6:9f:42:f4:41:c3:b2:18:95:c3:c3:93:8c:39:4c:8b:50:
4f:95:eb:a4:e2:d8:15:c4:22:18:d7:d9:19:1d:fa:49:b6:e0:
d6:b8:e9:19:5f:05:80:07:4c:a4:8d:fd:9d:72:38:80:3b:23:
bf:8a:a6:19:1b:44:94:7f:64:46:7a:fd:ea:68:ac:14:21:5f:
81:53:0b:df:92:7b:31:56:1e:f5:fc:a1:2f:ea:74:cb:ca:28:
5b:08:61:4c:96:cb:9b:9a:88:4e:85:41:6e:eb:40:95:85:2f:
ca:dc:76:d2:16:8d:e6:90:1a:ad:ca:d6:eb:18:d3:73:8f:15:
2a:88:7a:04:b2:23:24:22:a5:62:9e:81:f8:51:89:05:da:f5:
4c:f1:52:6b:01:bc:b0:e4:f7:b9:ae:63:61:ce:90:b3:fb:e2:
dc:99:4b:8a:81:7b:41:ec:69:c6:6e:67:2a:a3:2b:1f:c9:28:
0d:03:71:9c:58:79:0a:1b:44:3b:1f:9f:0f:0a:f2:7d:0d:16:
91:9d:0b:8c:32:08:9a:d4:e0:bc:b4:d8:6c:49:ec:71:b9:ec:
81:73:03:a8:5f:12:0c:54:f6:d0:81:eb:10:6c:f5:40:61:78:
c0:7c:3d:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfMvI1ffFOxp1zRTecylg7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMDFjNDQzODMxY2Y5MzBiNzQ3ODcwOGQ3NmEzY2Y0NGQ4
OWExNjIwHhcNMjMwNDI5MTExODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTZiMjgwMjA4M2ZjMzQ1ZTU0ZDJjYTRhODlkMzEzOTBiYWY5MmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbCS85HBdzphLxuV0y7RD0IFg4iE
X0kLdriJPmGCUl6X7YoADqTh7/Hfvjsyy/TOnI5UpqpR52deNYG+HBbhf5ifNCSn
EKvX516bLZ1MmFRh7bdwTtA+aNkYfxs8SD+bD5VCbNRt64QbJn4n7tZG6M/vdkXQ
23Xm1IMx6dGZg1P9hqhDsYV6IsO8+6212VRyK1OYjKz+vHo+sI7/Hyrn/J90j+Ld
r6w3X41xfiORvBhIhRyWvDUZguOEsEmeYw/CHR8aZFaqb8E7Y/1W6G041OTQ+a5T
PuDkIynqva9IPLF0OskZ0MmhD3043RudZZVmTp/H8lc+BXGGQDWTmdWxdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVrKAIIP8NF5U0spKidMTkLr5LYMB8GA1UdIwQY
MBaAFN4BxEODHPkwt0eHCNdqPPRNiaFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUt
ZWU3MzI4YWRjYzdjLzEvTldzb0FnZ193MFhsVFN5a3FKMHhPUXV2a3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8xY2I4Y2EtNTk5My00ZDE3LWE2MWUtZWU3MzI4YWRjYzdj
LzEvM2dIRVE0TWMtVEMzUjRjSTEybzg5RTJKb1dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSoZMA0G
CSqGSIb3DQEBCwUAA4IBAQB4k6e+JbPQgmPR3yb59sJJDKxP5p9C9EHDshiVw8OT
jDlMi1BPleuk4tgVxCIY19kZHfpJtuDWuOkZXwWAB0ykjf2dcjiAOyO/iqYZG0SU
f2RGev3qaKwUIV+BUwvfknsxVh71/KEv6nTLyihbCGFMlsubmohOhUFu60CVhS/K
3HbSFo3mkBqtytbrGNNzjxUqiHoEsiMkIqVinoH4UYkF2vVM8VJrAbyw5Pe5rmNh
zpCz++LcmUuKgXtB7GnGbmcqoysfySgNA3GcWHkKG0Q7H58PCvJ9DRaRnQuMMgia
1OC8tNhsSexxueyBcwOoXxIMVPbQgesQbPVAYXjAfD0+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:12 2024 by rpki-client on console-fra.rpki-client.org