Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/NpJDArMsI5w_382DJSjojKXGIsA.roa
File: NpJDArMsI5w_382DJSjojKXGIsA.roa (raw, json)
Hash identifier: Y0NHrm5GKyQJRkNX4WaAAIn2MXdX7E9WBOlVxaLMp3g=
Subject key identifier: 36:92:43:02:B3:2C:23:9C:3F:DF:CD:83:25:28:E8:8C:A5:C6:22:C0
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 01856C6F283782ACCB26B0324D837184C292
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/NpJDArMsI5w_382DJSjojKXGIsA.roa
Signing time: Sun 01 Jan 2023 08:25:02 +0000
ROA not before: Sun 01 Jan 2023 08:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 4755
IP address blocks: 91.140.128.0/17 maxlen: 17
194.54.192.0/18 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:28:37:82:ac:cb:26:b0:32:4d:83:71:84:c2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jan 1 08:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36924302b32c239c3fdfcd832528e88ca5c622c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:30:6a:b4:b9:c2:9f:00:a9:3b:ec:5c:7f:1a:
ba:6a:ad:bb:4b:59:14:75:31:a1:98:3b:14:1d:c0:
00:14:38:76:1f:e4:16:70:9d:3a:83:24:2c:cf:63:
e9:40:48:d8:1c:6b:00:38:91:ff:3b:dd:87:75:a0:
3d:03:d6:96:c6:70:81:d2:e9:9f:23:57:bc:46:e4:
0f:0a:06:fb:a3:69:6e:83:3f:ad:17:49:b9:3f:61:
91:97:53:e0:e1:3f:65:9b:a7:7c:84:e8:4f:c0:ed:
88:a9:10:ab:b3:8b:b5:4c:82:70:99:d1:64:e2:e3:
77:95:db:67:bb:6b:86:b2:e4:9d:3e:55:1d:7a:77:
2b:c7:7a:a6:3e:67:c5:1c:ce:16:2d:7a:93:ba:04:
90:68:0f:08:17:87:68:f8:93:6a:54:a5:74:b3:32:
2a:f5:a1:b3:49:75:f8:4f:fa:7f:78:6c:3e:83:ee:
07:d1:6d:08:f2:c6:9b:0b:49:59:56:fd:8f:c4:e3:
93:e7:d2:5f:e8:64:87:2d:ae:4e:15:68:a8:b4:ed:
dd:6b:92:8f:07:c6:f0:54:68:1c:30:b1:4b:9f:22:
35:d6:0c:31:e4:63:ea:5a:03:d7:d2:f0:0a:1c:5f:
a0:0a:f1:cc:28:87:ea:5e:78:b5:fe:c6:69:94:7a:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:43:02:B3:2C:23:9C:3F:DF:CD:83:25:28:E8:8C:A5:C6:22:C0
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/NpJDArMsI5w_382DJSjojKXGIsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
194.54.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:c3:2d:94:f4:98:5a:fb:61:df:03:b1:fb:2e:e7:b9:ee:45:
20:b5:a6:60:c5:40:fc:49:b9:40:04:4b:35:f0:b3:ba:0c:e2:
92:a2:4e:69:3b:a3:46:1d:64:95:05:06:66:b1:eb:9b:76:8b:
ec:28:c1:f9:d5:0a:dd:fd:79:11:47:7c:af:b0:68:dc:08:90:
e7:5e:9c:d7:78:7b:c4:fb:19:bd:85:06:5f:7d:68:5f:59:da:
eb:d3:fd:4b:b0:54:36:c1:61:6b:aa:5f:fd:bd:d0:87:06:8b:
03:3a:66:c4:5f:6f:a4:49:bb:6f:86:dc:c4:7f:f4:4e:b0:8c:
67:ca:f3:e0:5c:b2:27:0b:55:41:4b:68:75:f6:d4:87:e6:93:
e4:1a:89:a9:76:17:6f:d9:b2:41:f5:c1:a2:96:6d:f5:a9:20:
35:b8:19:95:e7:c2:9f:d5:a4:63:42:bd:64:98:c1:d4:d1:47:
fd:dc:38:53:11:87:66:ea:d5:f2:04:f7:6f:6e:18:cd:38:2c:
6a:3b:db:55:98:cb:6a:2c:eb:d5:5e:d8:26:1e:86:b1:0a:2e:
5c:73:e6:54:af:80:e4:da:16:22:6c:e9:98:32:d0:a2:c0:06:
04:c3:30:bb:60:21:58:e2:98:27:5a:67:59:d6:f3:b1:a6:97:
00:67:23:38
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVsbyg3gqzLJrAyTYNxhMKSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjMwMTAxMDgyNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjkyNDMwMmIzMmMyMzljM2ZkZmNkODMyNTI4ZTg4Y2E1YzYyMmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljBqtLnCnwCpO+xcfxq6aq27S1kU
dTGhmDsUHcAAFDh2H+QWcJ06gyQsz2PpQEjYHGsAOJH/O92HdaA9A9aWxnCB0umf
I1e8RuQPCgb7o2lugz+tF0m5P2GRl1Pg4T9lm6d8hOhPwO2IqRCrs4u1TIJwmdFk
4uN3ldtnu2uGsuSdPlUdencrx3qmPmfFHM4WLXqTugSQaA8IF4do+JNqVKV0szIq
9aGzSXX4T/p/eGw+g+4H0W0I8sabC0lZVv2PxOOT59Jf6GSHLa5OFWiotO3da5KP
B8bwVGgcMLFLnyI11gwx5GPqWgPX0vAKHF+gCvHMKIfqXni1/sZplHrmyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDaSQwKzLCOcP9/NgyUo6IylxiLAMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvTnBKREFyTXNJNXdfMzgyREpTam9qS1hHSXNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHW4yAAwQG
wjbAMA0GCSqGSIb3DQEBCwUAA4IBAQCmwy2U9Jha+2HfA7H7Lue57kUgtaZgxUD8
SblABEs18LO6DOKSok5pO6NGHWSVBQZmseubdovsKMH51Qrd/XkRR3yvsGjcCJDn
XpzXeHvE+xm9hQZffWhfWdrr0/1LsFQ2wWFrql/9vdCHBosDOmbEX2+kSbtvhtzE
f/ROsIxnyvPgXLInC1VBS2h19tSH5pPkGompdhdv2bJB9cGilm31qSA1uBmV58Kf
1aRjQr1kmMHU0Uf93DhTEYdm6tXyBPdvbhjNOCxqO9tVmMtqLOvVXtgmHoaxCi5c
c+ZUr4Dk2hYibOmYMtCiwAYEwzC7YCFY4pgnWmdZ1vOxppcAZyM4
-----END CERTIFICATE-----
Generated at Thu Sep 14 08:01:10 2023 by rpki-client on console-fra.rpki-client.org