Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/nm_-PPL-BjQpxAvGLcBwUL43zTs.roa
File: nm_-PPL-BjQpxAvGLcBwUL43zTs.roa (raw, json)
Hash identifier: KLCyL5wYEkiRXHo+oof8zAbDAhwCeiR9uh2ttyo4mcY=
Subject key identifier: 9E:6F:FE:3C:F2:FE:06:34:29:C4:0B:C6:2D:C0:70:50:BE:37:CD:3B
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 01856BAECA2EFAEE8B4108166ADA40609E5B
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/nm_-PPL-BjQpxAvGLcBwUL43zTs.roa
Signing time: Sun 01 Jan 2023 04:54:55 +0000
ROA not before: Sun 01 Jan 2023 04:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43967
IP address blocks: 45.159.100.0/22 maxlen: 24
195.158.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:ca:2e:fa:ee:8b:41:08:16:6a:da:40:60:9e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 1 04:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e6ffe3cf2fe063429c40bc62dc07050be37cd3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:6d:82:65:2d:ce:6e:cc:bb:65:80:ca:44:
ec:76:b1:07:9a:9d:52:fe:70:ff:bc:1a:04:24:93:
09:f8:72:45:40:f6:46:f5:a8:49:ec:ad:5d:8a:af:
64:1f:0a:a5:1e:dc:96:38:56:d2:8f:41:38:0a:7f:
18:5c:d4:99:fa:17:53:97:a3:ea:b8:96:05:55:6f:
fb:7b:10:f1:7c:25:85:67:1c:d1:fb:a1:cc:54:9d:
4b:17:4e:94:c2:13:34:a6:c5:10:c2:fd:f0:fb:42:
e7:84:8a:14:89:67:d2:b2:1d:69:47:1b:e4:95:a0:
ff:84:d5:c5:77:2a:56:5c:20:98:70:55:88:69:a7:
e2:2d:eb:e4:3a:e6:24:d9:21:dc:72:e8:d7:66:3a:
c1:ee:6b:ff:cb:7d:7c:c9:36:88:ac:68:63:55:5b:
13:2b:c7:e0:cb:70:c0:01:f2:2f:a4:ee:95:31:6e:
2a:b2:47:a8:73:0c:b9:31:bb:7b:dc:81:02:f3:86:
d1:ef:6b:4d:9b:52:63:96:cb:ca:09:e9:75:55:c6:
d5:36:ab:46:31:37:1e:c6:e9:61:e7:84:98:32:36:
b9:ef:4e:fe:30:c1:47:9e:2c:ca:28:59:b5:3e:9d:
ab:ac:dc:4f:7f:b4:07:fc:af:84:a1:0f:6f:60:b2:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:6F:FE:3C:F2:FE:06:34:29:C4:0B:C6:2D:C0:70:50:BE:37:CD:3B
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/nm_-PPL-BjQpxAvGLcBwUL43zTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.100.0/22
195.158.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:ab:56:26:85:64:e5:2d:c0:b6:fa:d5:a3:ff:3e:72:44:d0:
a9:8d:d2:1d:ca:47:a4:06:5f:82:86:20:b7:b6:31:16:70:21:
c2:5c:cf:08:94:b3:c3:be:37:d2:ad:43:05:30:ec:17:34:12:
8a:8a:9d:fe:db:02:7c:db:09:7b:2d:f7:bd:f5:dc:8c:b0:2b:
8a:a3:51:ad:25:de:14:90:19:c2:41:5f:32:bb:de:fe:9f:24:
72:78:3d:8f:3d:18:be:45:9d:90:ea:ea:fe:7b:cd:f8:e8:0a:
29:e2:5b:d6:d9:a0:e6:2b:8a:c8:26:ad:be:8c:96:15:aa:36:
29:a5:e0:91:ca:72:5d:5e:12:d4:0a:19:c2:2c:45:ab:9f:56:
af:09:51:c2:c7:65:ad:3e:31:22:55:d6:31:2a:17:c2:e1:43:
15:e2:82:47:25:d1:e7:c8:36:cd:94:cd:7e:ad:c5:fa:2a:7a:
ab:2d:5e:0a:7c:b8:f1:10:07:c8:60:c1:5a:53:2e:07:32:55:
05:3e:a4:01:ee:b3:64:20:05:3b:6d:6b:d4:22:83:0e:17:f2:
fa:66:37:86:4d:c7:49:c0:40:e2:82:38:23:10:e5:8c:0b:fb:
dd:98:45:b8:21:38:f2:cf:0d:c2:35:a7:e7:74:0a:21:4f:36:
e7:1e:23:b8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVrrsou+u6LQQgWatpAYJ5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjOTRiYjY5NDUzZjEzOWE2MDAyOWUyMmRiMGZiMzQyNGE5
MDZjZWUwHhcNMjMwMTAxMDQ1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTZmZmUzY2YyZmUwNjM0MjljNDBiYzYyZGMwNzA1MGJlMzdjZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cNtgmUtzm7Mu2WAykTsdrEHmp1S
/nD/vBoEJJMJ+HJFQPZG9ahJ7K1diq9kHwqlHtyWOFbSj0E4Cn8YXNSZ+hdTl6Pq
uJYFVW/7exDxfCWFZxzR+6HMVJ1LF06UwhM0psUQwv3w+0LnhIoUiWfSsh1pRxvk
laD/hNXFdypWXCCYcFWIaafiLevkOuYk2SHccujXZjrB7mv/y318yTaIrGhjVVsT
K8fgy3DAAfIvpO6VMW4qskeocwy5Mbt73IEC84bR72tNm1JjlsvKCel1VcbVNqtG
MTcexulh54SYMja5707+MMFHnizKKFm1Pp2rrNxPf7QH/K+EoQ9vYLKceQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ5v/jzy/gY0KcQLxi3AcFC+N807MB8GA1UdIwQY
MBaAFNyUu2lFPxOaYAKeItsPs0JKkGzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGIt
MDkwYzQ2ZTlmMmVkLzEvbm1fLVBQTC1CalFweEF2R0xjQndVTDQzelRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9kMDQ1Y2EtYzFmNy00ZWQ5LWFmZGItMDkwYzQ2ZTlmMmVk
LzEvM0pTN2FVVV9FNXBnQXA0aTJ3LXpRa3FRYk80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZ9kAwQC
w57EMA0GCSqGSIb3DQEBCwUAA4IBAQC6q1YmhWTlLcC2+tWj/z5yRNCpjdIdykek
Bl+ChiC3tjEWcCHCXM8IlLPDvjfSrUMFMOwXNBKKip3+2wJ82wl7Lfe99dyMsCuK
o1GtJd4UkBnCQV8yu97+nyRyeD2PPRi+RZ2Q6ur+e8346Aop4lvW2aDmK4rIJq2+
jJYVqjYppeCRynJdXhLUChnCLEWrn1avCVHCx2WtPjEiVdYxKhfC4UMV4oJHJdHn
yDbNlM1+rcX6KnqrLV4KfLjxEAfIYMFaUy4HMlUFPqQB7rNkIAU7bWvUIoMOF/L6
ZjeGTcdJwEDigjgjEOWMC/vdmEW4ITjyzw3CNafndAohTzbnHiO4
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:38 2024 by rpki-client on console-ams.rpki-client.org