Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nfRqoR2D1-ZU6-rMzjwXiBxK-nc.roa
File: nfRqoR2D1-ZU6-rMzjwXiBxK-nc.roa (raw, json)
Hash identifier: 3upOagFMBKSXCavV7Ky+xXD26ppSJvrun5iigCD7j9c=
Subject key identifier: 9D:F4:6A:A1:1D:83:D7:E6:54:EB:EA:CC:CE:3C:17:88:1C:4A:FA:77
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF84311932807FCB83D235DE3048FE
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nfRqoR2D1-ZU6-rMzjwXiBxK-nc.roa
Signing time: Tue 02 Jan 2024 06:32:20 +0000
ROA not before: Tue 02 Jan 2024 06:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200673
IP address blocks: 78.135.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 13:17:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:84:31:19:32:80:7f:cb:83:d2:35:de:30:48:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9df46aa11d83d7e654ebeaccce3c17881c4afa77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9f:80:11:b1:9b:72:35:5b:a0:f5:28:b6:61:
76:97:72:d8:12:9a:37:28:41:30:d1:d7:88:89:cf:
55:77:05:d7:9d:7d:94:02:2d:0a:71:61:54:b7:f4:
96:29:1c:ac:56:7e:90:e7:6c:0b:9c:67:a5:67:b0:
6d:6d:3e:a0:8f:ef:fe:9a:eb:d0:7e:de:8c:61:80:
19:9c:eb:2c:c5:ed:5a:db:46:84:af:c3:a7:68:38:
98:83:92:dd:8c:dc:cc:0b:27:82:af:24:07:51:8e:
bf:89:20:a1:26:52:0c:68:3e:72:8e:5c:93:0f:ad:
83:55:8a:9a:db:87:af:56:5f:5d:23:25:82:f1:4f:
b7:d7:6e:13:1b:e9:39:2b:24:55:4d:88:fb:a6:44:
64:bd:6a:f1:67:7c:4e:d2:d8:ca:75:02:ce:8b:00:
ab:38:7f:13:c9:4e:2e:dd:a4:2a:19:1b:f6:ef:35:
a9:b1:5f:e1:21:0e:f3:d3:a9:22:4e:29:fb:9b:74:
ff:52:02:f0:18:c9:af:ac:3d:0c:70:dc:7a:1b:0d:
04:aa:83:15:96:8b:0d:2c:4d:8b:a7:30:05:46:65:
48:19:f4:c6:4f:a7:07:12:3e:6f:30:aa:5a:51:aa:
85:0c:f8:b6:1f:39:66:ad:cd:28:50:19:24:0f:02:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F4:6A:A1:1D:83:D7:E6:54:EB:EA:CC:CE:3C:17:88:1C:4A:FA:77
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/nfRqoR2D1-ZU6-rMzjwXiBxK-nc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.64.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ce:d3:f0:d4:04:4c:e3:23:d5:4a:54:3d:ca:f1:ab:f4:3b:
ab:47:cd:1f:f3:61:98:b3:67:ad:c4:9b:f8:65:6a:23:85:5f:
50:2c:b8:e2:0c:09:d6:60:7d:95:95:93:a8:30:2b:a0:0e:fb:
e2:b9:ac:d8:aa:09:d4:71:7a:70:cb:00:69:9b:99:df:f3:18:
89:d9:13:6a:e9:b8:29:48:1c:18:fd:8b:52:9b:59:61:56:d2:
78:ab:d9:1c:de:3a:22:5b:5e:af:20:c1:7f:5f:14:0a:a1:42:
b0:14:a4:86:88:08:0a:94:cb:00:6d:8f:36:45:78:11:83:79:
08:3e:fe:84:73:e6:18:c0:85:f7:10:db:3d:a8:b6:98:ba:1e:
73:74:e8:8c:f7:1b:09:6e:0f:67:c9:4e:37:c6:3e:9f:aa:da:
fb:ae:5a:da:8d:8e:30:f5:e7:d4:94:8e:2c:a3:d4:ff:60:48:
d5:28:13:59:2f:6d:3c:66:fe:ff:a8:7b:53:d4:a4:0a:48:88:
7c:ad:0b:12:21:1b:76:4c:d1:c0:b4:2f:96:4d:5e:31:a4:1a:
d7:01:7a:67:9a:a7:a9:ee:4e:36:e2:27:6b:26:d4:5d:e1:08:
1b:b8:0a:a1:f4:b2:54:62:72:80:20:61:d0:3e:a5:b8:20:8e:
85:9d:38:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI34QxGTKAf8uD0jXeMEj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMTAyMDYzMjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGY0NmFhMTFkODNkN2U2NTRlYmVhY2NjZTNjMTc4ODFjNGFmYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ+AEbGbcjVboPUotmF2l3LYEpo3
KEEw0deIic9VdwXXnX2UAi0KcWFUt/SWKRysVn6Q52wLnGelZ7BtbT6gj+/+muvQ
ft6MYYAZnOssxe1a20aEr8OnaDiYg5LdjNzMCyeCryQHUY6/iSChJlIMaD5yjlyT
D62DVYqa24evVl9dIyWC8U+3124TG+k5KyRVTYj7pkRkvWrxZ3xO0tjKdQLOiwCr
OH8TyU4u3aQqGRv27zWpsV/hIQ7z06kiTin7m3T/UgLwGMmvrD0McNx6Gw0EqoMV
losNLE2LpzAFRmVIGfTGT6cHEj5vMKpaUaqFDPi2Hzlmrc0oUBkkDwLmuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ30aqEdg9fmVOvqzM48F4gcSvp3MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvbmZScW9SMkQxLVpVNi1yTXpqd1hpQnhLLW5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodAMA0G
CSqGSIb3DQEBCwUAA4IBAQB+ztPw1ARM4yPVSlQ9yvGr9DurR80f82GYs2etxJv4
ZWojhV9QLLjiDAnWYH2VlZOoMCugDvviuazYqgnUcXpwywBpm5nf8xiJ2RNq6bgp
SBwY/YtSm1lhVtJ4q9kc3joiW16vIMF/XxQKoUKwFKSGiAgKlMsAbY82RXgRg3kI
Pv6Ec+YYwIX3ENs9qLaYuh5zdOiM9xsJbg9nyU43xj6fqtr7rlrajY4w9efUlI4s
o9T/YEjVKBNZL208Zv7/qHtT1KQKSIh8rQsSIRt2TNHAtC+WTV4xpBrXAXpnmqep
7k424idrJtRd4QgbuAqh9LJUYnKAIGHQPqW4II6FnTib
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org