Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/njmfM4jXqtyn91LdI0hg00ooTdQ.roa
File: njmfM4jXqtyn91LdI0hg00ooTdQ.roa (raw, json)
Hash identifier: 0lj4c/glemteeAGbawd51IeFytCCudOS3EYu+pPwYSs=
Subject key identifier: 9E:39:9F:33:88:D7:AA:DC:A7:F7:52:DD:23:48:60:D3:4A:28:4D:D4
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0185B8D7CA56F7BDDD71C28C3AC6E3D187D0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/njmfM4jXqtyn91LdI0hg00ooTdQ.roa
Signing time: Mon 16 Jan 2023 04:30:27 +0000
ROA not before: Mon 16 Jan 2023 04:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 95.214.178.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b8:d7:ca:56:f7:bd:dd:71:c2:8c:3a:c6:e3:d1:87:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 16 04:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e399f3388d7aadca7f752dd234860d34a284dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:1f:1e:1f:61:11:b1:65:58:75:46:ed:f6:
13:c3:22:18:fa:b9:50:f1:b3:19:fb:96:df:fb:b2:
10:2d:9c:5b:b7:47:c8:67:e8:8e:8f:e3:72:50:70:
4c:35:60:13:f3:96:0d:c2:84:47:38:bb:93:58:e5:
b0:74:1f:58:44:e3:8e:79:24:09:7a:5c:4a:ed:39:
fc:c7:05:84:76:7c:29:72:74:a1:75:c4:ed:f7:8c:
b0:b6:a2:bf:f1:f5:f6:bf:12:f1:72:ea:bc:b9:75:
ff:d7:3d:e7:cc:51:ba:d6:6b:f2:52:59:83:af:d7:
a7:55:4d:5c:45:75:d0:4f:56:0f:b9:27:74:7a:9e:
39:c2:e6:79:66:78:66:33:59:32:9b:1b:75:26:41:
f0:eb:d6:18:78:80:de:58:91:f1:e9:7a:99:dd:61:
ce:d1:2f:f7:9e:86:c4:50:a0:d0:15:c9:75:52:85:
33:12:85:02:84:41:d6:e7:0c:fe:ea:98:bb:75:37:
a1:73:2a:dd:ba:7f:f7:f9:8a:a5:2f:91:5a:ec:0d:
d8:d6:8a:34:e9:e1:1f:d4:ea:cb:c7:53:d7:66:e7:
d5:d4:ca:98:30:55:da:d4:16:7c:f5:12:c3:da:1e:
09:a9:eb:15:ba:6f:79:f9:24:b8:6e:00:8c:de:23:
dd:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:9F:33:88:D7:AA:DC:A7:F7:52:DD:23:48:60:D3:4A:28:4D:D4
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/njmfM4jXqtyn91LdI0hg00ooTdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.178.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:dd:3b:00:75:e6:12:dd:e5:4e:7d:df:fe:f2:4e:ea:4e:62:
7e:47:a8:18:4f:7c:69:17:e2:c2:b2:35:0c:fc:df:72:ae:fd:
3e:7f:aa:bb:68:1c:3f:b0:ce:e2:ce:ff:0e:98:f6:47:b4:30:
b5:e7:69:d1:fd:11:8d:84:da:fc:76:77:cd:a8:12:6f:24:72:
50:5e:65:71:85:d0:75:e3:82:32:5f:4c:a5:3a:64:9a:90:55:
77:5d:27:d4:b2:0b:35:f1:17:c3:2d:d8:fc:0a:f3:34:91:7d:
e4:4b:8f:b0:45:48:25:ac:3c:31:3e:cf:cd:b7:be:43:0e:d4:
73:ea:d7:aa:32:91:a1:d6:e4:85:69:f3:f6:87:db:d1:d0:3d:
89:4e:ad:93:18:9f:4a:ca:00:01:b6:f7:c2:04:47:c1:56:3a:
7f:1f:68:46:bf:b8:ec:00:a1:26:da:71:28:b2:ea:f9:3f:df:
e3:20:83:64:85:9e:cd:05:c1:8a:d7:23:87:03:45:f9:af:95:
1b:bc:83:17:1a:d4:41:7f:ad:26:a7:f9:91:18:6f:f0:7b:61:
50:a6:8f:f2:0f:74:0a:70:4c:34:25:1e:61:03:e0:bd:54:73:
c9:53:bb:12:47:18:d8:31:97:06:8f:df:4f:d2:c5:56:03:b3:
14:70:10:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYW418pW973dccKMOsbj0YfQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwMTE2MDQzMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTM5OWYzMzg4ZDdhYWRjYTdmNzUyZGQyMzQ4NjBkMzRhMjg0ZGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWofHh9hEbFlWHVG7fYTwyIY+rlQ
8bMZ+5bf+7IQLZxbt0fIZ+iOj+NyUHBMNWAT85YNwoRHOLuTWOWwdB9YROOOeSQJ
elxK7Tn8xwWEdnwpcnShdcTt94ywtqK/8fX2vxLxcuq8uXX/1z3nzFG61mvyUlmD
r9enVU1cRXXQT1YPuSd0ep45wuZ5ZnhmM1kymxt1JkHw69YYeIDeWJHx6XqZ3WHO
0S/3nobEUKDQFcl1UoUzEoUChEHW5wz+6pi7dTehcyrdun/3+YqlL5Fa7A3Y1oo0
6eEf1OrLx1PXZufV1MqYMFXa1BZ89RLD2h4JqesVum95+SS4bgCM3iPdlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ45nzOI16rcp/dS3SNIYNNKKE3UMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvbmptZk00alhxdHluOTFMZEkwaGcwMG9vVGRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX9ayMA0G
CSqGSIb3DQEBCwUAA4IBAQBb3TsAdeYS3eVOfd/+8k7qTmJ+R6gYT3xpF+LCsjUM
/N9yrv0+f6q7aBw/sM7izv8OmPZHtDC152nR/RGNhNr8dnfNqBJvJHJQXmVxhdB1
44IyX0ylOmSakFV3XSfUsgs18RfDLdj8CvM0kX3kS4+wRUglrDwxPs/Nt75DDtRz
6teqMpGh1uSFafP2h9vR0D2JTq2TGJ9KygABtvfCBEfBVjp/H2hGv7jsAKEm2nEo
sur5P9/jIINkhZ7NBcGK1yOHA0X5r5UbvIMXGtRBf60mp/mRGG/we2FQpo/yD3QK
cEw0JR5hA+C9VHPJU7sSRxjYMZcGj99P0sVWA7MUcBBm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org