Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/NxWTE2LWPROe_o-cSwKP6GUL3bw.roa
File: NxWTE2LWPROe_o-cSwKP6GUL3bw.roa (raw, json)
Hash identifier: CZzDe1AUE+YsfnV7D7wyJayT1UBU3+2XG+t+fSsyt2c=
Subject key identifier: 37:15:93:13:62:D6:3D:13:9E:FE:8F:9C:4B:02:8F:E8:65:0B:DD:BC
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 018A98316C26FFB975740836ED7F351AACE6
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/NxWTE2LWPROe_o-cSwKP6GUL3bw.roa
Signing time: Fri 15 Sep 2023 09:34:50 +0000
ROA not before: Fri 15 Sep 2023 09:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35182
IP address blocks: 80.233.245.0/24 maxlen: 24
80.233.250.0/24 maxlen: 24
62.63.176.0/21 maxlen: 21
62.63.184.0/22 maxlen: 22
62.63.188.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:31:6c:26:ff:b9:75:74:08:36:ed:7f:35:1a:ac:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Sep 15 09:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3715931362d63d139efe8f9c4b028fe8650bddbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:af:74:38:60:fd:b3:1e:a2:d2:36:bf:58:
89:f7:8f:a1:65:d4:c9:05:e1:8a:b2:e2:98:40:3d:
7a:f9:9d:72:fc:bf:1c:ea:f8:f9:5c:ed:83:4e:af:
e6:43:57:de:e5:f0:71:1f:d0:ac:82:d0:45:8f:aa:
54:41:2f:57:d5:19:61:4a:93:14:25:63:81:bd:31:
ac:99:47:4c:2c:04:63:46:ec:54:8c:55:82:08:15:
0b:a6:91:55:b1:d2:a0:99:74:4f:95:4b:32:86:91:
6a:9c:18:07:f0:66:d1:a0:88:9e:05:bd:cb:47:6f:
36:62:25:69:c2:5b:30:49:ed:d4:8d:01:e2:cc:f5:
7f:da:bc:eb:77:95:26:76:4b:74:7c:f9:94:bf:6f:
1a:79:0f:2e:8d:a1:13:8b:86:e2:4e:b9:c6:96:4a:
0e:b6:7e:99:93:33:09:b0:f4:f3:56:a3:7e:81:8f:
b3:98:5f:e4:84:66:54:90:e5:5c:87:bf:14:7f:bc:
82:ed:22:3d:29:54:d4:0f:8e:5b:e0:47:77:bd:85:
f4:3b:cc:22:83:b2:96:dc:ad:6f:78:11:74:bb:30:
41:88:62:1d:20:41:c6:8e:92:8a:26:1c:9f:f4:3c:
c3:d8:58:ba:8d:09:95:80:2a:3b:68:4c:9b:05:24:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:15:93:13:62:D6:3D:13:9E:FE:8F:9C:4B:02:8F:E8:65:0B:DD:BC
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/NxWTE2LWPROe_o-cSwKP6GUL3bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.63.176.0-62.63.189.255
80.233.245.0/24
80.233.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:0c:f6:c8:d4:83:9f:b7:06:06:4b:c9:ef:f6:3a:02:15:c3:
c4:b1:e1:3d:53:86:76:99:54:c5:56:5c:3f:bd:2d:c1:1f:66:
6d:d8:85:38:78:a4:38:8d:c7:2c:55:5a:f3:08:8f:4b:c9:bb:
cb:4f:5e:19:5e:25:6e:ce:f1:94:e2:8e:de:ab:5a:9d:a5:27:
7f:ba:a3:c9:b2:ac:56:86:cd:85:0d:e1:ca:c2:b1:00:13:af:
e0:5d:35:a9:95:fa:0d:8f:35:3c:5a:da:8b:c5:8d:7c:95:2e:
ce:f0:52:fb:81:5f:66:88:17:aa:96:b0:13:ee:d5:cf:2f:2f:
4a:89:07:35:e5:d1:f8:eb:6a:54:1a:78:fc:5b:ff:9f:aa:67:
11:45:0c:1c:17:99:5c:02:01:2a:10:a4:4a:12:fe:e4:28:3b:
2f:7a:7f:29:2b:ac:fc:aa:3e:50:a7:20:72:a3:e0:b8:d2:fc:
18:6a:02:a9:83:50:32:fe:c0:df:14:1d:29:ea:77:69:82:7a:
ac:22:d2:5f:96:63:8b:a6:cc:1e:08:58:83:db:c5:bb:df:e8:
5e:4a:a4:61:d0:0d:93:a4:8f:9f:45:78:eb:22:29:73:e0:96:
a0:c6:54:a0:c4:a6:56:64:5a:61:2e:e1:f2:bf:06:b3:89:59:
2d:1c:47:f8
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYqYMWwm/7l1dAg27X81GqzmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl
NjE0OTEwHhcNMjMwOTE1MDkzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzE1OTMxMzYyZDYzZDEzOWVmZThmOWM0YjAyOGZlODY1MGJkZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtuvdDhg/bMeotI2v1iJ94+hZdTJ
BeGKsuKYQD16+Z1y/L8c6vj5XO2DTq/mQ1fe5fBxH9CsgtBFj6pUQS9X1RlhSpMU
JWOBvTGsmUdMLARjRuxUjFWCCBULppFVsdKgmXRPlUsyhpFqnBgH8GbRoIieBb3L
R282YiVpwlswSe3UjQHizPV/2rzrd5Umdkt0fPmUv28aeQ8ujaETi4biTrnGlkoO
tn6ZkzMJsPTzVqN+gY+zmF/khGZUkOVch78Uf7yC7SI9KVTUD45b4Ed3vYX0O8wi
g7KW3K1veBF0uzBBiGIdIEHGjpKKJhyf9DzD2Fi6jQmVgCo7aEybBSSGkQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFDcVkxNi1j0Tnv6PnEsCj+hlC928MB8GA1UdIwQY
MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt
ZDRlZTFkMzg5ZTBkLzEvTnhXVEUyTFdQUk9lX28tY1N3S1A2R1VMM2J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk
LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAQ+P7AD
BAE+P7wDBABQ6fUDBABQ6fowDQYJKoZIhvcNAQELBQADggEBAJ4M9sjUg5+3BgZL
ye/2OgIVw8Sx4T1ThnaZVMVWXD+9LcEfZm3YhTh4pDiNxyxVWvMIj0vJu8tPXhle
JW7O8ZTijt6rWp2lJ3+6o8myrFaGzYUN4crCsQATr+BdNamV+g2PNTxa2ovFjXyV
Ls7wUvuBX2aIF6qWsBPu1c8vL0qJBzXl0fjralQaePxb/5+qZxFFDBwXmVwCASoQ
pEoS/uQoOy96fykrrPyqPlCnIHKj4LjS/BhqAqmDUDL+wN8UHSnqd2mCeqwi0l+W
Y4umzB4IWIPbxbvf6F5KpGHQDZOkj59FeOsiKXPglqDGVKDEplZkWmEu4fK/BrOJ
WS0cR/g=
-----END CERTIFICATE-----
Generated at Thu Dec 28 17:19:24 2023 by rpki-client on console-ams.rpki-client.org