Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_NtpzbeuPkKbglyuzJC5PRpP5Dg.roa
File: _NtpzbeuPkKbglyuzJC5PRpP5Dg.roa (raw, json)
Hash identifier: rJPgIpJFYI/a+Rt7rdfj33GFoUi0s3o/4Gx8shQbvbw=
Subject key identifier: FC:DB:69:CD:B7:AE:3E:42:9B:82:5C:AE:CC:90:B9:3D:1A:4F:E4:38
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0191ED530D64E39A267A4BDBF02222EA823E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_NtpzbeuPkKbglyuzJC5PRpP5Dg.roa
Signing time: Fri 13 Sep 2024 21:38:48 +0000
ROA not before: Fri 13 Sep 2024 21:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.150.52.0/24 maxlen: 24
176.105.229.0/24 maxlen: 24
185.177.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 04:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ed:53:0d:64:e3:9a:26:7a:4b:db:f0:22:22:ea:82:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 13 21:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcdb69cdb7ae3e429b825caecc90b93d1a4fe438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:10:b2:c6:1a:5c:91:df:e2:b6:be:01:fe:a6:
20:86:9b:5b:18:d7:0d:d8:dd:26:c9:5a:be:70:3e:
9b:d1:49:86:32:d8:aa:37:15:ea:27:d8:01:9e:bb:
9a:bc:22:1c:b3:39:6a:c0:9e:37:aa:4a:72:ec:af:
6c:2c:31:08:a7:80:15:39:b2:2a:fd:31:d0:f7:c4:
5a:1e:ec:5e:89:23:28:1a:4c:24:bd:5a:ff:74:32:
b9:67:14:ff:d1:d3:fe:ab:da:b9:1c:29:44:73:3e:
b9:bf:be:29:37:41:2e:72:14:0d:88:4d:82:43:b1:
aa:23:85:8e:fb:1d:7c:ee:82:be:07:0d:e3:22:3f:
f0:5b:16:5a:ed:f5:cc:cd:19:b0:b2:be:28:3c:d1:
07:95:d6:6f:60:8e:ec:13:a4:e4:b5:40:cd:40:b1:
b4:42:2e:db:3f:c4:f4:e7:4c:ec:a1:6a:4b:05:b3:
73:f2:77:f4:d5:2f:77:8a:84:1c:71:b7:4c:92:39:
04:c8:74:16:08:e5:73:7a:4a:10:0f:af:c4:6c:18:
b9:98:0b:c3:60:2c:f5:61:1a:3c:06:ab:c2:d5:11:
a4:ce:be:9d:e5:ca:a7:50:ba:9a:bb:d3:db:a0:be:
a0:33:b3:5f:77:ea:38:03:f9:c8:92:b1:ac:9b:57:
c8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:69:CD:B7:AE:3E:42:9B:82:5C:AE:CC:90:B9:3D:1A:4F:E4:38
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_NtpzbeuPkKbglyuzJC5PRpP5Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
176.105.229.0/24
185.177.27.0/24
Signature Algorithm: sha256WithRSAEncryption
38:83:dc:cb:c3:0b:b8:85:88:1c:c4:a2:4d:88:7f:9d:b4:28:
a2:97:2f:b8:25:fd:bb:a5:dd:35:2c:3e:82:c3:55:dc:29:f0:
44:98:df:f6:74:eb:c6:86:e5:17:c6:3c:5d:25:e0:ae:f2:60:
93:83:ea:e4:f7:7a:57:6a:5b:e2:4d:3c:80:9e:e0:6b:d3:92:
1a:17:ee:cb:b3:58:e6:f7:9e:6b:eb:48:b3:25:15:9e:31:93:
1b:85:1a:9d:00:ef:87:20:fd:d0:bd:77:34:50:a4:d4:9d:ca:
32:42:db:3d:a1:8d:19:78:de:3c:b7:00:a0:9c:14:d9:b2:54:
59:c7:4d:9b:cf:24:9d:e5:00:33:61:bf:bd:20:ee:6f:da:8f:
1a:04:fe:54:d1:04:e8:24:42:af:2f:6b:47:b4:a9:10:8e:d8:
f5:d2:3a:0a:ca:a1:8e:a4:a3:1b:6a:00:db:68:14:2b:01:81:
6d:f4:44:c9:7b:fd:36:70:4e:d1:b5:56:35:c6:52:32:32:b6:
e2:7f:24:53:b0:ae:83:d9:95:7a:66:e6:16:47:41:bf:53:0b:
f8:9f:70:28:4c:18:07:f7:06:53:96:d2:03:1e:29:ee:54:c8:
e0:97:1d:7b:82:fc:b3:76:dc:b2:dc:5e:ae:15:87:06:fe:2b:
c5:14:96:a2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZHtUw1k45omekvb8CIi6oI+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwOTEzMjEzODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2RiNjljZGI3YWUzZTQyOWI4MjVjYWVjYzkwYjkzZDFhNGZlNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRCyxhpckd/itr4B/qYghptbGNcN
2N0myVq+cD6b0UmGMtiqNxXqJ9gBnruavCIcszlqwJ43qkpy7K9sLDEIp4AVObIq
/THQ98RaHuxeiSMoGkwkvVr/dDK5ZxT/0dP+q9q5HClEcz65v74pN0EuchQNiE2C
Q7GqI4WO+x187oK+Bw3jIj/wWxZa7fXMzRmwsr4oPNEHldZvYI7sE6TktUDNQLG0
Qi7bP8T050zsoWpLBbNz8nf01S93ioQccbdMkjkEyHQWCOVzekoQD6/EbBi5mAvD
YCz1YRo8BqvC1RGkzr6d5cqnULqau9PboL6gM7Nfd+o4A/nIkrGsm1fIowIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPzbac23rj5Cm4JcrsyQuT0aT+Q4MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvX050cHpiZXVQa0tiZ2x5dXpKQzVQUnBQNURnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZY0AwQA
sGnlAwQAubEbMA0GCSqGSIb3DQEBCwUAA4IBAQA4g9zLwwu4hYgcxKJNiH+dtCii
ly+4Jf27pd01LD6Cw1XcKfBEmN/2dOvGhuUXxjxdJeCu8mCTg+rk93pXalviTTyA
nuBr05IaF+7Ls1jm955r60izJRWeMZMbhRqdAO+HIP3QvXc0UKTUncoyQts9oY0Z
eN48twCgnBTZslRZx02bzySd5QAzYb+9IO5v2o8aBP5U0QToJEKvL2tHtKkQjtj1
0joKyqGOpKMbagDbaBQrAYFt9ETJe/02cE7RtVY1xlIyMrbifyRTsK6D2ZV6ZuYW
R0G/Uwv4n3AoTBgH9wZTltIDHinuVMjglx17gvyzdtyy3F6uFYcG/ivFFJai
Generated at Sun Sep 15 07:27:39 2024 by rpki-client on console-fra.rpki-client.org