Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/NTLF_qJWG3pSpkGjKogRF94cmD4.roa
File: NTLF_qJWG3pSpkGjKogRF94cmD4.roa (raw, json)
Hash identifier: yiIluZMvrb3luwch84NCMFHHQK2uyjp9yPfZdtbIB6s=
Subject key identifier: 35:32:C5:FE:A2:56:1B:7A:52:A6:41:A3:2A:88:11:17:DE:1C:98:3E
Certificate issuer: /CN=d4081eee3b2ee3325b53e7f4d6d89b6401e25221
Certificate serial: 01857230F46DBF8EA754A456189E9420F389
Authority key identifier: D4:08:1E:EE:3B:2E:E3:32:5B:53:E7:F4:D6:D8:9B:64:01:E2:52:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Age7jsu4zJbU-f01tibZAHiUiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/NTLF_qJWG3pSpkGjKogRF94cmD4.roa
Signing time: Mon 02 Jan 2023 11:14:48 +0000
ROA not before: Mon 02 Jan 2023 11:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60064
IP address blocks: 212.46.43.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:f4:6d:bf:8e:a7:54:a4:56:18:9e:94:20:f3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4081eee3b2ee3325b53e7f4d6d89b6401e25221
Validity
Not Before: Jan 2 11:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3532c5fea2561b7a52a641a32a881117de1c983e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:2a:8d:84:7e:e3:a1:d0:6f:7b:f7:fb:d0:
7e:16:78:43:ed:a1:ad:90:07:49:ce:77:d5:9a:7c:
6e:2a:90:41:d4:b0:51:11:8e:4e:52:a5:f2:35:c5:
22:50:94:40:d4:a8:9d:2b:23:45:d5:61:be:4f:f6:
3f:7e:f3:2b:a8:7a:59:77:3b:42:84:06:8f:b9:fc:
0d:0e:f0:20:32:88:88:6e:7d:55:1b:66:73:d2:8f:
fd:d5:1c:ce:26:ab:58:c2:a2:b7:19:9d:a9:f7:83:
b0:99:42:62:c5:ab:91:19:bd:d9:25:5f:47:df:77:
42:14:91:b6:33:f7:fb:4d:9b:62:e9:00:ab:28:ce:
b3:6f:f2:6f:3f:ca:f2:a0:ec:d4:9f:c9:e6:a6:c7:
65:e7:7d:95:36:ed:18:64:4a:89:f7:4e:ca:0a:13:
3e:11:a2:a0:86:b9:4c:40:dd:c3:bc:f6:2c:0d:b8:
8c:98:db:22:98:2a:e6:fb:e4:08:2f:8d:00:85:2f:
79:41:b2:32:52:fe:5d:8e:05:58:0a:fd:e8:6c:69:
6f:12:3a:42:79:cf:14:b7:c2:26:d3:ee:8a:18:fa:
7f:34:35:65:6c:ba:a0:00:54:89:45:3c:5e:82:24:
ec:ac:15:26:83:eb:4e:02:4a:01:02:69:29:f2:2b:
09:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:32:C5:FE:A2:56:1B:7A:52:A6:41:A3:2A:88:11:17:DE:1C:98:3E
X509v3 Authority Key Identifier:
keyid:D4:08:1E:EE:3B:2E:E3:32:5B:53:E7:F4:D6:D8:9B:64:01:E2:52:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Age7jsu4zJbU-f01tibZAHiUiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/NTLF_qJWG3pSpkGjKogRF94cmD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/376653-72d6-4117-87ec-20ef057adae0/1/1Age7jsu4zJbU-f01tibZAHiUiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.43.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6a:ff:03:22:b7:4b:71:9e:cc:80:3a:8d:7a:90:0c:36:66:
00:f9:c4:9b:59:93:d1:25:6b:e3:bc:3f:42:8b:af:ec:90:8e:
57:ad:1a:74:f3:2a:ac:58:5c:b9:57:9e:2e:4b:1b:dd:a0:b9:
e7:87:21:7f:bd:9d:dd:30:d6:44:0c:eb:4d:cf:f8:e8:48:f8:
ee:01:0e:0b:96:b3:aa:5a:29:ba:51:85:9e:c4:31:6d:db:d5:
34:34:c5:e0:68:7f:fe:cd:74:39:6c:66:56:c7:50:de:92:3e:
e2:72:6f:15:d5:ae:35:b4:cb:64:a9:49:34:7f:33:64:93:15:
d2:e6:ba:59:75:02:e9:5a:ac:81:1e:ac:58:86:9e:b5:f0:1a:
df:60:ce:13:d3:da:c0:84:ae:4c:f7:97:58:fb:bd:00:7f:b1:
e7:86:5d:63:f7:d6:23:a8:34:5b:5a:73:25:ca:95:d0:20:e1:
8b:6f:11:80:de:54:0b:63:84:5b:7e:23:3d:ad:91:f1:22:1c:
7b:41:b8:16:35:91:e6:98:ba:62:d5:6f:eb:0a:c8:46:46:33:
96:27:d7:64:44:6b:50:45:eb:27:11:e6:d3:60:f4:1d:ee:f9:
c5:be:b4:25:3c:eb:08:aa:59:4d:b9:05:29:4e:fb:26:3f:bd:
1b:07:88:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyMPRtv46nVKRWGJ6UIPOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDgxZWVlM2IyZWUzMzI1YjUzZTdmNGQ2ZDg5YjY0MDFl
MjUyMjEwHhcNMjMwMTAyMTExNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTMyYzVmZWEyNTYxYjdhNTJhNjQxYTMyYTg4MTExN2RlMWM5ODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNcqjYR+46HQb3v3+9B+FnhD7aGt
kAdJznfVmnxuKpBB1LBREY5OUqXyNcUiUJRA1KidKyNF1WG+T/Y/fvMrqHpZdztC
hAaPufwNDvAgMoiIbn1VG2Zz0o/91RzOJqtYwqK3GZ2p94OwmUJixauRGb3ZJV9H
33dCFJG2M/f7TZti6QCrKM6zb/JvP8ryoOzUn8nmpsdl532VNu0YZEqJ907KChM+
EaKghrlMQN3DvPYsDbiMmNsimCrm++QIL40AhS95QbIyUv5djgVYCv3obGlvEjpC
ec8Ut8Im0+6KGPp/NDVlbLqgAFSJRTxegiTsrBUmg+tOAkoBAmkp8isJbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDUyxf6iVht6UqZBoyqIERfeHJg+MB8GA1UdIwQY
MBaAFNQIHu47LuMyW1Pn9NbYm2QB4lIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFnZTdqc3U0ekpiVS1mMDF0aWJaQUhpVWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zNzY2NTMtNzJkNi00MTE3LTg3ZWMt
MjBlZjA1N2FkYWUwLzEvTlRMRl9xSldHM3BTcGtHaktvZ1JGOTRjbUQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8zNzY2NTMtNzJkNi00MTE3LTg3ZWMtMjBlZjA1N2FkYWUw
LzEvMUFnZTdqc3U0ekpiVS1mMDF0aWJaQUhpVWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4rMA0G
CSqGSIb3DQEBCwUAA4IBAQBFav8DIrdLcZ7MgDqNepAMNmYA+cSbWZPRJWvjvD9C
i6/skI5XrRp08yqsWFy5V54uSxvdoLnnhyF/vZ3dMNZEDOtNz/joSPjuAQ4LlrOq
Wim6UYWexDFt29U0NMXgaH/+zXQ5bGZWx1Dekj7icm8V1a41tMtkqUk0fzNkkxXS
5rpZdQLpWqyBHqxYhp618BrfYM4T09rAhK5M95dY+70Af7Hnhl1j99YjqDRbWnMl
ypXQIOGLbxGA3lQLY4RbfiM9rZHxIhx7QbgWNZHmmLpi1W/rCshGRjOWJ9dkRGtQ
ResnEebTYPQd7vnFvrQlPOsIqllNuQUpTvsmP70bB4ie
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:34 2024 by rpki-client on console-ams.rpki-client.org