Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/nwNol1gXkVV8tVN39GiR2IiPywA.roa
File: nwNol1gXkVV8tVN39GiR2IiPywA.roa (raw, json)
Hash identifier: Lc4MBjyC4nfH2SZdhjIHbbPDxGF1TfyyDltbucDD/E4=
Subject key identifier: 9F:03:68:97:58:17:91:55:7C:B5:53:77:F4:68:91:D8:88:8F:CB:00
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 01856FA71334FE74A11F5F05FDDE8D74FFA1
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/nwNol1gXkVV8tVN39GiR2IiPywA.roa
Signing time: Sun 01 Jan 2023 23:24:58 +0000
ROA not before: Sun 01 Jan 2023 23:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213241
IP address blocks: 185.39.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Apr 2023 12:41:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a7:13:34:fe:74:a1:1f:5f:05:fd:de:8d:74:ff:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Jan 1 23:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f036897581791557cb55377f46891d8888fcb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d4:75:ee:71:d2:76:73:05:49:77:a4:54:4f:
24:af:ac:0a:91:70:d6:65:50:23:da:8b:99:c6:72:
1d:9e:68:60:cf:63:de:92:4a:b0:dc:a4:66:88:06:
bc:60:27:ab:67:a0:05:67:02:f8:8d:70:a1:98:4d:
b1:c8:c0:45:17:18:9a:be:fd:2a:5d:c3:18:c2:4f:
28:5b:5a:8f:66:88:dd:0d:9f:1f:de:7e:3a:59:ec:
a6:42:4c:a4:8e:14:d6:05:91:09:b3:51:25:f8:07:
3c:84:a6:62:08:dc:ea:32:63:b7:50:6d:54:79:3a:
e6:61:bb:ba:6b:60:87:6a:3f:4c:d4:6d:4e:b7:fc:
58:2c:b6:56:86:94:41:e2:bb:55:4c:44:b2:ad:cc:
41:79:60:47:1f:57:bc:43:eb:4c:2b:08:7b:08:3e:
20:71:eb:0f:ea:81:50:5a:e4:f4:a8:86:86:e8:6b:
ad:a8:80:9b:37:f7:0b:f8:f5:af:3b:c4:b0:01:bb:
f0:86:0a:64:c8:73:00:ef:86:16:40:ce:bb:b0:2d:
09:ab:5f:74:27:94:17:28:f6:19:0e:b9:6c:5a:0d:
b4:89:8a:f9:95:02:44:ce:93:88:cf:0e:50:32:f8:
a2:f9:1b:e1:a2:ab:ee:28:6c:7e:1d:ac:2a:95:bb:
e6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:03:68:97:58:17:91:55:7C:B5:53:77:F4:68:91:D8:88:8F:CB:00
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/nwNol1gXkVV8tVN39GiR2IiPywA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.9.0/24
Signature Algorithm: sha256WithRSAEncryption
36:dc:1b:e6:47:3b:b3:9a:44:30:23:2b:3c:42:77:18:9c:9d:
f2:72:21:2c:62:74:4d:da:8c:ee:5b:52:d3:5b:03:df:3c:b6:
df:a1:dd:af:c9:fe:19:68:8b:91:9f:94:b5:a0:8e:61:bb:0b:
8a:d0:7a:3c:bd:b1:07:ba:3c:4d:bc:22:ad:ff:8d:6a:1f:84:
76:b6:3b:9c:67:0e:56:54:ed:c0:24:2d:ff:ce:20:1b:49:10:
8c:4f:29:7f:84:7f:91:61:ea:f2:5e:19:9c:61:05:4a:fb:26:
f1:37:a6:41:91:ca:81:0f:a1:83:cd:a7:dd:03:91:d2:3b:e2:
5e:9e:3e:ec:b9:53:3f:aa:89:60:b5:b2:65:58:d7:f2:8f:fb:
39:e6:03:fd:20:3f:61:c9:5d:83:a9:a1:59:53:75:2a:8b:1c:
d0:30:e1:2a:6b:76:dc:d9:96:85:e1:b8:0d:ce:24:77:32:0c:
1f:68:b4:b4:9c:09:46:d8:4c:72:ae:52:b9:80:ea:12:b3:13:
55:29:08:ef:77:7c:55:81:b1:6f:5d:a8:a2:93:9c:99:50:64:
4d:65:53:97:8f:7a:07:69:60:ff:2e:37:2a:7f:fc:fa:a4:49:
65:9d:2a:de:b7:7d:c2:bd:b0:ad:0c:48:68:04:bf:5e:04:2e:
fd:c2:ec:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvpxM0/nShH18F/d6NdP+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3
YWE2YzMwHhcNMjMwMTAxMjMyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjAzNjg5NzU4MTc5MTU1N2NiNTUzNzdmNDY4OTFkODg4OGZjYjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dR17nHSdnMFSXekVE8kr6wKkXDW
ZVAj2ouZxnIdnmhgz2Pekkqw3KRmiAa8YCerZ6AFZwL4jXChmE2xyMBFFxiavv0q
XcMYwk8oW1qPZojdDZ8f3n46WeymQkykjhTWBZEJs1El+Ac8hKZiCNzqMmO3UG1U
eTrmYbu6a2CHaj9M1G1Ot/xYLLZWhpRB4rtVTESyrcxBeWBHH1e8Q+tMKwh7CD4g
cesP6oFQWuT0qIaG6GutqICbN/cL+PWvO8SwAbvwhgpkyHMA74YWQM67sC0Jq190
J5QXKPYZDrlsWg20iYr5lQJEzpOIzw5QMvii+RvhoqvuKGx+HawqlbvmPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8DaJdYF5FVfLVTd/RokdiIj8sAMB8GA1UdIwQY
MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt
YTIwMWRmYWJkYWIxLzEvbndOb2wxZ1hrVlY4dFZOMzlHaVIySWlQeXdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx
LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuScJMA0G
CSqGSIb3DQEBCwUAA4IBAQA23BvmRzuzmkQwIys8QncYnJ3yciEsYnRN2ozuW1LT
WwPfPLbfod2vyf4ZaIuRn5S1oI5huwuK0Ho8vbEHujxNvCKt/41qH4R2tjucZw5W
VO3AJC3/ziAbSRCMTyl/hH+RYeryXhmcYQVK+ybxN6ZBkcqBD6GDzafdA5HSO+Je
nj7suVM/qolgtbJlWNfyj/s55gP9ID9hyV2DqaFZU3UqixzQMOEqa3bc2ZaF4bgN
ziR3MgwfaLS0nAlG2ExyrlK5gOoSsxNVKQjvd3xVgbFvXaiik5yZUGRNZVOXj3oH
aWD/Ljcqf/z6pEllnSret33CvbCtDEhoBL9eBC79wuzp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:20 2024 by rpki-client on console-ams.rpki-client.org