Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/noTP-4Tgdm5_qwuGa4DX9EJbdMw.roa
File: noTP-4Tgdm5_qwuGa4DX9EJbdMw.roa (raw, json)
Hash identifier: rg/aqAF+L97QZXOe/q9OQQK1Hkld62PKf8oiTfdWDUE=
Subject key identifier: 9E:84:CF:FB:84:E0:76:6E:7F:AB:0B:86:6B:80:D7:F4:42:5B:74:CC
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 0188976F469B7D75A358CD3C63FC05336C1D
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/noTP-4Tgdm5_qwuGa4DX9EJbdMw.roa
Signing time: Wed 07 Jun 2023 19:57:12 +0000
ROA not before: Wed 07 Jun 2023 19:57:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 185.76.63.0/24 maxlen: 24
185.76.61.0/24 maxlen: 24
188.119.182.0/23 maxlen: 23
188.119.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Sep 2023 08:45:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:97:6f:46:9b:7d:75:a3:58:cd:3c:63:fc:05:33:6c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jun 7 19:57:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e84cffb84e0766e7fab0b866b80d7f4425b74cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1f:e0:a9:f9:b4:4d:d3:62:d0:a6:ca:03:a1:
a7:96:02:02:60:79:ee:75:b2:95:51:34:71:69:03:
78:e9:6f:f7:2f:af:5e:3e:5b:8a:9f:3e:4b:25:aa:
d7:3c:5b:0a:e9:5b:8f:b6:7f:9c:45:f2:ed:74:2e:
2b:28:31:df:f7:ee:a0:c3:7f:26:6a:65:15:30:c4:
32:45:a3:1f:71:34:c4:2d:0c:3c:3e:d2:3e:1f:91:
bf:c7:13:d4:4e:ae:5b:d9:9c:27:58:87:b8:99:86:
c2:71:cf:67:7a:c1:3a:07:e5:a0:68:da:44:16:18:
2f:2f:02:66:35:73:9d:e3:60:93:d5:12:c9:a3:2c:
f7:0a:0d:7d:69:44:0d:bf:0f:aa:9a:ce:07:a0:6e:
40:e2:f5:16:be:30:98:2f:27:5a:ba:f8:72:9f:aa:
15:58:21:69:bc:80:d6:97:e1:18:0f:84:9b:b5:32:
3b:e7:46:34:bd:09:6f:ae:c7:fc:18:4e:b9:4e:19:
aa:7c:91:fc:18:ac:2f:8d:94:a2:7e:8f:b7:d6:9e:
1e:ab:4d:42:73:ff:46:4a:4e:29:fc:ec:db:34:06:
1e:a0:3f:10:a7:ad:67:57:24:07:09:f7:aa:eb:d5:
e4:cd:4e:af:24:57:0b:f5:d6:e1:df:74:0b:2d:19:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:84:CF:FB:84:E0:76:6E:7F:AB:0B:86:6B:80:D7:F4:42:5B:74:CC
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/noTP-4Tgdm5_qwuGa4DX9EJbdMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.61.0/24
185.76.63.0/24
188.119.180.0/24
188.119.182.0/23
Signature Algorithm: sha256WithRSAEncryption
29:5c:00:4a:70:f3:13:67:29:a7:4b:07:78:a0:54:4a:6d:6b:
0a:16:a1:0d:2a:99:c7:99:66:79:15:01:12:8d:18:fb:cc:f8:
3c:54:a2:8c:57:1d:7c:29:12:aa:d6:e2:41:40:2e:59:50:19:
8d:37:a4:c9:7e:c0:84:c0:e0:36:01:6b:16:40:61:a6:60:32:
05:16:c7:91:2e:62:67:66:c9:6b:17:7f:e2:57:8f:e7:ec:3e:
4a:4b:55:98:12:9a:bd:04:36:47:10:23:3d:7f:03:9f:9b:37:
2b:87:6a:20:21:e9:39:54:50:2a:a5:fc:a5:38:ed:9f:eb:f2:
bd:8d:44:04:07:1e:af:45:1e:6b:d1:67:5d:cc:aa:ab:8a:63:
18:21:79:bc:44:cc:c3:9b:99:6f:6b:98:cf:f4:41:1b:80:ac:
fe:3a:5d:1c:72:c1:21:65:52:e0:7a:de:63:d4:d0:cc:d3:ed:
96:f0:95:c9:9b:2a:26:43:4c:91:d4:fb:20:7f:4c:bb:e0:58:
b4:4d:17:24:bc:c0:f3:94:d6:74:e7:a4:0c:35:47:21:c7:a2:
4d:79:e5:cf:37:6d:06:4e:d1:d7:7f:dc:12:c5:c7:f9:26:35:
cd:cc:09:4b:01:61:59:7d:5a:a7:e4:7f:b4:72:92:24:42:21:
da:c6:6d:cf
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYiXb0abfXWjWM08Y/wFM2wdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjMwNjA3MTk1NzEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTg0Y2ZmYjg0ZTA3NjZlN2ZhYjBiODY2YjgwZDdmNDQyNWI3NGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgh/gqfm0TdNi0KbKA6GnlgICYHnu
dbKVUTRxaQN46W/3L69ePluKnz5LJarXPFsK6VuPtn+cRfLtdC4rKDHf9+6gw38m
amUVMMQyRaMfcTTELQw8PtI+H5G/xxPUTq5b2ZwnWIe4mYbCcc9nesE6B+WgaNpE
FhgvLwJmNXOd42CT1RLJoyz3Cg19aUQNvw+qms4HoG5A4vUWvjCYLydauvhyn6oV
WCFpvIDWl+EYD4SbtTI750Y0vQlvrsf8GE65ThmqfJH8GKwvjZSifo+31p4eq01C
c/9GSk4p/OzbNAYeoD8Qp61nVyQHCfeq69XkzU6vJFcL9dbh33QLLRnA7wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJ6Ez/uE4HZuf6sLhmuA1/RCW3TMMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvbm9UUC00VGdkbTVfcXd1R2E0RFg5RUpiZE13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuUw9AwQA
uUw/AwQAvHe0AwQBvHe2MA0GCSqGSIb3DQEBCwUAA4IBAQApXABKcPMTZymnSwd4
oFRKbWsKFqENKpnHmWZ5FQESjRj7zPg8VKKMVx18KRKq1uJBQC5ZUBmNN6TJfsCE
wOA2AWsWQGGmYDIFFseRLmJnZslrF3/iV4/n7D5KS1WYEpq9BDZHECM9fwOfmzcr
h2ogIek5VFAqpfylOO2f6/K9jUQEBx6vRR5r0WddzKqrimMYIXm8RMzDm5lva5jP
9EEbgKz+Ol0ccsEhZVLget5j1NDM0+2W8JXJmyomQ0yR1Psgf0y74Fi0TRckvMDz
lNZ056QMNUchx6JNeeXPN20GTtHXf9wSxcf5JjXNzAlLAWFZfVqn5H+0cpIkQiHa
xm3P
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:50 2024 by rpki-client on console-ams.rpki-client.org