Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/NmWzKQPVpJh91BpVtwZ6Rup7Oac.roa
File: NmWzKQPVpJh91BpVtwZ6Rup7Oac.roa (raw, json)
Hash identifier: CDWgNbeTp/Ny4CrHgzCjzLL/T1FxBlnmg8MfeLfJ0qA=
Subject key identifier: 36:65:B3:29:03:D5:A4:98:7D:D4:1A:55:B7:06:7A:46:EA:7B:39:A7
Certificate issuer: /CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Certificate serial: 018BABD448D2425D41855FAE1370BF1C7A48
Authority key identifier: 55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/NmWzKQPVpJh91BpVtwZ6Rup7Oac.roa
Signing time: Tue 07 Nov 2023 22:08:18 +0000
ROA not before: Tue 07 Nov 2023 22:08:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57164
IP address blocks: 151.0.0.0/19 maxlen: 24
151.0.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:d4:48:d2:42:5d:41:85:5f:ae:13:70:bf:1c:7a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556a5fa0dcfb34433f9b860d95e2c442547c5f9c
Validity
Not Before: Nov 7 22:08:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3665b32903d5a4987dd41a55b7067a46ea7b39a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:48:8e:38:e8:2b:d6:09:2e:b2:87:6b:ce:
d6:54:57:ea:66:77:21:c3:6e:44:d8:73:ef:77:9e:
87:fc:78:ca:45:bb:14:54:57:16:aa:1f:ea:ae:7f:
d5:25:7e:a0:cf:f0:f4:f2:e0:4b:fb:4c:b8:f1:be:
83:a4:48:c1:eb:f0:47:e4:35:90:03:2c:d9:2b:68:
b1:40:30:47:33:4d:3d:01:94:5d:89:aa:9e:04:e1:
f7:51:94:fd:57:20:ca:26:4e:ba:25:09:96:c5:a4:
be:9b:48:cf:cf:83:bf:fd:c9:8e:0b:73:e8:2a:bb:
a4:2f:d5:46:a0:50:39:b3:2d:c8:75:2b:2e:ec:e4:
94:ea:a9:53:5f:e2:b1:61:33:40:a8:9d:7e:c3:09:
71:b8:35:c8:2d:e5:45:62:3b:f7:42:17:1d:b2:99:
7e:59:6c:fa:c9:05:00:b7:d7:9a:b6:f4:de:79:3b:
75:8f:23:6e:8f:ea:ca:6e:eb:70:36:06:d5:27:b5:
6e:ab:bb:5f:20:b6:57:5d:b5:e5:c8:d0:f5:28:76:
5c:e3:01:9a:b4:d1:5e:08:8d:79:6a:5e:1b:9a:c4:
7b:e1:f0:01:23:72:06:b7:fb:cf:3a:dc:f7:9b:d6:
75:b3:94:e9:f7:7c:20:5b:dd:e3:f4:75:c7:2d:c3:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:B3:29:03:D5:A4:98:7D:D4:1A:55:B7:06:7A:46:EA:7B:39:A7
X509v3 Authority Key Identifier:
keyid:55:6A:5F:A0:DC:FB:34:43:3F:9B:86:0D:95:E2:C4:42:54:7C:5F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWpfoNz7NEM_m4YNleLEQlR8X5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/NmWzKQPVpJh91BpVtwZ6Rup7Oac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e23d30-76e3-4491-8d75-2fda4c273a48/1/VWpfoNz7NEM_m4YNleLEQlR8X5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.0.0.0-151.0.35.255
Signature Algorithm: sha256WithRSAEncryption
ea:3b:bb:c0:fa:9a:5f:3f:38:cf:9d:53:70:52:4d:46:70:a7:
23:ae:86:92:ce:02:ed:3f:c9:99:ed:ec:19:0c:29:23:56:53:
cc:21:92:b2:ae:d9:3a:a6:6d:20:d2:ad:5b:36:28:80:0e:24:
ce:37:2d:5b:6a:0d:d7:80:68:17:7e:f3:c0:35:38:5d:8d:d3:
04:8f:94:5b:24:07:3b:7c:b4:0d:d0:c1:84:75:53:27:35:16:
13:5e:aa:39:47:6c:d9:b6:4f:c8:ea:ca:fd:ee:eb:93:70:ac:
9e:83:19:a9:36:49:41:d5:67:64:18:73:13:aa:ce:a4:0f:54:
0c:d3:c0:12:8c:40:ff:e7:ed:15:44:54:78:8a:ec:c4:a9:80:
7b:cb:6b:91:d8:d2:09:c5:e9:f4:d4:c7:b4:e2:1b:53:b6:bf:
86:db:35:35:4d:ff:97:a8:9c:02:49:7f:7a:2d:6e:f8:37:3d:
09:e6:b4:c2:36:48:96:1e:4f:b3:a1:22:ea:d7:7e:03:e3:b6:
43:ca:5e:dd:ce:29:fc:ee:c1:15:d6:ee:66:9a:3f:3a:27:95:
38:9f:cf:77:9e:e5:de:7f:f4:f6:70:08:5a:eb:c0:ca:ec:79:
9a:96:c2:86:31:aa:82:48:1f:58:77:ff:7d:8a:46:1e:dd:15:
f9:12:6f:b0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYur1EjSQl1BhV+uE3C/HHpIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NmE1ZmEwZGNmYjM0NDMzZjliODYwZDk1ZTJjNDQyNTQ3
YzVmOWMwHhcNMjMxMTA3MjIwODE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjY1YjMyOTAzZDVhNDk4N2RkNDFhNTViNzA2N2E0NmVhN2IzOWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmpIjjjoK9YJLrKHa87WVFfqZnch
w25E2HPvd56H/HjKRbsUVFcWqh/qrn/VJX6gz/D08uBL+0y48b6DpEjB6/BH5DWQ
AyzZK2ixQDBHM009AZRdiaqeBOH3UZT9VyDKJk66JQmWxaS+m0jPz4O//cmOC3Po
KrukL9VGoFA5sy3IdSsu7OSU6qlTX+KxYTNAqJ1+wwlxuDXILeVFYjv3Qhcdspl+
WWz6yQUAt9eatvTeeTt1jyNuj+rKbutwNgbVJ7Vuq7tfILZXXbXlyND1KHZc4wGa
tNFeCI15al4bmsR74fABI3IGt/vPOtz3m9Z1s5Tp93wgW93j9HXHLcNmPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDZlsykD1aSYfdQaVbcGekbqezmnMB8GA1UdIwQY
MBaAFFVqX6Dc+zRDP5uGDZXixEJUfF+cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVldwZm9OejdORU1fbTRZTmxlTEVRbFI4WDV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lMjNkMzAtNzZlMy00NDkxLThkNzUt
MmZkYTRjMjczYTQ4LzEvTm1XektRUFZwSmg5MUJwVnR3WjZSdXA3T2FjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lMjNkMzAtNzZlMy00NDkxLThkNzUtMmZkYTRjMjczYTQ4
LzEvVldwZm9OejdORU1fbTRZTmxlTEVRbFI4WDV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMMAoDAgCXAwQC
lwAgMA0GCSqGSIb3DQEBCwUAA4IBAQDqO7vA+ppfPzjPnVNwUk1GcKcjroaSzgLt
P8mZ7ewZDCkjVlPMIZKyrtk6pm0g0q1bNiiADiTONy1bag3XgGgXfvPANThdjdME
j5RbJAc7fLQN0MGEdVMnNRYTXqo5R2zZtk/I6sr97uuTcKyegxmpNklB1WdkGHMT
qs6kD1QM08ASjED/5+0VRFR4iuzEqYB7y2uR2NIJxen01Me04htTtr+G2zU1Tf+X
qJwCSX96LW74Nz0J5rTCNkiWHk+zoSLq134D47ZDyl7dzin87sEV1u5mmj86J5U4
n893nuXef/T2cAha68DK7HmalsKGMaqCSB9Yd/99ikYe3RX5Em+w
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:06 2024 by rpki-client on console-fra.rpki-client.org