Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/nBmaIVKWs2zHY8FpauWR1vf22L0.roa
File: nBmaIVKWs2zHY8FpauWR1vf22L0.roa (raw, json)
Hash identifier: Y3zxe/J2lpg5InQTcRrjW07k37BtNsWMU1a1YSb6iA8=
Subject key identifier: 9C:19:9A:21:52:96:B3:6C:C7:63:C1:69:6A:E5:91:D6:F7:F6:D8:BD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CC500B50AB886173DA6EE5B0C837D985A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/nBmaIVKWs2zHY8FpauWR1vf22L0.roa
Signing time: Mon 01 Jan 2024 12:30:07 +0000
ROA not before: Mon 01 Jan 2024 12:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207590
IP address blocks: 176.105.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 04:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b5:0a:b8:86:17:3d:a6:ee:5b:0c:83:7d:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 12:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c199a215296b36cc763c1696ae591d6f7f6d8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:73:ba:aa:34:76:16:65:ab:1c:a7:27:b0:
51:ff:bf:63:5f:b8:a8:71:dc:9e:42:7b:6f:9e:ac:
e0:2d:7f:1c:4e:3d:33:c6:05:a2:d9:f0:0b:e6:f0:
ae:17:79:e1:29:98:35:8e:36:54:27:a6:57:41:ef:
5e:c1:62:bd:ef:2c:fd:bd:bc:65:b8:a9:7e:46:e9:
81:96:11:ba:1e:74:b4:a3:9e:29:3f:58:ee:ad:12:
2b:a6:e6:75:b9:e5:bc:c1:5d:3a:6b:c2:1f:33:0a:
cc:2c:ff:e0:e3:22:e1:7b:f5:5a:95:51:b1:07:4c:
dc:99:71:bc:2d:1b:04:b5:d8:e6:db:7b:49:9e:00:
59:d6:4a:4e:10:ba:ce:35:50:4d:96:9c:68:9c:77:
28:5c:b9:41:1b:32:3e:86:05:d4:06:e9:eb:72:85:
e7:3a:8d:54:49:e1:22:4c:37:01:12:7a:39:5e:b9:
fc:cd:9e:33:da:22:15:7a:4f:04:d0:97:43:5d:ba:
b8:6b:a6:26:f2:3e:4d:1e:bb:df:86:8f:aa:1f:b9:
cf:d4:27:67:27:8e:55:34:6d:64:02:62:fb:fd:de:
2c:c9:c3:1e:19:18:5b:89:d9:78:58:7b:7a:41:35:
a5:22:28:f7:8e:4f:4d:55:a6:51:df:7a:68:74:c1:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:19:9A:21:52:96:B3:6C:C7:63:C1:69:6A:E5:91:D6:F7:F6:D8:BD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/nBmaIVKWs2zHY8FpauWR1vf22L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8a:8c:c2:51:bd:be:60:fa:1d:5b:f5:d8:7d:b8:b8:8f:a7:
78:53:40:70:f5:ec:56:03:d1:9f:26:38:3e:f8:18:f0:bf:5e:
d2:c6:7f:a6:b0:55:11:de:b0:f5:72:a0:30:0c:dd:a6:16:cd:
73:23:0d:eb:93:c0:79:2d:59:cf:b9:0c:e8:00:5c:bc:85:4d:
df:c0:59:12:d6:60:3f:9e:0b:06:87:02:af:47:9d:bf:62:e2:
9d:47:1a:ee:2e:94:1f:de:13:a7:b1:95:6e:2e:c0:53:b2:a2:
7f:5a:90:41:9c:7e:f7:0a:67:a1:9a:53:64:30:e9:04:36:17:
70:40:e5:03:4c:21:3a:36:9e:43:2d:5e:bc:c8:a7:05:70:7e:
d5:3b:a1:bb:cc:f9:4d:5d:0e:5c:12:c4:af:87:2c:83:2f:62:
c0:15:b2:1c:60:a2:0c:29:93:08:cf:0b:ae:09:47:58:3c:a8:
82:46:5a:66:9d:a3:3a:8f:e6:34:df:3f:05:c0:3c:0a:15:a8:
11:85:5d:fb:4a:a2:6c:8f:16:19:5e:7a:d6:67:77:48:8e:0f:
54:db:65:a6:a0:a7:43:f1:21:75:30:fe:ed:01:fc:87:fe:d8:
f9:7f:62:c5:9b:f2:0d:7d:fe:e2:ad:f1:8b:9d:cd:ba:ea:cd:
f9:cd:ca:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFALUKuIYXPabuWwyDfZhaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwMTAxMTIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzE5OWEyMTUyOTZiMzZjYzc2M2MxNjk2YWU1OTFkNmY3ZjZkOGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBZzuqo0dhZlqxynJ7BR/79jX7io
cdyeQntvnqzgLX8cTj0zxgWi2fAL5vCuF3nhKZg1jjZUJ6ZXQe9ewWK97yz9vbxl
uKl+RumBlhG6HnS0o54pP1jurRIrpuZ1ueW8wV06a8IfMwrMLP/g4yLhe/ValVGx
B0zcmXG8LRsEtdjm23tJngBZ1kpOELrONVBNlpxonHcoXLlBGzI+hgXUBunrcoXn
Oo1USeEiTDcBEno5Xrn8zZ4z2iIVek8E0JdDXbq4a6Ym8j5NHrvfho+qH7nP1Cdn
J45VNG1kAmL7/d4sycMeGRhbidl4WHt6QTWlIij3jk9NVaZR33podMGe5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJwZmiFSlrNsx2PBaWrlkdb39ti9MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvbkJtYUlWS1dzMnpIWThGcGF1V1IxdmYyMkwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGnnMA0G
CSqGSIb3DQEBCwUAA4IBAQCkiozCUb2+YPodW/XYfbi4j6d4U0Bw9exWA9GfJjg+
+Bjwv17Sxn+msFUR3rD1cqAwDN2mFs1zIw3rk8B5LVnPuQzoAFy8hU3fwFkS1mA/
ngsGhwKvR52/YuKdRxruLpQf3hOnsZVuLsBTsqJ/WpBBnH73CmehmlNkMOkENhdw
QOUDTCE6Np5DLV68yKcFcH7VO6G7zPlNXQ5cEsSvhyyDL2LAFbIcYKIMKZMIzwuu
CUdYPKiCRlpmnaM6j+Y03z8FwDwKFagRhV37SqJsjxYZXnrWZ3dIjg9U22WmoKdD
8SF1MP7tAfyH/tj5f2LFm/INff7irfGLnc266s35zcqI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org