Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/NrtYqswbb8z75wZXdAIXm4sBQvc.roa
File: NrtYqswbb8z75wZXdAIXm4sBQvc.roa (raw, json)
Hash identifier: ngR7UQCJpR6V/yARD6ZrhDifJhVkvK78ggGhMUBIVX0=
Subject key identifier: 36:BB:58:AA:CC:1B:6F:CC:FB:E7:06:57:74:02:17:9B:8B:01:42:F7
Certificate issuer: /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial: 01856D53C81270C39F51B71D049CBF55D49C
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/NrtYqswbb8z75wZXdAIXm4sBQvc.roa
Signing time: Sun 01 Jan 2023 12:34:45 +0000
ROA not before: Sun 01 Jan 2023 12:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3342
IP address blocks: 185.98.96.0/22 maxlen: 22
92.241.192.0/20 maxlen: 20
178.72.16.0/21 maxlen: 21
212.237.250.0/23 maxlen: 23
92.241.216.0/21 maxlen: 21
2a06:b00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:c8:12:70:c3:9f:51:b7:1d:04:9c:bf:55:d4:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74198f7022b9560501db448af60301fa285e9236
Validity
Not Before: Jan 1 12:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36bb58aacc1b6fccfbe706577402179b8b0142f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:90:2d:c7:44:77:8f:37:6b:bc:a0:7c:ca:
88:0c:4a:65:5e:d6:51:41:4a:e8:03:47:66:99:3e:
8f:32:2a:f2:c7:9e:23:2f:f0:4f:b1:e5:ce:46:ff:
a7:3c:f3:3a:74:6b:d1:eb:c9:53:4c:8f:b6:b9:60:
61:e3:51:37:1f:6d:a3:04:18:0b:f6:4c:9d:59:1e:
91:72:1c:02:e4:f8:99:46:08:9c:fc:11:89:31:37:
1d:c9:8b:94:78:db:f4:ba:7f:70:e6:c5:d8:4b:a9:
3c:3d:63:1a:37:33:16:73:57:a5:17:9e:4c:53:49:
e6:f7:8c:ab:87:d2:5d:24:0f:26:eb:84:82:96:6a:
5d:94:8d:dd:d0:32:45:b1:ff:77:60:1b:7b:5f:6e:
ce:b1:0d:2b:fd:96:2f:c4:85:65:c4:c0:86:7f:18:
16:1b:fa:79:31:87:65:50:c1:27:be:17:95:bd:92:
e0:fc:86:21:ae:47:50:d1:bd:6e:6f:bb:e9:a1:6c:
cb:cd:51:6f:b4:92:ac:e0:a3:5e:29:9c:a6:44:3a:
15:ad:82:39:42:e1:c0:80:51:bb:18:47:20:aa:71:
a1:51:61:d5:41:65:19:35:79:c9:0c:61:a6:9b:6a:
d1:c4:5a:ca:7d:eb:63:17:d2:82:47:56:28:be:f2:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BB:58:AA:CC:1B:6F:CC:FB:E7:06:57:74:02:17:9B:8B:01:42:F7
X509v3 Authority Key Identifier:
keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/NrtYqswbb8z75wZXdAIXm4sBQvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.241.192.0/20
92.241.216.0/21
178.72.16.0/21
185.98.96.0/22
212.237.250.0/23
IPv6:
2a06:b00::/29
Signature Algorithm: sha256WithRSAEncryption
36:da:e0:62:11:0d:c7:c3:82:3c:06:39:81:bf:ab:cf:f6:48:
3a:cf:25:d8:db:b4:49:8d:da:2f:28:48:6b:a0:38:a7:f9:90:
72:07:74:db:83:66:3d:a2:7d:71:92:8e:10:91:e5:c9:fe:4a:
1f:bc:b0:94:a7:de:d3:96:ff:a6:e2:7e:92:fd:04:6d:ab:a3:
89:65:20:60:ab:73:c4:24:90:df:c8:c8:89:3d:55:9b:17:72:
c7:e4:2c:2f:0d:7a:39:07:1d:b4:db:23:4c:0a:eb:0b:dd:6a:
db:9b:b7:35:82:79:0c:be:7d:e8:7f:ee:15:b3:c4:99:33:ff:
77:48:d9:91:c7:ba:3a:64:ef:45:eb:c5:eb:ae:57:33:76:43:
c7:ad:72:a8:c4:09:b3:2c:c7:b3:3b:a2:e3:63:d8:5e:3f:6d:
76:23:56:ed:ad:24:d1:85:00:68:1e:99:6c:3a:99:c8:93:c2:
3a:49:a0:da:18:80:b9:34:12:fc:e2:f7:1e:ce:ac:fb:41:03:
c7:f0:28:a6:8f:92:8f:f9:83:86:78:33:ad:2f:81:3d:b3:70:
cf:d4:2f:e1:7b:c0:e9:d6:61:8e:47:4f:fc:b9:f8:27:44:df:
b8:f9:c6:1e:b5:cd:5d:98:ae:40:ce:28:d7:83:8b:b2:2f:63:
f5:94:6a:6b
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVtU8gScMOfUbcdBJy/VdScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTk4ZjcwMjJiOTU2MDUwMWRiNDQ4YWY2MDMwMWZhMjg1
ZTkyMzYwHhcNMjMwMTAxMTIzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmJiNThhYWNjMWI2ZmNjZmJlNzA2NTc3NDAyMTc5YjhiMDE0MmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlieQLcdEd483a7ygfMqIDEplXtZR
QUroA0dmmT6PMiryx54jL/BPseXORv+nPPM6dGvR68lTTI+2uWBh41E3H22jBBgL
9kydWR6RchwC5PiZRgic/BGJMTcdyYuUeNv0un9w5sXYS6k8PWMaNzMWc1elF55M
U0nm94yrh9JdJA8m64SClmpdlI3d0DJFsf93YBt7X27OsQ0r/ZYvxIVlxMCGfxgW
G/p5MYdlUMEnvheVvZLg/IYhrkdQ0b1ub7vpoWzLzVFvtJKs4KNeKZymRDoVrYI5
QuHAgFG7GEcgqnGhUWHVQWUZNXnJDGGmm2rRxFrKfetjF9KCR1YovvJAnQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFDa7WKrMG2/M++cGV3QCF5uLAUL3MB8GA1UdIwQY
MBaAFHQZj3AiuVYFAdtEivYDAfooXpI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWIt
NmYxNjM5NjZhZjhiLzEvTnJ0WXFzd2JiOHo3NXdaWGRBSVhtNHNCUXZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8xYmU1ZTEtNTZiNC00YzY2LWJlYWItNmYxNjM5NjZhZjhi
LzEvZEJtUGNDSzVWZ1VCMjBTSzlnTUItaWhla2pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEXPHAAwQD
XPHYAwQDskgQAwQCuWJgAwQB1O36MA0EAgACMAcDBQMqBgsAMA0GCSqGSIb3DQEB
CwUAA4IBAQA22uBiEQ3Hw4I8BjmBv6vP9kg6zyXY27RJjdovKEhroDin+ZByB3Tb
g2Y9on1xko4QkeXJ/kofvLCUp97Tlv+m4n6S/QRtq6OJZSBgq3PEJJDfyMiJPVWb
F3LH5CwvDXo5Bx202yNMCusL3Wrbm7c1gnkMvn3of+4Vs8SZM/93SNmRx7o6ZO9F
68XrrlczdkPHrXKoxAmzLMezO6LjY9heP212I1btrSTRhQBoHplsOpnIk8I6SaDa
GIC5NBL84vcezqz7QQPH8Cimj5KP+YOGeDOtL4E9s3DP1C/he8Dp1mGOR0/8ufgn
RN+4+cYetc1dmK5AzijXg4uyL2P1lGpr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:21 2023 by rpki-client on console-ams.rpki-client.org