Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/nxM21pPpw_Z_ef3-uEDQiyOX-E0.roa
File: nxM21pPpw_Z_ef3-uEDQiyOX-E0.roa (raw, json)
Hash identifier: QE5DPRphWBXq7S+iWGGMG41TrU2hyqzVU2pYnsRDvic=
Subject key identifier: 9F:13:36:D6:93:E9:C3:F6:7F:79:FD:FE:B8:40:D0:8B:23:97:F8:4D
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570307134E6A133E0F00900E5F734520E
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/nxM21pPpw_Z_ef3-uEDQiyOX-E0.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203583
IP address blocks: 195.228.29.0/24 maxlen: 24
84.1.158.0/24 maxlen: 24
195.228.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:71:34:e6:a1:33:e0:f0:09:00:e5:f7:34:52:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f1336d693e9c3f67f79fdfeb840d08b2397f84d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:90:fc:03:6f:9b:35:98:5a:0e:9d:af:48:
84:4e:45:8a:f2:53:cc:53:68:70:a5:17:05:71:95:
92:2d:85:8f:72:14:7e:ca:67:82:88:55:9a:78:ad:
ac:23:ff:3e:5b:b0:52:bb:c3:e6:4d:5f:aa:58:db:
a2:34:74:b5:b0:55:b7:f6:c5:d6:3e:31:eb:a7:d3:
11:eb:f5:68:d2:c7:6f:40:14:0f:4d:71:63:e2:17:
fa:f3:aa:e3:d8:3c:89:61:08:b0:d4:ae:09:9d:54:
78:1c:90:3e:ba:a0:c7:d3:d4:79:b1:0d:da:f7:62:
d4:91:ed:20:00:1d:65:4c:20:e0:cf:ae:ae:82:91:
70:e5:d1:d9:10:6a:a6:01:87:f1:91:20:ee:33:14:
03:d4:5f:e8:fc:22:e2:89:c3:16:63:cc:4f:eb:89:
14:de:a3:c2:72:3b:ce:c8:f3:84:43:58:ea:06:79:
ce:43:14:3d:3e:14:0a:5a:c6:0e:bc:94:fc:94:98:
7c:2e:d5:de:31:cb:55:f6:d9:cd:31:c1:05:7e:7d:
3e:10:ad:b2:3c:f0:ee:6a:63:91:70:a2:08:0a:5a:
03:c5:ff:a5:97:e9:da:f5:a5:21:41:fd:ea:6a:72:
a7:d9:24:36:98:f7:e4:4a:c4:67:9e:a3:9a:93:fc:
37:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:13:36:D6:93:E9:C3:F6:7F:79:FD:FE:B8:40:D0:8B:23:97:F8:4D
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/nxM21pPpw_Z_ef3-uEDQiyOX-E0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.1.158.0/24
195.228.29.0/24
195.228.180.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:43:d0:2d:ae:ed:a7:6e:5d:1c:62:f5:ee:7c:e8:24:61:ec:
6f:3f:e0:07:0d:77:9e:5a:ff:e0:41:e4:90:80:8f:a3:4f:5d:
fe:de:92:ec:fd:d7:fa:9a:bf:9f:06:47:57:15:61:e9:59:50:
2d:76:ea:4f:78:52:68:23:4d:6b:61:2d:40:b2:20:0b:1c:1c:
a7:f4:a0:15:8f:61:bf:17:ff:e8:4f:4f:05:7a:9c:e5:c7:4b:
9a:a0:d1:a4:e5:4f:5f:3f:b5:b1:94:61:4e:dd:62:0a:4d:a0:
4a:d0:28:3c:71:2e:99:85:87:70:5d:20:46:29:96:71:0d:88:
ff:d8:a4:12:e6:a3:a5:57:72:e1:69:a9:c9:63:79:d6:fa:22:
da:a5:cc:64:4b:9f:6c:70:73:07:6a:12:ff:a8:83:cf:42:2d:
78:89:c7:0a:d8:44:c2:97:f1:53:c9:cd:99:ec:6e:5b:c4:06:
1f:01:cb:57:44:8a:55:b1:c8:f8:2d:28:e2:e4:16:04:f9:9f:
f9:00:77:eb:8c:2e:af:c4:7f:16:95:af:ab:ae:43:88:26:07:
0a:b2:8b:b9:0a:91:b9:f5:9c:ac:1d:95:9a:39:38:fa:31:ea:
ea:9d:57:ed:13:e0:3d:5d:c4:2c:9b:57:cc:4c:c3:bf:7f:08:
cc:e1:2c:75
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVwMHE05qEz4PAJAOX3NFIOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4
YWFlN2IwHhcNMjMwMTAyMDE1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjEzMzZkNjkzZTljM2Y2N2Y3OWZkZmViODQwZDA4YjIzOTdmODRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLWQ/ANvmzWYWg6dr0iETkWK8lPM
U2hwpRcFcZWSLYWPchR+ymeCiFWaeK2sI/8+W7BSu8PmTV+qWNuiNHS1sFW39sXW
PjHrp9MR6/Vo0sdvQBQPTXFj4hf686rj2DyJYQiw1K4JnVR4HJA+uqDH09R5sQ3a
92LUke0gAB1lTCDgz66ugpFw5dHZEGqmAYfxkSDuMxQD1F/o/CLiicMWY8xP64kU
3qPCcjvOyPOEQ1jqBnnOQxQ9PhQKWsYOvJT8lJh8LtXeMctV9tnNMcEFfn0+EK2y
PPDuamORcKIICloDxf+ll+na9aUhQf3qanKn2SQ2mPfkSsRnnqOak/w3dwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ8TNtaT6cP2f3n9/rhA0Isjl/hNMB8GA1UdIwQY
MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt
MjkyYWU0NmU2MzAyLzEvbnhNMjFwUHB3X1pfZWYzLXVFRFFpeU9YLUUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy
LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVAGeAwQA
w+QdAwQAw+S0MA0GCSqGSIb3DQEBCwUAA4IBAQAMQ9Atru2nbl0cYvXufOgkYexv
P+AHDXeeWv/gQeSQgI+jT13+3pLs/df6mr+fBkdXFWHpWVAtdupPeFJoI01rYS1A
siALHByn9KAVj2G/F//oT08Fepzlx0uaoNGk5U9fP7WxlGFO3WIKTaBK0Cg8cS6Z
hYdwXSBGKZZxDYj/2KQS5qOlV3LhaanJY3nW+iLapcxkS59scHMHahL/qIPPQi14
iccK2ETCl/FTyc2Z7G5bxAYfActXRIpVscj4LSji5BYE+Z/5AHfrjC6vxH8Wla+r
rkOIJgcKsou5CpG59ZysHZWaOTj6MerqnVftE+A9XcQsm1fMTMO/fwjM4Sx1
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org