Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/NbEbxBuXB4sV31WaU_HMMsCR9gs.roa
File: NbEbxBuXB4sV31WaU_HMMsCR9gs.roa (raw, json)
Hash identifier: BdzVFNInz3mxMMpm6Q4lzUnHjBPaDgQC8TCNAHbX5z0=
Subject key identifier: 35:B1:1B:C4:1B:97:07:8B:15:DF:55:9A:53:F1:CC:32:C0:91:F6:0B
Certificate issuer: /CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Certificate serial: 018570D54BE224CBFFF6C9A582EADC9DBB89
Authority key identifier: C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/NbEbxBuXB4sV31WaU_HMMsCR9gs.roa
Signing time: Mon 02 Jan 2023 04:55:04 +0000
ROA not before: Mon 02 Jan 2023 04:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197014
IP address blocks: 185.36.216.0/22 maxlen: 24
194.247.26.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:4b:e2:24:cb:ff:f6:c9:a5:82:ea:dc:9d:bb:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9470ae418eeddd6b39dae9e7a177a19c7799c41
Validity
Not Before: Jan 2 04:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=35b11bc41b97078b15df559a53f1cc32c091f60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:2f:54:d0:7d:27:e1:cd:4b:ec:05:0c:de:
77:4b:a3:b5:bb:7c:fd:64:dc:53:25:a2:f8:1e:14:
0b:12:58:18:2c:6e:7a:6f:24:f6:81:4a:16:eb:6d:
14:76:c4:6d:06:fc:fe:38:b5:2e:94:c4:8c:23:7d:
3d:59:6a:82:6e:2f:79:2e:40:d5:ea:84:b2:93:ab:
0b:f0:75:69:8a:e0:28:bf:87:22:c3:a5:18:d0:fe:
32:43:77:2b:25:be:d9:82:0c:18:ea:0f:a4:24:4d:
e6:07:c5:3d:f1:94:89:bf:60:46:9d:11:9b:7b:b2:
53:7a:e3:01:24:d2:07:3e:fd:6b:d9:e8:94:47:dc:
3a:d4:73:85:d6:a7:ed:4b:cc:c9:68:62:ed:5a:71:
e1:99:be:80:c8:d5:7d:5f:a6:ed:43:57:f1:46:a8:
22:f2:ed:b0:c1:82:42:61:d4:ed:70:b8:e7:87:90:
a6:3f:d5:18:48:5e:01:5a:83:7f:ad:1a:fe:1c:f3:
07:98:b2:e4:f2:4e:51:e4:1d:f0:a0:9d:cc:70:c4:
05:6e:e7:2b:7d:6b:85:23:97:33:ed:96:93:41:f7:
6c:3e:e1:98:d7:62:06:01:bf:ba:09:39:b8:10:8a:
52:f1:2a:7d:52:39:4f:9e:ca:47:6d:31:8d:49:c8:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B1:1B:C4:1B:97:07:8B:15:DF:55:9A:53:F1:CC:32:C0:91:F6:0B
X509v3 Authority Key Identifier:
keyid:C9:47:0A:E4:18:EE:DD:D6:B3:9D:AE:9E:7A:17:7A:19:C7:79:9C:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUcK5Bju3dazna6eehd6Gcd5nEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/NbEbxBuXB4sV31WaU_HMMsCR9gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ce022d-d8db-4459-be1c-b091215d5e4d/1/yUcK5Bju3dazna6eehd6Gcd5nEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.216.0/22
194.247.26.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:4c:ea:43:12:fc:3f:e0:74:3d:5d:8e:68:b2:ed:eb:79:a4:
ae:02:eb:10:87:ad:7e:00:78:1d:87:8a:cb:b5:cf:4c:d8:59:
45:6d:38:68:22:aa:fa:1b:90:ad:5c:cd:e1:51:7f:dd:df:10:
38:4c:9c:ef:80:8c:30:60:24:b9:ce:76:91:17:21:fa:bd:ca:
5c:b4:2a:a3:08:55:4d:4d:00:f5:1b:80:4c:bd:bc:a2:07:c2:
62:db:ec:15:07:59:d8:0d:03:a7:39:1e:35:76:be:cf:c2:0c:
e0:67:d2:91:47:92:2b:63:4a:94:ec:9c:c5:60:f5:50:0a:cc:
65:1d:28:ad:29:80:27:99:39:44:d3:c0:cb:89:72:d6:44:27:
84:89:29:77:13:41:fd:23:36:10:ba:12:ea:6e:9d:6d:b5:dd:
e2:19:8f:da:11:f2:b6:c0:d2:3a:5a:33:3d:06:78:aa:1a:22:
a7:14:ea:e1:9a:b5:df:25:89:ff:17:c5:cf:7f:49:4e:9d:06:
00:c0:72:ee:bd:19:19:8f:88:71:df:c7:84:4c:7e:e7:2e:5c:
31:c0:27:56:94:2a:1f:d2:46:76:37:fe:97:91:aa:e1:71:3c:
a8:45:ac:1a:d7:63:28:4f:ea:fc:cd:83:a1:36:aa:52:6b:14:
9f:4d:ba:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw1UviJMv/9smlgurcnbuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5NDcwYWU0MThlZWRkZDZiMzlkYWU5ZTdhMTc3YTE5Yzc3
OTljNDEwHhcNMjMwMTAyMDQ1NTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNWIxMWJjNDFiOTcwNzhiMTVkZjU1OWE1M2YxY2MzMmMwOTFmNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJsvVNB9J+HNS+wFDN53S6O1u3z9
ZNxTJaL4HhQLElgYLG56byT2gUoW620UdsRtBvz+OLUulMSMI309WWqCbi95LkDV
6oSyk6sL8HVpiuAov4ciw6UY0P4yQ3crJb7ZggwY6g+kJE3mB8U98ZSJv2BGnRGb
e7JTeuMBJNIHPv1r2eiUR9w61HOF1qftS8zJaGLtWnHhmb6AyNV9X6btQ1fxRqgi
8u2wwYJCYdTtcLjnh5CmP9UYSF4BWoN/rRr+HPMHmLLk8k5R5B3woJ3McMQFbucr
fWuFI5cz7ZaTQfdsPuGY12IGAb+6CTm4EIpS8Sp9UjlPnspHbTGNScgV7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDWxG8QblweLFd9VmlPxzDLAkfYLMB8GA1UdIwQY
MBaAFMlHCuQY7t3Ws52unnoXehnHeZxBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMt
YjA5MTIxNWQ1ZTRkLzEvTmJFYnhCdVhCNHNWMzFXYVVfSE1Nc0NSOWdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jZTAyMmQtZDhkYi00NDU5LWJlMWMtYjA5MTIxNWQ1ZTRk
LzEveVVjSzVCanUzZGF6bmE2ZWVoZDZHY2Q1bkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSTYAwQB
wvcaMA0GCSqGSIb3DQEBCwUAA4IBAQAOTOpDEvw/4HQ9XY5osu3reaSuAusQh61+
AHgdh4rLtc9M2FlFbThoIqr6G5CtXM3hUX/d3xA4TJzvgIwwYCS5znaRFyH6vcpc
tCqjCFVNTQD1G4BMvbyiB8Ji2+wVB1nYDQOnOR41dr7PwgzgZ9KRR5IrY0qU7JzF
YPVQCsxlHSitKYAnmTlE08DLiXLWRCeEiSl3E0H9IzYQuhLqbp1ttd3iGY/aEfK2
wNI6WjM9BniqGiKnFOrhmrXfJYn/F8XPf0lOnQYAwHLuvRkZj4hx38eETH7nLlwx
wCdWlCof0kZ2N/6XkarhcTyoRawa12MoT+r8zYOhNqpSaxSfTbpM
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:10 2024 by rpki-client on console-fra.rpki-client.org