Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/nmo9_rlskuo-BjPXmC9U_g0aqSQ.roa
File: nmo9_rlskuo-BjPXmC9U_g0aqSQ.roa (raw, json)
Hash identifier: 2bebuD6Wl7LbY5aY51dP3/jvVGl1ZDKgeL6iHvXEZnk=
Subject key identifier: 9E:6A:3D:FE:B9:6C:92:EA:3E:06:33:D7:98:2F:54:FE:0D:1A:A9:24
Certificate issuer: /CN=6325f514270167a43e65e27df9b3d26efb29c31c
Certificate serial: 01857169DB71693C6F9E0F4E696FD7896D86
Authority key identifier: 63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/nmo9_rlskuo-BjPXmC9U_g0aqSQ.roa
Signing time: Mon 02 Jan 2023 07:37:20 +0000
ROA not before: Mon 02 Jan 2023 07:37:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47641
IP address blocks: 139.28.60.0/22 maxlen: 24
2a09:f580::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:db:71:69:3c:6f:9e:0f:4e:69:6f:d7:89:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6325f514270167a43e65e27df9b3d26efb29c31c
Validity
Not Before: Jan 2 07:37:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e6a3dfeb96c92ea3e0633d7982f54fe0d1aa924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:9c:a2:43:36:4d:30:50:5f:7c:c0:3e:66:
5a:35:cb:5c:07:99:71:28:c0:bc:52:c5:84:ca:bc:
2e:74:33:6f:6b:74:f2:c5:b4:d5:87:a6:03:a3:93:
2a:8e:1d:8a:45:23:79:65:17:02:d0:59:d0:e0:aa:
5f:2c:07:a4:ff:99:e6:2e:a4:a9:12:4a:40:1f:1e:
20:4d:61:c0:ee:eb:10:97:3d:76:7d:6d:03:bf:10:
5c:0d:0e:6a:c2:4f:5e:e8:bf:70:0a:ac:6c:21:d7:
89:44:48:eb:4b:4e:f7:40:98:d2:a7:d5:35:1d:e9:
96:a7:e1:76:ef:8b:c5:fb:30:24:6b:93:bd:52:96:
0f:7f:67:5c:20:ce:7c:06:78:e6:b6:4d:9e:0d:8f:
de:88:7e:17:58:e8:e0:84:10:82:06:13:88:60:a9:
81:80:64:03:f7:ce:0e:5a:79:e0:2f:08:a3:36:1d:
ee:f3:4d:8e:2c:71:ce:ec:0e:3d:0a:a1:0e:d2:8a:
60:35:ac:89:a9:30:54:96:6f:7d:75:af:74:72:f1:
fa:cb:db:1f:f4:ed:b7:e3:da:b3:72:9f:8a:34:11:
33:28:9f:bf:c7:34:f6:06:3f:38:ea:b8:8a:b0:50:
d5:d4:be:20:ef:74:13:be:f9:f3:b0:17:7d:b4:c5:
25:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6A:3D:FE:B9:6C:92:EA:3E:06:33:D7:98:2F:54:FE:0D:1A:A9:24
X509v3 Authority Key Identifier:
keyid:63:25:F5:14:27:01:67:A4:3E:65:E2:7D:F9:B3:D2:6E:FB:29:C3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/nmo9_rlskuo-BjPXmC9U_g0aqSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7262b8-a1a7-4d13-8793-d3887dc45c6d/1/YyX1FCcBZ6Q-ZeJ9-bPSbvspwxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.60.0/22
IPv6:
2a09:f580::/29
Signature Algorithm: sha256WithRSAEncryption
7c:03:e9:55:99:36:ef:72:9c:a7:0f:a7:46:ca:81:9a:e7:2d:
eb:ac:80:cb:25:40:f9:bf:4b:bc:61:aa:06:c6:13:bd:3d:2a:
b1:a4:94:bf:06:33:ec:d2:c6:de:2e:e9:79:17:0c:2e:f7:d4:
13:c0:bc:88:52:9d:e8:97:19:23:a1:92:d2:18:70:7c:35:f2:
2d:86:55:53:98:94:a1:40:4b:d3:a3:0c:5e:66:05:55:84:f3:
cc:82:fd:48:f0:e2:71:b2:3f:9a:d3:69:28:4f:b9:aa:f7:30:
5b:ca:ab:f5:35:b7:2e:46:90:6d:ad:72:37:c7:2e:cc:42:ae:
34:37:66:5e:ff:d8:20:13:65:98:7e:96:fa:a1:bf:63:d9:0b:
ca:52:ce:03:75:74:00:04:4a:0f:28:15:c8:55:06:34:f4:45:
b8:6e:de:60:b0:1d:14:4f:39:cc:97:2b:bf:df:58:c1:e4:dc:
31:b2:ed:22:2a:f8:7d:fe:72:40:01:08:b1:f0:d4:6f:61:e5:
db:a6:5a:32:ac:18:97:7c:e2:c8:cc:8f:04:b4:79:a6:02:ee:
21:8c:21:67:81:fb:67:3e:ed:ea:1d:88:b6:1d:84:00:a2:3f:
4c:dc:2b:19:6f:f3:f3:80:1e:95:ad:48:a2:45:00:56:fd:41:
9c:30:c1:7d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxadtxaTxvng9OaW/XiW2GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzMjVmNTE0MjcwMTY3YTQzZTY1ZTI3ZGY5YjNkMjZlZmIy
OWMzMWMwHhcNMjMwMTAyMDczNzIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTZhM2RmZWI5NmM5MmVhM2UwNjMzZDc5ODJmNTRmZTBkMWFhOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCicokM2TTBQX3zAPmZaNctcB5lx
KMC8UsWEyrwudDNva3TyxbTVh6YDo5Mqjh2KRSN5ZRcC0FnQ4KpfLAek/5nmLqSp
EkpAHx4gTWHA7usQlz12fW0DvxBcDQ5qwk9e6L9wCqxsIdeJREjrS073QJjSp9U1
HemWp+F274vF+zAka5O9UpYPf2dcIM58Bnjmtk2eDY/eiH4XWOjghBCCBhOIYKmB
gGQD984OWnngLwijNh3u802OLHHO7A49CqEO0opgNayJqTBUlm99da90cvH6y9sf
9O2349qzcp+KNBEzKJ+/xzT2Bj846riKsFDV1L4g73QTvvnzsBd9tMUlpwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ5qPf65bJLqPgYz15gvVP4NGqkkMB8GA1UdIwQY
MBaAFGMl9RQnAWekPmXiffmz0m77KcMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXlYMUZDY0JaNlEtWmVKOS1iUFNidnNwd3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MjYyYjgtYTFhNy00ZDEzLTg3OTMt
ZDM4ODdkYzQ1YzZkLzEvbm1vOV9ybHNrdW8tQmpQWG1DOVVfZzBhcVNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MjYyYjgtYTFhNy00ZDEzLTg3OTMtZDM4ODdkYzQ1YzZk
LzEvWXlYMUZDY0JaNlEtWmVKOS1iUFNidnNwd3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCixw8MA0E
AgACMAcDBQMqCfWAMA0GCSqGSIb3DQEBCwUAA4IBAQB8A+lVmTbvcpynD6dGyoGa
5y3rrIDLJUD5v0u8YaoGxhO9PSqxpJS/BjPs0sbeLul5Fwwu99QTwLyIUp3olxkj
oZLSGHB8NfIthlVTmJShQEvTowxeZgVVhPPMgv1I8OJxsj+a02koT7mq9zBbyqv1
NbcuRpBtrXI3xy7MQq40N2Ze/9ggE2WYfpb6ob9j2QvKUs4DdXQABEoPKBXIVQY0
9EW4bt5gsB0UTznMlyu/31jB5Nwxsu0iKvh9/nJAAQix8NRvYeXbployrBiXfOLI
zI8EtHmmAu4hjCFngftnPu3qHYi2HYQAoj9M3CsZb/PzgB6VrUiiRQBW/UGcMMF9
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:33 2024 by rpki-client on console-fra.rpki-client.org