Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/nsyplyzZXhrp-CbsDy41kmqEz3M.roa
File: nsyplyzZXhrp-CbsDy41kmqEz3M.roa (raw, json)
Hash identifier: O7vjVwySin1unlRIbQWEFnqec52nUalF9gBszmpEzQI=
Subject key identifier: 9E:CC:A9:97:2C:D9:5E:1A:E9:F8:26:EC:0F:2E:35:92:6A:84:CF:73
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 01856D93EA98181E7A1AB883A63AB3733385
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/nsyplyzZXhrp-CbsDy41kmqEz3M.roa
Signing time: Sun 01 Jan 2023 13:44:48 +0000
ROA not before: Sun 01 Jan 2023 13:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 192.58.56.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:93:ea:98:18:1e:7a:1a:b8:83:a6:3a:b3:73:33:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Jan 1 13:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ecca9972cd95e1ae9f826ec0f2e35926a84cf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:87:9c:b3:df:3d:03:7f:3a:77:96:fd:c2:63:
0c:19:f5:18:41:18:ee:99:a7:36:12:c0:27:17:90:
62:64:1e:e6:8e:95:f6:ff:83:b1:55:31:a8:34:37:
26:63:67:ec:1d:d2:a5:65:68:13:96:c6:27:76:0c:
fd:a3:ce:f0:52:b1:41:2f:de:6e:a6:2a:31:36:dd:
fd:ad:f2:d2:d8:df:25:80:d4:05:02:de:e6:9d:9c:
8f:88:a3:03:78:64:a0:d1:7c:bb:d0:96:39:72:4b:
cc:99:7e:ad:0b:bf:fb:c8:bc:b6:68:65:fd:51:81:
84:5c:f2:97:89:04:58:5f:08:c6:92:32:41:ab:b0:
99:37:9a:c2:6e:12:8a:45:8c:74:93:78:08:26:b8:
46:95:20:92:ff:77:08:68:10:99:b8:97:68:a1:d1:
c8:5a:fe:05:bd:8b:c0:42:a8:6e:4b:89:e5:59:0d:
67:a6:f3:db:dc:34:45:9f:78:68:9b:1c:73:e3:bf:
52:31:61:f7:66:ba:7e:17:54:d4:f5:c8:c1:c0:1a:
78:7f:39:82:f5:35:1a:bc:09:88:88:9f:3e:76:f7:
0e:d2:61:e9:94:94:7c:a0:ef:ff:8d:13:d9:a2:8c:
87:0c:74:59:67:dc:9b:21:c1:ff:af:7d:e9:dc:0b:
d3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:A9:97:2C:D9:5E:1A:E9:F8:26:EC:0F:2E:35:92:6A:84:CF:73
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/nsyplyzZXhrp-CbsDy41kmqEz3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.56.0/22
Signature Algorithm: sha256WithRSAEncryption
70:6c:8c:d1:ee:3f:09:02:eb:95:8f:89:8e:38:32:94:76:36:
f0:7f:04:1a:f6:f8:32:49:63:9d:67:04:33:f4:e2:fe:02:ec:
d9:94:34:af:4c:82:91:5d:6f:c8:7c:c5:ee:d9:12:29:3f:ef:
05:75:25:72:35:2a:38:d1:0e:65:74:d7:f3:90:51:52:a8:d8:
c0:9b:d9:7e:d6:fb:f1:24:c4:2d:0d:04:21:a6:95:d4:99:3b:
d0:90:46:f3:73:c6:8f:25:60:f2:63:93:e7:cb:9d:f2:f4:ef:
f7:76:62:90:cc:6c:3d:3b:d9:ad:04:85:af:e4:52:0c:a4:0b:
f6:b7:ca:5d:b2:28:bb:78:f6:92:8a:d1:2f:e3:84:fe:d2:27:
83:58:e3:2f:9e:51:93:40:9c:8d:b4:64:70:c1:62:32:b1:15:
78:00:75:3f:03:c0:4c:fc:6f:84:ee:eb:1b:e1:15:76:c1:f6:
89:8e:4d:9c:77:dd:b3:47:72:f9:c3:bf:66:95:f3:13:2d:1f:
c1:fb:55:61:3b:67:e5:c2:3f:fd:95:13:38:d5:e9:e2:28:8f:
c6:36:4c:5b:03:1c:e3:09:db:2c:4b:f2:4d:6b:5d:ac:03:d1:
4e:2f:67:d1:3b:63:48:d7:06:b6:4d:28:d7:56:b2:3d:d1:34:
ab:a2:ed:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtk+qYGB56GriDpjqzczOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj
NWRiNDYwHhcNMjMwMTAxMTM0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWNjYTk5NzJjZDk1ZTFhZTlmODI2ZWMwZjJlMzU5MjZhODRjZjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIecs989A386d5b9wmMMGfUYQRju
mac2EsAnF5BiZB7mjpX2/4OxVTGoNDcmY2fsHdKlZWgTlsYndgz9o87wUrFBL95u
pioxNt39rfLS2N8lgNQFAt7mnZyPiKMDeGSg0Xy70JY5ckvMmX6tC7/7yLy2aGX9
UYGEXPKXiQRYXwjGkjJBq7CZN5rCbhKKRYx0k3gIJrhGlSCS/3cIaBCZuJdoodHI
Wv4FvYvAQqhuS4nlWQ1npvPb3DRFn3homxxz479SMWH3Zrp+F1TU9cjBwBp4fzmC
9TUavAmIiJ8+dvcO0mHplJR8oO//jRPZooyHDHRZZ9ybIcH/r33p3AvTrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ7MqZcs2V4a6fgm7A8uNZJqhM9zMB8GA1UdIwQY
MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt
YTRjYThiOWMyMDViLzEvbnN5cGx5elpYaHJwLUNic0R5NDFrbXFFejNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi
LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwDo4MA0G
CSqGSIb3DQEBCwUAA4IBAQBwbIzR7j8JAuuVj4mOODKUdjbwfwQa9vgySWOdZwQz
9OL+AuzZlDSvTIKRXW/IfMXu2RIpP+8FdSVyNSo40Q5ldNfzkFFSqNjAm9l+1vvx
JMQtDQQhppXUmTvQkEbzc8aPJWDyY5Pny53y9O/3dmKQzGw9O9mtBIWv5FIMpAv2
t8pdsii7ePaSitEv44T+0ieDWOMvnlGTQJyNtGRwwWIysRV4AHU/A8BM/G+E7usb
4RV2wfaJjk2cd92zR3L5w79mlfMTLR/B+1VhO2flwj/9lRM41eniKI/GNkxbAxzj
CdssS/JNa12sA9FOL2fRO2NI1wa2TSjXVrI90TSrou1t
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:12 2024 by rpki-client on console-fra.rpki-client.org