Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/NPbE-DBAgincUT9QO450lslnoSs.roa
File: NPbE-DBAgincUT9QO450lslnoSs.roa (raw, json)
Hash identifier: s5dnKBU6lozKtZK3BlLvetvBSjQemUHp5ZjnM7Ycoxk=
Subject key identifier: 34:F6:C4:F8:30:40:82:29:DC:51:3F:50:3B:8E:74:96:C9:67:A1:2B
Certificate issuer: /CN=717f55f3c6007b1cbdd7e820890569006757b366
Certificate serial: 018CC86F0A01414F737DC3B2F7B51CB30BD6
Authority key identifier: 71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/NPbE-DBAgincUT9QO450lslnoSs.roa
Signing time: Tue 02 Jan 2024 04:29:29 +0000
ROA not before: Tue 02 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43638
IP address blocks: 141.138.164.0/22 maxlen: 22
141.138.160.0/21 maxlen: 21
141.138.160.0/22 maxlen: 22
91.197.152.0/22 maxlen: 22
91.197.152.0/23 maxlen: 23
91.197.154.0/23 maxlen: 23
2a01:9380::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0a:01:41:4f:73:7d:c3:b2:f7:b5:1c:b3:0b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=717f55f3c6007b1cbdd7e820890569006757b366
Validity
Not Before: Jan 2 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34f6c4f830408229dc513f503b8e7496c967a12b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:d9:69:08:4a:04:11:b9:92:e6:a8:6f:b8:
36:35:a3:fe:b1:09:29:f3:fb:d4:3b:36:03:cb:e0:
de:cf:b1:74:bd:a4:cf:11:68:a4:0b:80:e3:7b:bb:
e3:46:47:10:dd:ee:85:29:ab:e7:44:f7:24:2a:01:
15:5c:da:11:7c:f1:db:b6:da:16:23:21:ca:89:c2:
03:57:70:62:23:71:8f:25:96:b2:ab:8d:59:9f:23:
22:e8:4c:da:6b:20:33:e9:e9:94:cf:b8:3b:94:fe:
ac:51:24:ef:4c:21:10:86:93:da:0e:c8:ab:81:fa:
53:bd:d8:3d:26:db:5d:69:ac:7e:d3:f1:2a:22:1d:
bb:61:7a:77:f8:d5:5d:1d:ce:69:47:78:55:d5:91:
24:dc:ca:5a:d7:dd:78:f2:4c:74:65:04:09:ae:98:
fa:ac:d6:e9:06:07:ca:cb:b4:7c:33:57:29:03:1b:
91:8e:e7:eb:98:a8:b0:0f:5d:6e:10:84:ea:2d:5d:
fa:48:50:f1:b3:73:83:1d:05:9d:1f:f2:3b:fa:9a:
38:db:88:9b:92:df:e8:ee:a5:96:d5:ba:9f:40:b6:
df:a8:1b:e7:b5:29:8b:4a:4c:f6:e0:06:19:d4:a2:
f0:c3:e1:d9:05:d5:ea:1a:c0:a6:9c:4c:76:f8:7e:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F6:C4:F8:30:40:82:29:DC:51:3F:50:3B:8E:74:96:C9:67:A1:2B
X509v3 Authority Key Identifier:
keyid:71:7F:55:F3:C6:00:7B:1C:BD:D7:E8:20:89:05:69:00:67:57:B3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cX9V88YAexy91-ggiQVpAGdXs2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/NPbE-DBAgincUT9QO450lslnoSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bec41a-d9f8-4545-8e48-673640233665/1/cX9V88YAexy91-ggiQVpAGdXs2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.152.0/22
141.138.160.0/21
IPv6:
2a01:9380::/32
Signature Algorithm: sha256WithRSAEncryption
1f:fb:12:0d:7b:42:32:08:b0:f8:a8:70:2b:81:b5:83:ab:21:
7b:f7:c6:c2:1b:8d:7a:91:21:4d:5b:19:ee:02:87:32:19:7d:
47:83:7a:90:b8:52:ec:bc:11:50:72:5e:31:92:23:f0:fa:3c:
08:37:7c:e5:ad:90:1d:03:90:20:c9:29:62:72:ab:9f:73:06:
98:cf:ea:62:73:97:f5:ad:e1:e2:e7:0c:54:62:a5:68:a2:32:
f2:0c:12:fe:5f:36:21:e6:ae:f8:94:20:59:be:a4:6f:bc:db:
b8:42:e0:45:a4:51:9e:ce:62:f5:a4:74:e6:81:7b:a7:dc:48:
7b:00:e0:84:14:99:57:12:ce:d2:55:80:b6:ba:eb:2b:2b:f3:
e5:93:a9:eb:f3:50:59:c8:be:c0:6c:58:20:ed:19:d1:f1:71:
dc:1a:fc:ef:93:bc:b4:3b:94:de:9a:c3:df:78:e2:7a:37:07:
9e:77:e3:70:15:90:cf:70:61:eb:e5:fa:bc:88:cb:a3:d1:57:
80:53:78:1c:3b:a7:dc:98:1e:73:f9:9c:d5:8e:47:61:e1:38:
d2:ed:f0:3a:a9:0d:2f:6f:4e:19:96:5c:e1:c6:da:62:3a:9a:
9b:3a:b9:2f:f6:94:fc:0c:c1:8f:ca:19:96:f1:32:ce:e3:a1:
58:a7:b8:2b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzIbwoBQU9zfcOy97UcswvWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxN2Y1NWYzYzYwMDdiMWNiZGQ3ZTgyMDg5MDU2OTAwNjc1
N2IzNjYwHhcNMjQwMTAyMDQyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGY2YzRmODMwNDA4MjI5ZGM1MTNmNTAzYjhlNzQ5NmM5NjdhMTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3fZaQhKBBG5kuaob7g2NaP+sQkp
8/vUOzYDy+Dez7F0vaTPEWikC4Dje7vjRkcQ3e6FKavnRPckKgEVXNoRfPHbttoW
IyHKicIDV3BiI3GPJZayq41ZnyMi6EzaayAz6emUz7g7lP6sUSTvTCEQhpPaDsir
gfpTvdg9Jttdaax+0/EqIh27YXp3+NVdHc5pR3hV1ZEk3Mpa19148kx0ZQQJrpj6
rNbpBgfKy7R8M1cpAxuRjufrmKiwD11uEITqLV36SFDxs3ODHQWdH/I7+po424ib
kt/o7qWW1bqfQLbfqBvntSmLSkz24AYZ1KLww+HZBdXqGsCmnEx2+H42vQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDT2xPgwQIIp3FE/UDuOdJbJZ6ErMB8GA1UdIwQY
MBaAFHF/VfPGAHscvdfoIIkFaQBnV7NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgt
NjczNjQwMjMzNjY1LzEvTlBiRS1EQkFnaW5jVVQ5UU80NTBsc2xub1NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iZWM0MWEtZDlmOC00NTQ1LThlNDgtNjczNjQwMjMzNjY1
LzEvY1g5Vjg4WUFleHk5MS1nZ2lRVnBBR2RYczJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW8WYAwQD
jYqgMA0EAgACMAcDBQAqAZOAMA0GCSqGSIb3DQEBCwUAA4IBAQAf+xINe0IyCLD4
qHArgbWDqyF798bCG416kSFNWxnuAocyGX1Hg3qQuFLsvBFQcl4xkiPw+jwIN3zl
rZAdA5AgySlicqufcwaYz+pic5f1reHi5wxUYqVoojLyDBL+XzYh5q74lCBZvqRv
vNu4QuBFpFGezmL1pHTmgXun3Eh7AOCEFJlXEs7SVYC2uusrK/Plk6nr81BZyL7A
bFgg7RnR8XHcGvzvk7y0O5TemsPfeOJ6Nweed+NwFZDPcGHr5fq8iMuj0VeAU3gc
O6fcmB5z+ZzVjkdh4TjS7fA6qQ0vb04ZllzhxtpiOpqbOrkv9pT8DMGPyhmW8TLO
46FYp7gr
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:49:34 2025 by rpki-client