Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NocoG64Obe78qhJdpNh3B9ZpIXo.roa
File: NocoG64Obe78qhJdpNh3B9ZpIXo.roa (raw, json)
Hash identifier: 7g12LyEtY9wtDeNTnDoVQ3oqO0rPsGPfxmIa67vkG5k=
Subject key identifier: 36:87:28:1B:AE:0E:6D:EE:FC:AA:12:5D:A4:D8:77:07:D6:69:21:7A
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0186FEE9E749E9DC922C0659DEF6051B9CF6
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NocoG64Obe78qhJdpNh3B9ZpIXo.roa
Signing time: Mon 20 Mar 2023 12:06:27 +0000
ROA not before: Mon 20 Mar 2023 12:06:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204174
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:e9:e7:49:e9:dc:92:2c:06:59:de:f6:05:1b:9c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 20 12:06:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3687281bae0e6deefcaa125da4d87707d669217a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:22:2e:03:18:ad:fa:61:a9:d6:82:eb:51:d4:
05:ed:63:9d:4f:9b:60:8b:64:8d:4b:17:60:a4:93:
85:1f:c7:a9:44:63:12:45:f9:f2:9f:e0:2a:de:61:
3a:12:a7:76:ce:2f:9b:88:8f:92:30:8b:4d:f3:16:
8c:ab:45:14:93:d8:fa:7d:45:57:f6:c5:90:80:98:
d5:16:20:25:65:3c:1f:0d:65:8f:45:70:a0:f7:f3:
c6:ba:b8:b4:96:cc:f7:a4:81:d9:41:42:f1:6c:72:
a6:1e:a4:c8:16:a5:ed:15:13:98:5c:e3:19:a8:a7:
b9:17:dd:5e:97:ad:71:a1:cd:6c:96:cb:78:15:ff:
d2:6c:e6:86:0b:b7:b1:78:04:50:10:76:8d:19:f6:
b6:54:98:a6:c4:f9:ff:1c:04:ba:62:d3:82:1a:2b:
7d:52:11:e0:3f:9f:0d:52:64:44:90:89:d0:8f:86:
25:94:ab:1d:23:b3:84:fb:83:e2:b0:89:6f:92:35:
fe:31:d3:49:e5:ee:28:74:ad:df:cb:2c:c8:6a:94:
cc:17:e4:6d:91:f0:ea:e3:22:e9:1d:62:c9:a3:4a:
c7:59:0b:d0:7e:ad:24:fe:72:25:b5:9f:de:05:68:
0e:7a:59:b5:21:dc:ce:f7:c0:ba:e6:20:74:d5:b5:
da:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:87:28:1B:AE:0E:6D:EE:FC:AA:12:5D:A4:D8:77:07:D6:69:21:7A
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/NocoG64Obe78qhJdpNh3B9ZpIXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5f:9b:be:4c:6f:62:af:96:8e:90:d4:c2:bf:f2:2e:18:2d:
1a:f1:36:78:5d:1f:10:99:52:1e:c9:ef:cf:d3:d1:d9:4e:fd:
2a:74:3b:1c:ae:8d:5f:0c:0e:9f:ac:dd:4b:de:77:51:a6:ec:
a4:09:c0:15:82:cc:0c:74:cf:8e:30:77:95:b8:a5:a3:2f:f5:
00:6e:5c:25:28:e7:db:0d:81:ac:17:05:d7:42:69:10:59:b7:
0b:6f:4a:2c:7e:89:d8:43:59:e5:d3:a7:78:e6:ed:e4:de:53:
94:a4:66:3f:05:d2:99:64:de:92:26:2c:f8:62:13:37:69:e2:
96:2b:f8:fb:1d:10:ed:6d:9d:5d:2c:76:35:b5:b9:2e:05:04:
9a:15:44:19:08:fe:4e:c9:f0:37:a0:73:ed:8f:a6:ef:f9:26:
af:1b:11:06:d8:dd:55:c7:ed:f2:e8:5f:4c:5c:e7:61:e9:8d:
47:3a:36:8c:30:11:a9:fb:b4:5d:f4:f6:16:70:93:e9:70:aa:
68:d5:44:e2:53:20:11:25:40:83:d4:1a:e2:53:27:d9:6e:ca:
b4:0b:e4:81:71:5b:ee:ca:ca:a7:16:5d:ad:e5:0d:6c:8a:3d:
f1:a7:3e:78:2a:23:26:21:1f:41:b6:7e:d7:d8:21:48:58:d7:
bd:4e:e9:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYb+6edJ6dySLAZZ3vYFG5z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwMzIwMTIwNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjg3MjgxYmFlMGU2ZGVlZmNhYTEyNWRhNGQ4NzcwN2Q2NjkyMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiIuAxit+mGp1oLrUdQF7WOdT5tg
i2SNSxdgpJOFH8epRGMSRfnyn+Aq3mE6Eqd2zi+biI+SMItN8xaMq0UUk9j6fUVX
9sWQgJjVFiAlZTwfDWWPRXCg9/PGuri0lsz3pIHZQULxbHKmHqTIFqXtFROYXOMZ
qKe5F91el61xoc1slst4Ff/SbOaGC7exeARQEHaNGfa2VJimxPn/HAS6YtOCGit9
UhHgP58NUmREkInQj4YllKsdI7OE+4PisIlvkjX+MdNJ5e4odK3fyyzIapTMF+Rt
kfDq4yLpHWLJo0rHWQvQfq0k/nIltZ/eBWgOelm1IdzO98C65iB01bXaCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDaHKBuuDm3u/KoSXaTYdwfWaSF6MB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvTm9jb0c2NE9iZTc4cWhKZHBOaDNCOVpwSVhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjNMA0G
CSqGSIb3DQEBCwUAA4IBAQBgX5u+TG9ir5aOkNTCv/IuGC0a8TZ4XR8QmVIeye/P
09HZTv0qdDscro1fDA6frN1L3ndRpuykCcAVgswMdM+OMHeVuKWjL/UAblwlKOfb
DYGsFwXXQmkQWbcLb0osfonYQ1nl06d45u3k3lOUpGY/BdKZZN6SJiz4YhM3aeKW
K/j7HRDtbZ1dLHY1tbkuBQSaFUQZCP5OyfA3oHPtj6bv+SavGxEG2N1Vx+3y6F9M
XOdh6Y1HOjaMMBGp+7Rd9PYWcJPpcKpo1UTiUyARJUCD1BriUyfZbsq0C+SBcVvu
ysqnFl2t5Q1sij3xpz54KiMmIR9Btn7X2CFIWNe9TulY
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org