Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/NIHgNFbu9-eYU-T8AN0s1t6tcag.roa
File: NIHgNFbu9-eYU-T8AN0s1t6tcag.roa (raw, json)
Hash identifier: HLxj4NmfEdx/HVpF2vOTRQupJZMrsiIa6AMQDUNYy8M=
Subject key identifier: 34:81:E0:34:56:EE:F7:E7:98:53:E4:FC:00:DD:2C:D6:DE:AD:71:A8
Certificate issuer: /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial: 018765FE6039EECECFC7BD7B1446D97C167F
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/NIHgNFbu9-eYU-T8AN0s1t6tcag.roa
Signing time: Sun 09 Apr 2023 12:29:42 +0000
ROA not before: Sun 09 Apr 2023 12:29:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 62.182.170.0/24 maxlen: 24
194.15.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:65:fe:60:39:ee:ce:cf:c7:bd:7b:14:46:d9:7c:16:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Validity
Not Before: Apr 9 12:29:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3481e03456eef7e79853e4fc00dd2cd6dead71a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:6b:bf:63:60:4c:09:56:9b:3a:db:81:97:
44:f5:51:80:8b:17:79:de:03:39:0c:a0:3c:05:b4:
fe:51:ca:ff:be:63:71:44:11:d9:4c:76:5f:d5:b9:
86:90:3b:25:ca:be:e9:ab:60:b5:40:43:10:62:cc:
d1:f3:89:8a:23:f2:10:f2:9b:72:4c:b2:b4:cb:df:
0b:e2:e3:df:ad:2f:70:f5:4c:57:1b:f3:55:3d:1f:
90:0e:f0:ac:dc:9b:08:7e:90:ca:5b:a2:ef:cb:c4:
fe:6a:97:df:5b:46:ca:91:c6:82:85:81:13:17:9c:
31:8a:4c:38:25:e2:05:8e:16:ef:a7:a4:d3:b9:44:
c9:21:a6:a5:c3:77:2f:17:a7:c3:a5:48:ec:c5:4e:
e0:27:0b:fe:1e:20:9a:c7:5d:2d:ea:26:19:46:ca:
9e:6a:6b:af:bc:e3:1f:90:02:c2:28:33:3f:e4:c0:
d2:f0:e8:d1:86:07:01:2a:71:d6:9c:a0:61:47:36:
36:6c:aa:82:20:f5:77:71:15:64:31:6e:0c:a2:28:
87:70:41:74:70:71:53:a3:ca:c9:e2:14:08:46:1b:
49:21:20:af:fa:6d:40:1a:0f:4a:02:7c:58:ea:de:
d4:40:e3:08:c3:e9:1c:a1:33:c0:5b:97:7a:56:47:
c3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:81:E0:34:56:EE:F7:E7:98:53:E4:FC:00:DD:2C:D6:DE:AD:71:A8
X509v3 Authority Key Identifier:
keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/NIHgNFbu9-eYU-T8AN0s1t6tcag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.170.0/24
194.15.152.0/24
Signature Algorithm: sha256WithRSAEncryption
61:39:af:c0:95:b6:f5:76:e3:3e:f6:50:ef:ff:e5:5d:1f:61:
b8:87:d8:68:e7:72:90:e9:64:6d:a9:9e:f4:4f:34:3a:fe:5d:
26:84:12:1a:e6:70:7d:1b:ee:b9:23:84:78:f6:e5:77:8a:fb:
2b:52:eb:24:ad:4c:3d:92:f5:72:f6:ce:46:9e:a6:72:08:d8:
58:ab:89:3d:85:e4:d1:fe:53:29:af:88:51:bf:18:41:0c:02:
28:98:ff:70:1a:01:ac:1f:f8:06:07:eb:87:42:95:4f:a3:8a:
c5:7b:ff:90:6f:78:e4:d0:de:ad:a4:7e:76:ff:39:8b:68:88:
98:0b:94:fa:90:42:2b:39:de:4f:60:d2:78:d2:5e:7e:2d:51:
59:12:cd:d4:b7:df:ca:2c:43:44:08:c7:6a:7a:8e:30:9a:d3:
db:48:4b:9c:c1:1e:83:ca:af:0f:94:96:33:c8:58:ba:4a:21:
be:9a:f8:4c:6a:b4:3c:ff:83:0d:e6:67:74:08:40:97:07:72:
d3:15:7c:1a:8e:ca:51:d7:09:50:f9:94:15:df:48:c1:f6:79:
a8:28:94:fa:23:2c:2d:78:f0:e4:f0:48:cb:86:51:4c:28:e9:
ae:12:9b:f3:69:66:8d:8d:7e:b0:f4:f0:d3:c0:ca:db:93:68:
e3:e5:97:c1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdl/mA57s7Px717FEbZfBZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjNGVkOTQyZTVjNzQyZTc3YmZiOWJlYjk1NGY4NzI1MzRm
NTI4NDgwHhcNMjMwNDA5MTIyOTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDgxZTAzNDU2ZWVmN2U3OTg1M2U0ZmMwMGRkMmNkNmRlYWQ3MWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAdrv2NgTAlWmzrbgZdE9VGAixd5
3gM5DKA8BbT+Ucr/vmNxRBHZTHZf1bmGkDslyr7pq2C1QEMQYszR84mKI/IQ8pty
TLK0y98L4uPfrS9w9UxXG/NVPR+QDvCs3JsIfpDKW6Lvy8T+apffW0bKkcaChYET
F5wxikw4JeIFjhbvp6TTuUTJIaalw3cvF6fDpUjsxU7gJwv+HiCax10t6iYZRsqe
amuvvOMfkALCKDM/5MDS8OjRhgcBKnHWnKBhRzY2bKqCIPV3cRVkMW4MoiiHcEF0
cHFTo8rJ4hQIRhtJISCv+m1AGg9KAnxY6t7UQOMIw+kcoTPAW5d6VkfDHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDSB4DRW7vfnmFPk/ADdLNberXGoMB8GA1UdIwQY
MBaAFDxO2ULlx0Lne/ub65VPhyU09ShIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2Et
NzczNDRiY2M5MTkxLzEvTklIZ05GYnU5LWVZVS1UOEFOMHMxdDZ0Y2FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xYmI0NWEtNTUxYy00OTY3LTk1Y2EtNzczNDRiY2M5MTkx
LzEvUEU3WlF1WEhRdWQ3LTV2cmxVLUhKVFQxS0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPraqAwQA
wg+YMA0GCSqGSIb3DQEBCwUAA4IBAQBhOa/Albb1duM+9lDv/+VdH2G4h9ho53KQ
6WRtqZ70TzQ6/l0mhBIa5nB9G+65I4R49uV3ivsrUuskrUw9kvVy9s5GnqZyCNhY
q4k9heTR/lMpr4hRvxhBDAIomP9wGgGsH/gGB+uHQpVPo4rFe/+Qb3jk0N6tpH52
/zmLaIiYC5T6kEIrOd5PYNJ40l5+LVFZEs3Ut9/KLENECMdqeo4wmtPbSEucwR6D
yq8PlJYzyFi6SiG+mvhMarQ8/4MN5md0CECXB3LTFXwajspR1wlQ+ZQV30jB9nmo
KJT6IywtePDk8EjLhlFMKOmuEpvzaWaNjX6w9PDTwMrbk2jj5ZfB
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:54 2023 by rpki-client on console-ams.rpki-client.org