Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/NfalgIFteKV-34u1RWLdr4CWl3U.roa
File: NfalgIFteKV-34u1RWLdr4CWl3U.roa (raw, json)
Hash identifier: LaoYiZG8aS0zTe8nHyzzwfX/vtS/LWFWI6jmqzxRwkw=
Subject key identifier: 35:F6:A5:80:81:6D:78:A5:7E:DF:8B:B5:45:62:DD:AF:80:96:97:75
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 018B60700584255EE6362E68D66AEA34B311
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/NfalgIFteKV-34u1RWLdr4CWl3U.roa
Signing time: Tue 24 Oct 2023 06:47:15 +0000
ROA not before: Tue 24 Oct 2023 06:47:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44034
IP address blocks: 2.64.0.0/13 maxlen: 13
94.191.128.0/17 maxlen: 17
79.138.128.0/17 maxlen: 17
212.27.0.0/19 maxlen: 19
78.156.192.0/19 maxlen: 19
95.209.0.0/16 maxlen: 16
77.241.128.0/21 maxlen: 21
77.241.128.0/20 maxlen: 20
37.250.0.0/16 maxlen: 16
80.251.192.0/20 maxlen: 20
109.56.0.0/14 maxlen: 14
2a02:aa0::/29 maxlen: 32
2a02:aa4::/30 maxlen: 30
2a02:aa0::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:60:70:05:84:25:5e:e6:36:2e:68:d6:6a:ea:34:b3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Oct 24 06:47:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35f6a580816d78a57edf8bb54562ddaf80969775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:b7:90:05:ea:66:a0:cd:bc:c3:15:b7:75:
8c:5a:28:a9:d6:76:86:7b:e5:9c:e0:24:aa:61:f4:
5a:32:b0:33:a6:89:99:ff:7f:45:b0:e9:81:7e:02:
22:5f:1a:0b:96:bb:3f:c5:20:57:cc:53:3f:c7:73:
c6:e0:af:c3:6c:1f:3b:8a:dc:92:c5:22:74:57:fc:
b2:ac:c9:94:f5:73:34:99:3d:e5:1d:b5:73:b0:22:
6a:ad:b8:8a:7e:59:64:47:a4:8a:6d:67:a3:4e:79:
2d:d3:11:e5:d2:8f:c8:d6:45:56:7c:a2:95:85:69:
0c:f0:57:62:ee:89:f6:57:e3:87:2a:da:6a:2b:f7:
90:70:6d:36:9e:3a:bc:5a:46:51:b9:22:d5:57:11:
ea:fc:8e:70:f9:99:9c:7c:bf:5d:e4:9e:6e:32:ba:
01:3c:6f:e8:49:fd:07:ae:4e:e2:ef:4d:9d:50:e7:
88:63:36:63:47:10:bc:de:68:70:28:e4:8a:0a:0b:
c7:99:dc:2e:cb:a3:b0:08:08:4a:cc:c8:69:38:ec:
f4:28:14:a8:f5:bb:02:c3:64:bd:b9:cd:7b:23:3e:
b1:ea:30:73:ff:5d:82:86:44:d6:be:48:5c:b9:46:
1c:82:dd:34:2d:41:61:3d:17:87:41:9c:57:f7:bb:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F6:A5:80:81:6D:78:A5:7E:DF:8B:B5:45:62:DD:AF:80:96:97:75
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/NfalgIFteKV-34u1RWLdr4CWl3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.64.0.0/13
37.250.0.0/16
77.241.128.0/20
78.156.192.0/19
79.138.128.0/17
80.251.192.0/20
94.191.128.0/17
95.209.0.0/16
109.56.0.0/14
212.27.0.0/19
IPv6:
2a02:aa0::/29
Signature Algorithm: sha256WithRSAEncryption
2f:5b:71:ab:1a:31:fc:9e:4c:1e:30:72:61:3d:da:f4:74:2b:
3e:71:ba:78:9d:96:02:e3:0a:71:2b:31:d0:b6:df:fd:05:43:
3e:b4:d5:83:b7:51:cd:68:10:0d:1c:f8:20:f2:4e:0e:47:29:
b2:81:67:98:b2:3a:e8:23:02:42:3b:b5:1b:e8:34:f3:a9:72:
fe:9e:38:ac:dd:08:2f:39:5f:04:ab:38:e5:0b:8e:56:c3:d6:
22:b8:39:70:f4:ee:29:60:3c:07:71:7d:9a:20:16:3e:dc:0a:
c1:b2:75:98:3d:e0:80:12:dc:b1:96:fa:90:5c:e3:54:07:32:
2a:0f:1b:92:ae:8f:a9:54:c9:15:bb:3b:2a:47:91:a4:bf:0e:
19:3c:01:ed:d9:16:f4:f0:67:f1:44:f9:88:a2:36:0f:48:73:
f4:f4:38:8a:10:8a:b4:aa:66:ea:ca:05:f3:0d:b9:d6:a1:2f:
55:26:1a:36:63:4e:ed:92:fd:52:1f:00:85:e9:64:14:0d:87:
79:ae:dc:92:7f:53:06:66:b6:48:a9:50:7d:d0:0a:29:25:f8:
4f:92:7b:0f:36:37:01:9b:fa:c7:d8:a9:f6:55:d2:e9:52:4a:
44:08:5e:04:e7:75:c6:52:bd:ae:b3:09:1d:10:a0:35:b3:7c:
c1:15:9d:7b
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAYtgcAWEJV7mNi5o1mrqNLMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNjE3ZDZiMDNlMmZlNWY4OTExY2JlYjVmYWUyZGNhM2Jk
NjY3N2YwHhcNMjMxMDI0MDY0NzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWY2YTU4MDgxNmQ3OGE1N2VkZjhiYjU0NTYyZGRhZjgwOTY5Nzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis23kAXqZqDNvMMVt3WMWiip1naG
e+Wc4CSqYfRaMrAzpomZ/39FsOmBfgIiXxoLlrs/xSBXzFM/x3PG4K/DbB87ityS
xSJ0V/yyrMmU9XM0mT3lHbVzsCJqrbiKfllkR6SKbWejTnkt0xHl0o/I1kVWfKKV
hWkM8Fdi7on2V+OHKtpqK/eQcG02njq8WkZRuSLVVxHq/I5w+ZmcfL9d5J5uMroB
PG/oSf0Hrk7i702dUOeIYzZjRxC83mhwKOSKCgvHmdwuy6OwCAhKzMhpOOz0KBSo
9bsCw2S9uc17Iz6x6jBz/12ChkTWvkhcuUYcgt00LUFhPReHQZxX97ubzQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFDX2pYCBbXilft+LtUVi3a+Alpd1MB8GA1UdIwQY
MBaAFE9hfWsD4v5fiRHL61+uLco71md/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDJGOWF3UGlfbC1KRWN2clg2NHR5anZXWjM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xYjEyNzItODNjMS00ODY0LTljZDMt
MDI3YzdmN2RjNmQ1LzEvTmZhbGdJRnRlS1YtMzR1MVJXTGRyNENXbDNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xYjEyNzItODNjMS00ODY0LTljZDMtMDI3YzdmN2RjNmQ1
LzEvVDJGOWF3UGlfbC1KRWN2clg2NHR5anZXWjM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA+BAIAATA4AwMDAkADAwAl
+gMEBE3xgAMEBU6cwAMEB0+KgAMEBFD7wAMEB16/gAMDAF/RAwMCbTgDBAXUGwAw
DQQCAAIwBwMFAyoCCqAwDQYJKoZIhvcNAQELBQADggEBAC9bcasaMfyeTB4wcmE9
2vR0Kz5xunidlgLjCnErMdC23/0FQz601YO3Uc1oEA0c+CDyTg5HKbKBZ5iyOugj
AkI7tRvoNPOpcv6eOKzdCC85XwSrOOULjlbD1iK4OXD07ilgPAdxfZogFj7cCsGy
dZg94IAS3LGW+pBc41QHMioPG5Kuj6lUyRW7OypHkaS/Dhk8Ae3ZFvTwZ/FE+Yii
Ng9Ic/T0OIoQirSqZurKBfMNudahL1UmGjZjTu2S/VIfAIXpZBQNh3mu3JJ/UwZm
tkipUH3QCikl+E+Sew82NwGb+sfYqfZV0ulSSkQIXgTndcZSva6zCR0QoDWzfMEV
nXs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:38 2024 by rpki-client on console-fra.rpki-client.org