Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ncpofzJf8JCuYaeyS_trMsKuO_c.roa
File: ncpofzJf8JCuYaeyS_trMsKuO_c.roa (raw, json)
Hash identifier: L/NQS8nM+92rgKX0efcYz4R5nBq7ylUftJqMZjOvVKc=
Subject key identifier: 9D:CA:68:7F:32:5F:F0:90:AE:61:A7:B2:4B:FB:6B:32:C2:AE:3B:F7
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EBDAE7BD75E0B251BCF95DCF54B721780
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ncpofzJf8JCuYaeyS_trMsKuO_c.roa
Signing time: Mon 08 Apr 2024 12:28:32 +0000
ROA not before: Mon 08 Apr 2024 12:28:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48031
IP address blocks: 46.149.173.0/24 maxlen: 24
91.246.62.0/24 maxlen: 24
194.59.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 19:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:ae:7b:d7:5e:0b:25:1b:cf:95:dc:f5:4b:72:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 8 12:28:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9dca687f325ff090ae61a7b24bfb6b32c2ae3bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:7d:dd:cb:f8:da:5d:e9:57:ee:f4:fa:2f:
dc:5a:e7:60:62:9f:63:8f:b0:ce:b6:f8:32:26:da:
5d:e5:66:48:c0:28:30:9e:03:c4:51:dd:bb:97:fa:
0a:ee:da:7a:20:6c:e5:ce:a5:89:da:eb:90:d5:a0:
3c:db:c6:e9:aa:08:8f:76:fb:6f:05:49:51:6c:db:
cd:58:1f:8b:2d:de:72:0d:d4:f6:f2:fb:ef:77:63:
da:8f:12:16:bb:d0:ef:f6:fc:a0:d0:43:d2:04:a8:
70:f9:0e:1f:25:9b:97:e1:4b:b5:07:78:a2:ad:4d:
ba:15:55:bc:a8:c0:48:11:6e:20:99:ad:66:e6:a7:
27:87:2c:a7:fc:4e:7a:24:c3:ca:0a:70:a2:2a:8a:
2a:53:9e:32:45:bf:07:11:93:0b:1d:6c:4f:2f:31:
3a:f0:bb:e1:3c:d0:7b:71:b4:89:48:db:16:12:40:
86:ce:1b:bc:55:d6:6e:4e:2f:b2:57:23:15:f6:77:
13:5d:f9:92:54:1e:54:28:d5:5b:2c:34:34:45:e1:
c9:eb:91:f7:90:46:66:54:ac:d3:71:02:0e:bd:14:
30:9b:c7:e4:74:b7:ad:e5:45:6a:56:86:c5:66:6e:
ca:42:a3:15:2b:ed:6e:47:f3:91:2b:e1:96:00:01:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CA:68:7F:32:5F:F0:90:AE:61:A7:B2:4B:FB:6B:32:C2:AE:3B:F7
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/ncpofzJf8JCuYaeyS_trMsKuO_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.173.0/24
91.246.62.0/24
194.59.246.0/24
Signature Algorithm: sha256WithRSAEncryption
99:38:e2:04:b7:1d:63:4e:e2:76:81:f9:8c:f2:9c:82:ae:80:
f5:9f:1c:1f:d2:76:44:36:92:45:51:70:9c:97:ad:f2:58:b9:
f8:e7:f1:2c:af:67:e7:2d:a5:a6:b5:11:e6:5a:b7:7f:61:3d:
f3:e6:f0:fa:41:46:e6:36:79:6f:2a:fb:b0:a3:51:2d:c2:4d:
69:57:23:17:e3:2f:0e:a0:aa:7d:13:df:d1:1a:26:24:d9:a2:
63:5b:5a:ff:fc:1f:5c:76:57:c3:07:b6:f3:8c:38:ef:59:be:
f6:d8:bb:1b:c8:f8:76:29:71:ff:85:31:f4:12:91:84:cc:33:
fa:54:85:1a:7f:9f:1d:5e:51:bc:b9:d3:af:7c:e0:32:02:0d:
cf:bd:cf:a6:87:2c:ad:26:4d:6f:b4:28:78:18:a3:61:a7:7e:
ce:34:c3:29:42:85:32:06:27:e1:8c:d3:1c:43:ca:2e:02:1d:
65:57:83:a2:83:f9:2d:44:e8:61:c3:96:e4:8c:8c:00:8a:ee:
e0:2e:88:9a:30:f7:00:be:6d:fe:b3:61:78:fe:df:4b:6f:77:
50:a4:40:10:73:c6:67:9e:bc:e5:4e:9e:9a:ca:6f:4d:04:d7:
73:8d:40:20:93:2b:30:b6:69:df:4e:d2:56:51:7c:84:b6:aa:
35:87:fe:c2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY69rnvXXgslG8+V3PVLcheAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNDA4MTIyODMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGNhNjg3ZjMyNWZmMDkwYWU2MWE3YjI0YmZiNmIzMmMyYWUzYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCd93cv42l3pV+70+i/cWudgYp9j
j7DOtvgyJtpd5WZIwCgwngPEUd27l/oK7tp6IGzlzqWJ2uuQ1aA828bpqgiPdvtv
BUlRbNvNWB+LLd5yDdT28vvvd2PajxIWu9Dv9vyg0EPSBKhw+Q4fJZuX4Uu1B3ii
rU26FVW8qMBIEW4gma1m5qcnhyyn/E56JMPKCnCiKooqU54yRb8HEZMLHWxPLzE6
8LvhPNB7cbSJSNsWEkCGzhu8VdZuTi+yVyMV9ncTXfmSVB5UKNVbLDQ0ReHJ65H3
kEZmVKzTcQIOvRQwm8fkdLet5UVqVobFZm7KQqMVK+1uR/ORK+GWAAHb7wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ3KaH8yX/CQrmGnskv7azLCrjv3MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvbmNwb2Z6SmY4SkN1WWFleVNfdHJNc0t1T19jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALpWtAwQA
W/Y+AwQAwjv2MA0GCSqGSIb3DQEBCwUAA4IBAQCZOOIEtx1jTuJ2gfmM8pyCroD1
nxwf0nZENpJFUXCcl63yWLn45/Esr2fnLaWmtRHmWrd/YT3z5vD6QUbmNnlvKvuw
o1Etwk1pVyMX4y8OoKp9E9/RGiYk2aJjW1r//B9cdlfDB7bzjDjvWb722LsbyPh2
KXH/hTH0EpGEzDP6VIUaf58dXlG8udOvfOAyAg3Pvc+mhyytJk1vtCh4GKNhp37O
NMMpQoUyBifhjNMcQ8ouAh1lV4Oig/ktROhhw5bkjIwAiu7gLoiaMPcAvm3+s2F4
/t9Lb3dQpEAQc8ZnnrzlTp6aym9NBNdzjUAgkyswtmnfTtJWUXyEtqo1h/7C
-----END CERTIFICATE-----
Generated at Wed Apr 10 21:04:11 2024 by rpki-client on console-ams.rpki-client.org