Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NNe8EW_0A0IBqioKY5jsXGK1ekk.roa
File: NNe8EW_0A0IBqioKY5jsXGK1ekk.roa (raw, json)
Hash identifier: 4vJkFes7j9DigFCHqFR6gtgl5sdIBUao+92HYfOVedw=
Subject key identifier: 34:D7:BC:11:6F:F4:03:42:01:AA:2A:0A:63:98:EC:5C:62:B5:7A:49
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018F1F3C267705FA86DBE4F46C9EB5DA7314
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NNe8EW_0A0IBqioKY5jsXGK1ekk.roa
Signing time: Sat 27 Apr 2024 11:06:26 +0000
ROA not before: Sat 27 Apr 2024 11:06:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.243.0/24 maxlen: 24
45.136.206.0/24 maxlen: 24
88.218.250.0/24 maxlen: 24
193.47.41.0/24 maxlen: 24
194.61.233.0/24 maxlen: 24
194.147.88.0/24 maxlen: 24
194.156.94.0/24 maxlen: 24
194.169.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Jul 2024 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1f:3c:26:77:05:fa:86:db:e4:f4:6c:9e:b5:da:73:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 27 11:06:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34d7bc116ff4034201aa2a0a6398ec5c62b57a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:40:04:82:9e:14:38:5b:c6:bb:b5:30:76:
b5:23:5d:70:10:a5:85:d7:4c:9b:31:47:07:f9:aa:
2d:74:a4:f4:1f:93:b6:f7:dd:d7:7e:72:b4:68:63:
d7:72:5c:9d:59:0d:2b:89:eb:e5:75:da:b1:82:1b:
b8:90:02:71:e8:d6:12:4e:a7:9a:16:b8:19:82:60:
b7:d5:d6:b8:ba:be:0b:0e:2f:38:70:77:4a:a9:b8:
44:26:72:25:5b:e9:02:c9:3c:fc:68:93:44:a9:d0:
5e:b3:74:cc:34:d1:d5:38:b4:0b:b6:0a:76:02:ee:
58:6b:b3:5f:19:ca:5b:13:3d:b6:4a:28:36:f5:90:
ae:63:b7:75:b0:ba:36:ed:d8:dd:1c:a3:90:10:3d:
ac:8d:fd:ae:83:e3:b3:78:23:bb:ec:da:a9:ce:a1:
b3:dd:82:a9:ba:07:16:9a:e2:49:6d:dc:80:62:4e:
d6:20:06:da:cb:f4:21:18:e0:ed:a9:25:42:25:83:
c5:80:ef:ad:fe:24:15:8d:2c:b5:8c:2f:46:5f:53:
96:0b:44:cc:eb:85:49:be:ed:ca:03:73:9f:af:4c:
ba:0e:a8:7d:fe:79:d0:ef:66:5a:98:d5:d3:d3:bc:
69:e4:2b:f6:fb:4f:27:82:f1:8b:2d:b6:54:4c:2b:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:BC:11:6F:F4:03:42:01:AA:2A:0A:63:98:EC:5C:62:B5:7A:49
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/NNe8EW_0A0IBqioKY5jsXGK1ekk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.243.0/24
45.136.206.0/24
88.218.250.0/24
193.47.41.0/24
194.61.233.0/24
194.147.88.0/24
194.156.94.0/24
194.169.86.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3a:6e:e2:2c:7a:f8:be:38:c4:96:10:3c:39:63:e2:f2:b4:
95:10:7e:5f:50:05:e1:01:09:1a:72:04:20:a1:46:97:e7:a8:
b8:d6:d6:6e:56:01:d1:1c:4a:a4:82:5a:d5:ba:63:67:65:cd:
11:75:a6:17:f3:a0:6e:75:d2:8f:0f:e5:9f:d3:8c:d1:55:87:
0f:47:d2:70:59:de:a2:64:74:53:b6:00:3d:fc:ff:3b:bf:cb:
a3:3c:af:2b:10:f3:87:91:4a:49:53:ca:36:58:f7:a8:e6:19:
5b:6e:ac:35:81:2c:ba:02:ef:84:7b:a0:5d:5f:b4:10:24:fc:
8f:bb:29:1f:57:e3:e7:1c:21:69:6a:e3:c8:64:79:b6:61:0c:
fd:14:76:61:b7:13:65:64:45:35:5a:a9:3e:bf:e4:bf:83:d8:
a0:6b:98:af:68:e7:a3:df:00:60:c2:cc:9d:5f:ee:f9:8e:b2:
fd:6d:b2:0f:31:ac:03:72:f6:11:f0:f7:47:b5:28:8c:a3:07:
23:74:77:56:4a:83:9b:ef:10:c8:1c:fb:fc:a6:8d:52:a0:a4:
eb:dd:8c:b0:63:a2:79:a7:24:f6:3f:97:59:18:43:56:90:f8:
f1:7e:06:0c:1e:72:0e:47:04:8c:37:27:e6:b4:80:ef:d1:e7:
e4:fa:a5:79
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAY8fPCZ3BfqG2+T0bJ612nMUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjQwNDI3MTEwNjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGQ3YmMxMTZmZjQwMzQyMDFhYTJhMGE2Mzk4ZWM1YzYyYjU3YTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMZABIKeFDhbxru1MHa1I11wEKWF
10ybMUcH+aotdKT0H5O2993XfnK0aGPXclydWQ0rievlddqxghu4kAJx6NYSTqea
FrgZgmC31da4ur4LDi84cHdKqbhEJnIlW+kCyTz8aJNEqdBes3TMNNHVOLQLtgp2
Au5Ya7NfGcpbEz22Sig29ZCuY7d1sLo27djdHKOQED2sjf2ug+OzeCO77NqpzqGz
3YKpugcWmuJJbdyAYk7WIAbay/QhGODtqSVCJYPFgO+t/iQVjSy1jC9GX1OWC0TM
64VJvu3KA3Ofr0y6Dqh9/nnQ72ZamNXT07xp5Cv2+08ngvGLLbZUTCv+hwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFDTXvBFv9ANCAaoqCmOY7FxitXpJMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvTk5lOEVXXzBBMElCcWlvS1k1anNYR0sxZWtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAAjjzAwQA
LYjOAwQAWNr6AwQAwS8pAwQAwj3pAwQAwpNYAwQAwpxeAwQAwqlWMA0GCSqGSIb3
DQEBCwUAA4IBAQB2Om7iLHr4vjjElhA8OWPi8rSVEH5fUAXhAQkacgQgoUaX56i4
1tZuVgHRHEqkglrVumNnZc0RdaYX86BuddKPD+Wf04zRVYcPR9JwWd6iZHRTtgA9
/P87v8ujPK8rEPOHkUpJU8o2WPeo5hlbbqw1gSy6Au+Ee6BdX7QQJPyPuykfV+Pn
HCFpauPIZHm2YQz9FHZhtxNlZEU1Wqk+v+S/g9iga5ivaOej3wBgwsydX+75jrL9
bbIPMawDcvYR8PdHtSiMowcjdHdWSoOb7xDIHPv8po1SoKTr3YywY6J5pyT2P5dZ
GENWkPjxfgYMHnIORwSMNyfmtIDv0efk+qV5
-----END CERTIFICATE-----
Generated at Mon Jul 29 13:52:11 2024 by rpki-client on console-fra.rpki-client.org