Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/NA_4MMXu_V9bQPrHgWHojFEDpkY.roa
File: NA_4MMXu_V9bQPrHgWHojFEDpkY.roa (raw, json)
Hash identifier: 6n3zVGv9zIV9HktzY0MR2XG/EJaKXC7Rje8wM+I/7X4=
Subject key identifier: 34:0F:F8:30:C5:EE:FD:5F:5B:40:FA:C7:81:61:E8:8C:51:03:A6:46
Certificate issuer: /CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Certificate serial: 018CC801282CC6CA07FD3098CA0C1E93BF58
Authority key identifier: D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/NA_4MMXu_V9bQPrHgWHojFEDpkY.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16199
IP address blocks: 195.250.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:28:2c:c6:ca:07:fd:30:98:ca:0c:1e:93:bf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9e483f8b027b20a70414a56d3fdc7894896addc
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=340ff830c5eefd5f5b40fac78161e88c5103a646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7e:95:9d:12:15:d4:be:d6:2e:fa:89:40:53:
dd:48:12:b6:61:ed:a2:91:f7:ab:f6:9b:d0:99:94:
7f:91:29:55:31:f2:bf:48:a4:f3:b8:49:cd:55:74:
35:42:8c:82:ff:cf:f4:82:4b:bd:2c:b1:c6:0a:aa:
dd:8b:8d:5d:69:9e:cd:83:53:30:c7:09:f8:c0:52:
27:d4:c1:f9:52:52:52:80:f7:e0:4a:03:92:25:6e:
42:c6:1f:fb:39:c0:b3:f9:c9:91:30:5c:c8:a9:7a:
c4:80:3d:f3:42:01:8e:2e:94:ef:5d:d5:30:2b:2c:
58:a9:c1:81:58:35:f5:7b:c0:e1:23:99:6e:2e:f1:
e8:0e:d9:63:5e:0d:7a:b5:9c:2f:01:71:61:db:46:
55:da:81:c4:e3:27:d1:c8:40:c1:47:8e:4c:e0:47:
55:c3:db:14:d9:d4:52:2e:a3:2b:e5:4f:d2:08:9b:
45:d5:74:93:9f:ea:2f:27:8a:f5:fd:8c:d9:ab:74:
1f:c5:98:63:61:a4:9d:92:87:56:9e:14:d3:95:c9:
59:4e:48:f5:3b:f1:26:11:c1:4a:97:17:aa:e5:8f:
e0:dc:1b:7f:ed:bb:3a:33:3b:cf:7e:60:52:e5:87:
2c:70:68:81:d9:a6:9e:13:7f:73:c7:7e:60:65:60:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0F:F8:30:C5:EE:FD:5F:5B:40:FA:C7:81:61:E8:8C:51:03:A6:46
X509v3 Authority Key Identifier:
keyid:D9:E4:83:F8:B0:27:B2:0A:70:41:4A:56:D3:FD:C7:89:48:96:AD:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2eSD-LAnsgpwQUpW0_3HiUiWrdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/NA_4MMXu_V9bQPrHgWHojFEDpkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b5ba77-898c-4d76-a845-0e6f39f56e19/1/2eSD-LAnsgpwQUpW0_3HiUiWrdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.59.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e6:ad:19:33:81:f4:14:72:0c:c4:15:1f:d2:49:e8:f2:57:
88:18:1c:ab:19:03:c3:85:09:2d:9b:58:8f:78:49:5f:7b:98:
1b:37:24:1c:3b:ea:0b:89:00:ad:c7:2d:db:d9:ce:66:12:a5:
f9:ed:d6:b5:1c:b2:a5:67:1f:1b:6b:b2:5d:35:94:6c:c1:0f:
46:48:2f:4e:cb:26:ad:c6:e5:2b:d3:23:8f:be:81:f0:1a:c6:
28:62:90:cb:4e:64:5c:03:dc:43:40:06:2f:e9:80:3a:f9:69:
4a:38:82:6c:c2:c1:5f:b5:3a:3c:30:51:3c:9d:e3:78:4e:0e:
39:65:f2:95:13:6e:c8:b7:95:62:bd:15:c3:e7:83:95:0b:ca:
6b:75:c9:fb:a8:18:88:9c:13:8c:0b:d2:f5:d8:69:14:5c:29:
8e:79:9f:16:1f:62:b2:44:ff:ff:c7:1e:e4:a4:32:6d:85:b5:
c5:af:eb:b7:96:79:de:54:cf:ce:5e:fb:0b:88:b6:e9:74:4c:
26:1f:d6:8e:d2:58:a7:fe:ef:81:c7:a1:e9:1c:a6:4e:c6:77:
87:cc:1f:85:75:6b:ef:bf:ca:c7:6b:bc:e7:63:a0:12:73:66:
b6:6b:b1:ea:ce:c1:1b:16:6a:45:8a:3a:6e:cc:dd:4a:c0:e5:
53:0d:ac:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIASgsxsoH/TCYygwek79YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZTQ4M2Y4YjAyN2IyMGE3MDQxNGE1NmQzZmRjNzg5NDg5
NmFkZGMwHhcNMjQwMTAyMDIyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDBmZjgzMGM1ZWVmZDVmNWI0MGZhYzc4MTYxZTg4YzUxMDNhNjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn6VnRIV1L7WLvqJQFPdSBK2Ye2i
kfer9pvQmZR/kSlVMfK/SKTzuEnNVXQ1QoyC/8/0gku9LLHGCqrdi41daZ7Ng1Mw
xwn4wFIn1MH5UlJSgPfgSgOSJW5Cxh/7OcCz+cmRMFzIqXrEgD3zQgGOLpTvXdUw
KyxYqcGBWDX1e8DhI5luLvHoDtljXg16tZwvAXFh20ZV2oHE4yfRyEDBR45M4EdV
w9sU2dRSLqMr5U/SCJtF1XSTn+ovJ4r1/YzZq3QfxZhjYaSdkodWnhTTlclZTkj1
O/EmEcFKlxeq5Y/g3Bt/7bs6MzvPfmBS5YcscGiB2aaeE39zx35gZWADGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQP+DDF7v1fW0D6x4Fh6IxRA6ZGMB8GA1UdIwQY
MBaAFNnkg/iwJ7IKcEFKVtP9x4lIlq3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmVTRC1MQW5zZ3B3UVVwVzBfM0hpVWlXcmR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iNWJhNzctODk4Yy00ZDc2LWE4NDUt
MGU2ZjM5ZjU2ZTE5LzEvTkFfNE1NWHVfVjliUVBySGdXSG9qRkVEcGtZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9iNWJhNzctODk4Yy00ZDc2LWE4NDUtMGU2ZjM5ZjU2ZTE5
LzEvMmVTRC1MQW5zZ3B3UVVwVzBfM0hpVWlXcmR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/o7MA0G
CSqGSIb3DQEBCwUAA4IBAQA95q0ZM4H0FHIMxBUf0kno8leIGByrGQPDhQktm1iP
eElfe5gbNyQcO+oLiQCtxy3b2c5mEqX57da1HLKlZx8ba7JdNZRswQ9GSC9Oyyat
xuUr0yOPvoHwGsYoYpDLTmRcA9xDQAYv6YA6+WlKOIJswsFftTo8MFE8neN4Tg45
ZfKVE27It5VivRXD54OVC8prdcn7qBiInBOMC9L12GkUXCmOeZ8WH2KyRP//xx7k
pDJthbXFr+u3lnneVM/OXvsLiLbpdEwmH9aO0lin/u+Bx6HpHKZOxneHzB+FdWvv
v8rHa7znY6ASc2a2a7HqzsEbFmpFijpuzN1KwOVTDazS
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:35:47 2025 by rpki-client