Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/NHN-S1mJQaqFWubxMdyAV7mATBw.roa
File: NHN-S1mJQaqFWubxMdyAV7mATBw.roa (raw, json)
Hash identifier: rx05rdnlnU6MGG/a0vhRCS+fNzShCrKx0eVsmnLETc4=
Subject key identifier: 34:73:7E:4B:59:89:41:AA:85:5A:E6:F1:31:DC:80:57:B9:80:4C:1C
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 018CC56EF5EAFB406D8009EE7770E395793E
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/NHN-S1mJQaqFWubxMdyAV7mATBw.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12582
IP address blocks: 192.194.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 13:54:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f5:ea:fb:40:6d:80:09:ee:77:70:e3:95:79:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34737e4b598941aa855ae6f131dc8057b9804c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:18:b1:54:2f:3e:76:f8:07:47:19:d7:df:4e:
34:e1:9e:35:93:0e:43:3f:89:a5:2f:b9:04:5f:ec:
6a:71:71:3f:c1:44:de:a1:da:f8:b1:cd:e2:1d:b7:
22:43:69:ce:02:3f:4e:9b:2e:99:3c:69:3b:63:9f:
60:25:c3:64:1f:9e:5d:ce:cd:6a:8b:9f:5f:74:45:
f5:cf:c6:51:c9:5a:62:11:51:6b:b2:95:50:d2:64:
ec:d9:94:3a:e0:b7:21:25:33:e8:b5:58:9d:67:b1:
a1:0c:fe:8d:7c:af:72:53:3c:81:94:18:aa:e4:28:
08:c1:2d:40:33:28:4a:c0:af:e1:d2:33:da:89:19:
82:a9:7a:d6:38:c5:b1:87:3d:f1:8e:b2:e6:bc:37:
4f:7e:b4:a6:87:5e:d6:e4:d7:de:bf:d9:08:20:5a:
41:c8:9c:a3:0e:96:57:8c:0f:65:88:65:f3:ef:a2:
95:5b:40:64:37:22:da:03:82:d1:35:13:d7:65:65:
84:cb:2d:9f:30:1e:24:72:12:83:b4:6c:6d:7d:14:
59:69:d7:4b:c7:6c:fc:3a:56:3d:4a:4c:66:43:dd:
e4:40:35:98:b8:0c:45:55:e1:a8:88:0b:a0:ac:c7:
db:ba:77:86:ef:b5:6b:8c:6c:68:3f:1f:17:4b:c6:
c8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:73:7E:4B:59:89:41:AA:85:5A:E6:F1:31:DC:80:57:B9:80:4C:1C
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/NHN-S1mJQaqFWubxMdyAV7mATBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.194.131.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3e:64:2a:fa:e4:c7:5f:c1:ab:a5:22:b9:0e:40:60:75:97:
a2:fa:04:ee:11:97:a8:19:9d:e6:53:08:31:08:bf:3d:a7:ec:
ff:4c:4f:1b:7a:d0:65:ec:81:95:9a:f9:3d:fa:93:85:c3:cc:
05:e1:cf:9b:0e:95:82:02:c6:7a:3d:21:c0:da:35:5f:69:b8:
47:02:73:0a:84:02:62:ad:91:c0:20:2d:bc:ed:69:ea:f1:3e:
f5:3a:fa:3c:6b:04:33:be:87:58:fa:e7:cc:30:a1:26:d5:a1:
21:3b:9e:72:2e:6b:4a:ad:b2:e4:e7:44:08:5a:d8:ff:16:6b:
0f:55:7f:eb:f8:3a:44:e9:be:4d:e9:87:79:91:d1:91:23:06:
48:c9:e5:f1:78:8e:96:ec:39:df:61:6d:8e:3f:0a:7f:76:e2:
d7:f1:de:bc:af:86:87:c4:19:8d:f6:55:79:ac:dc:09:c4:ef:
2d:48:ff:f6:c1:53:55:84:b8:6b:6e:c7:12:c9:a4:4f:2f:ab:
1f:e4:3b:04:30:80:6d:7c:4c:f3:19:2a:ba:28:13:9c:a9:ec:
6c:45:73:7e:78:06:28:c1:52:c3:b0:c5:f2:b6:77:0c:32:f0:
c9:ab:5b:ad:a7:d7:f6:7e:e3:d1:87:2c:02:b0:c9:da:4c:38:
2d:4b:f7:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbvXq+0BtgAnud3DjlXk+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjQwMTAxMTQzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDczN2U0YjU5ODk0MWFhODU1YWU2ZjEzMWRjODA1N2I5ODA0YzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixixVC8+dvgHRxnX30404Z41kw5D
P4mlL7kEX+xqcXE/wUTeodr4sc3iHbciQ2nOAj9Omy6ZPGk7Y59gJcNkH55dzs1q
i59fdEX1z8ZRyVpiEVFrspVQ0mTs2ZQ64LchJTPotVidZ7GhDP6NfK9yUzyBlBiq
5CgIwS1AMyhKwK/h0jPaiRmCqXrWOMWxhz3xjrLmvDdPfrSmh17W5Nfev9kIIFpB
yJyjDpZXjA9liGXz76KVW0BkNyLaA4LRNRPXZWWEyy2fMB4kchKDtGxtfRRZaddL
x2z8OlY9SkxmQ93kQDWYuAxFVeGoiAugrMfbuneG77VrjGxoPx8XS8bIvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDRzfktZiUGqhVrm8THcgFe5gEwcMB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEvTkhOLVMxbUpRYXFGV3VieE1keUFWN21BVEJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMKDMA0G
CSqGSIb3DQEBCwUAA4IBAQA8PmQq+uTHX8GrpSK5DkBgdZei+gTuEZeoGZ3mUwgx
CL89p+z/TE8betBl7IGVmvk9+pOFw8wF4c+bDpWCAsZ6PSHA2jVfabhHAnMKhAJi
rZHAIC287Wnq8T71Ovo8awQzvodY+ufMMKEm1aEhO55yLmtKrbLk50QIWtj/FmsP
VX/r+DpE6b5N6Yd5kdGRIwZIyeXxeI6W7DnfYW2OPwp/duLX8d68r4aHxBmN9lV5
rNwJxO8tSP/2wVNVhLhrbscSyaRPL6sf5DsEMIBtfEzzGSq6KBOcqexsRXN+eAYo
wVLDsMXytncMMvDJq1utp9f2fuPRhywCsMnaTDgtS/c3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org