Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NtSBWA0xUpXO7SQ6NOKXEMgeV6U.roa
File: NtSBWA0xUpXO7SQ6NOKXEMgeV6U.roa (raw, json)
Hash identifier: E29TQlc57v+lritE55UOrm4+eUmBzdhwoNGpcxjHYvI=
Subject key identifier: 36:D4:81:58:0D:31:52:95:CE:ED:24:3A:34:E2:97:10:C8:1E:57:A5
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01856F1DC78F85492EBD0B99BB81F9A46441
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NtSBWA0xUpXO7SQ6NOKXEMgeV6U.roa
Signing time: Sun 01 Jan 2023 20:55:00 +0000
ROA not before: Sun 01 Jan 2023 20:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6233
IP address blocks: 80.66.196.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
45.11.45.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
194.36.242.0/24 maxlen: 24
195.245.219.0/24 maxlen: 24
45.139.193.0/24 maxlen: 24
185.184.222.0/24 maxlen: 24
45.13.197.0/24 maxlen: 24
45.13.196.0/22 maxlen: 24
45.13.196.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
45.87.164.0/22 maxlen: 24
195.245.242.0/24 maxlen: 24
45.87.164.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
45.147.48.0/22 maxlen: 24
45.153.244.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
185.248.87.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.194.52.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
2a09::/29 maxlen: 48
2a0d:c7c0::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:c7:8f:85:49:2e:bd:0b:99:bb:81:f9:a4:64:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 20:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36d481580d315295ceed243a34e29710c81e57a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:c4:20:4e:97:37:c7:d3:1f:fd:8d:f2:18:
6d:d1:b7:64:13:af:17:3a:b6:a6:cf:27:49:f1:e7:
ed:5b:7c:99:fe:61:10:c8:4a:ff:c0:a0:05:15:e0:
17:71:c4:49:cc:cc:9f:fc:46:97:e9:e1:a4:d2:d7:
45:cb:27:b6:82:02:24:d5:ee:87:d9:e4:2d:77:6b:
38:60:8f:e8:2c:6d:81:4f:30:37:f7:5e:77:36:bd:
b2:d8:93:c4:de:7a:7f:34:5f:32:88:08:52:6a:5a:
f1:34:8c:22:85:86:5a:3b:7e:76:8c:98:73:5d:2b:
67:24:aa:55:cd:78:93:1f:37:ab:fd:32:da:c9:62:
c5:7d:97:06:a4:f0:1b:d3:27:19:b5:1f:dd:15:e5:
f2:75:a6:e2:eb:83:dc:71:de:0a:cc:70:d5:77:e1:
05:b4:21:8f:fe:e0:d7:48:e6:23:8f:8d:6b:66:37:
e6:f3:7e:ee:5a:8b:e4:67:8c:b2:2a:e9:d5:82:ed:
44:09:ec:d5:dc:78:1b:3b:f7:2a:35:1d:1d:3d:05:
42:5d:7e:3a:b1:10:4c:2c:e9:af:9d:c4:70:8e:e5:
0a:3b:b9:75:76:b6:b8:bd:af:55:47:a9:e3:14:5c:
d3:30:61:a1:46:cc:7d:c8:00:1d:ce:37:98:df:c7:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:81:58:0D:31:52:95:CE:ED:24:3A:34:E2:97:10:C8:1E:57:A5
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/NtSBWA0xUpXO7SQ6NOKXEMgeV6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.196.0/22
45.87.164.0/22
45.130.20.0/22
45.139.193.0/24
45.143.232.0/22
45.147.48.0/22
45.153.244.0/22
79.143.140.0/22
80.66.196.0/24
94.124.116.0/22
141.98.196.0/22
185.184.222.0/24
185.194.52.0/22
185.200.64.0/22
185.222.216.0/21
185.248.87.0/24
194.36.24.0/24
194.36.242.0/24
194.104.152.0/22
194.169.54.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a09::/29
2a0d:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
59:fb:ff:5b:27:4a:98:44:b8:b1:1c:ad:86:75:25:79:85:96:
9b:34:af:e2:8f:06:5d:6d:05:54:1f:df:ca:e4:2e:2e:d6:ac:
c2:0e:43:8f:76:54:2b:94:96:a8:53:f6:91:17:a4:07:c7:94:
87:dc:f6:d9:af:39:c0:a2:03:6c:99:65:df:6c:85:53:eb:66:
bd:68:d0:b9:89:5e:aa:41:af:30:8c:f9:f2:18:ff:80:75:26:
3c:d2:e3:e9:60:de:88:7c:44:5d:f6:80:63:37:14:57:e9:c6:
eb:df:77:91:f9:29:78:e6:c6:3e:7a:c0:7c:20:f9:44:4c:ce:
7a:92:cd:7c:cc:93:5b:84:1a:3d:ae:48:51:5f:26:f3:ff:13:
bf:d9:1a:85:43:a0:ad:82:20:97:b8:77:65:8a:05:60:6a:6a:
7a:a6:6b:84:6e:77:02:db:25:c7:3d:46:e8:06:9b:41:d9:b1:
70:2d:9b:13:69:36:e8:5e:ca:f8:24:e5:37:ea:9a:01:31:64:
74:39:4c:b6:0a:cb:8b:05:1d:3a:de:3a:8a:74:ad:7b:35:3e:
bf:8b:21:d7:77:d4:ef:48:30:5a:e1:f7:12:11:65:e9:35:3d:
be:1a:c6:09:b1:95:f3:a5:e5:9b:44:27:01:14:f5:ef:d5:ab:
fa:1b:43:bc
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAYVvHcePhUkuvQuZu4H5pGRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi
YmFhZTIwHhcNMjMwMTAxMjA1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmQ0ODE1ODBkMzE1Mjk1Y2VlZDI0M2EzNGUyOTcxMGM4MWU1N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRDEIE6XN8fTH/2N8hht0bdkE68X
OramzydJ8eftW3yZ/mEQyEr/wKAFFeAXccRJzMyf/EaX6eGk0tdFyye2ggIk1e6H
2eQtd2s4YI/oLG2BTzA39153Nr2y2JPE3np/NF8yiAhSalrxNIwihYZaO352jJhz
XStnJKpVzXiTHzer/TLayWLFfZcGpPAb0ycZtR/dFeXydabi64Pccd4KzHDVd+EF
tCGP/uDXSOYjj41rZjfm837uWovkZ4yyKunVgu1ECezV3HgbO/cqNR0dPQVCXX46
sRBMLOmvncRwjuUKO7l1dra4va9VR6njFFzTMGGhRsx9yAAdzjeY38d2mwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFDbUgVgNMVKVzu0kOjTilxDIHlelMB8GA1UdIwQY
MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt
MjU0YWNkOTJiNGUxLzEvTnRTQldBMHhVcFhPN1NRNk5PS1hFTWdlVjZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx
LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBmQQCAAEwgZIDBAAt
Cy0DBAItDcQDBAItV6QDBAItghQDBAAti8EDBAItj+gDBAItkzADBAItmfQDBAJP
j4wDBABQQsQDBAJefHQDBAKNYsQDBAC5uN4DBAK5wjQDBAK5yEADBAO53tgDBAC5
+FcDBADCJBgDBADCJPIDBALCaJgDBAHCqTYDBADD9dswDAMEAMP18QMEAMP18jAU
BAIAAjAOAwUDKgkAAAMFACoNx8AwDQYJKoZIhvcNAQELBQADggEBAFn7/1snSphE
uLEcrYZ1JXmFlps0r+KPBl1tBVQf38rkLi7WrMIOQ492VCuUlqhT9pEXpAfHlIfc
9tmvOcCiA2yZZd9shVPrZr1o0LmJXqpBrzCM+fIY/4B1JjzS4+lg3oh8RF32gGM3
FFfpxuvfd5H5KXjmxj56wHwg+URMznqSzXzMk1uEGj2uSFFfJvP/E7/ZGoVDoK2C
IJe4d2WKBWBqanqma4RudwLbJcc9RugGm0HZsXAtmxNpNuheyvgk5TfqmgExZHQ5
TLYKy4sFHTreOop0rXs1Pr+LIdd31O9IMFrh9xIRZek1Pb4axgmxlfOl5ZtEJwEU
9e/Vq/obQ7w=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org