Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NU0dLsnR9uibVKo90wJqPHAfepE.roa
File: NU0dLsnR9uibVKo90wJqPHAfepE.roa (raw, json)
Hash identifier: 1OL0xad03ylMmcjpa5PZbTPrvMDi+lWwjp4KVMimDKs=
Subject key identifier: 35:4D:1D:2E:C9:D1:F6:E8:9B:54:AA:3D:D3:02:6A:3C:70:1F:7A:91
Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Certificate serial: 0190DA99ECF60FDB8075AEF39D04AFD1CCFE
Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NU0dLsnR9uibVKo90wJqPHAfepE.roa
Signing time: Mon 22 Jul 2024 13:20:39 +0000
ROA not before: Mon 22 Jul 2024 13:20:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.113.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 09 Aug 2024 05:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:da:99:ec:f6:0f:db:80:75:ae:f3:9d:04:af:d1:cc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Validity
Not Before: Jul 22 13:20:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=354d1d2ec9d1f6e89b54aa3dd3026a3c701f7a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4f:ad:91:cb:21:c0:7d:2d:58:fa:c4:08:c1:
e9:04:6a:34:f6:d5:1c:11:29:3b:c0:b5:f3:42:db:
9f:bd:c0:40:fd:5d:d1:19:f7:6e:4d:c9:d0:7d:89:
16:a7:66:f8:76:3c:b7:d7:c6:c0:2b:b8:04:05:a4:
9f:3b:73:74:e3:48:a4:e6:a9:b8:fa:b4:58:95:e9:
76:9e:54:3c:18:d2:73:d5:99:60:50:93:9f:f2:6f:
4a:32:9e:d6:72:0c:a7:2a:70:24:3b:f4:04:d6:e1:
64:e6:57:9d:30:d7:9c:0d:d1:07:32:55:00:45:c5:
0f:15:1a:76:f3:e7:e9:f5:47:3d:b6:44:eb:33:9c:
f8:1b:8a:08:69:6f:98:b4:ab:91:c2:59:00:a8:76:
04:85:38:ac:2e:8e:cb:c5:c4:8a:ba:4c:4f:45:5e:
6f:67:26:74:60:01:b8:08:cb:48:7b:72:8e:d4:80:
83:83:87:82:43:eb:c7:4b:6a:c9:e2:2d:e4:ec:7f:
3b:16:77:d4:86:8b:d4:a0:b0:cf:14:22:74:05:be:
bc:6c:9f:48:a8:f9:45:2e:ff:f6:b9:cd:6b:45:7c:
85:24:5c:dc:81:13:57:da:7a:46:0a:4c:7a:ce:24:
36:55:38:e4:f6:c3:10:72:53:13:f6:6a:ba:94:92:
9d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:1D:2E:C9:D1:F6:E8:9B:54:AA:3D:D3:02:6A:3C:70:1F:7A:91
X509v3 Authority Key Identifier:
keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NU0dLsnR9uibVKo90wJqPHAfepE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.66.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:19:c7:68:b6:88:d1:e7:9c:19:9a:18:20:6e:3b:67:65:36:
d9:e3:8a:c4:0b:22:fa:1c:03:84:e6:ab:54:01:d0:3e:0a:e8:
4b:ef:e3:d9:f4:df:02:c1:56:27:49:56:d3:c2:3e:2f:42:26:
1d:a6:83:a9:30:48:ae:2c:a4:3b:92:db:49:40:c6:b9:51:6f:
81:be:20:37:f1:28:94:f5:ee:2c:65:fa:5d:11:6d:6e:18:6c:
df:05:d9:a6:4e:6b:c6:a5:0f:df:60:c8:a8:61:99:6c:05:4d:
58:1f:c1:d6:02:f3:67:eb:89:23:6d:c1:12:62:7e:32:78:1e:
2a:08:7e:49:b2:9f:be:39:8d:8a:cd:21:fd:b7:4d:d3:b4:5a:
5a:c7:1f:da:63:be:36:b8:28:c5:51:17:db:82:e0:68:c3:36:
01:1d:98:51:0a:6b:00:b7:1c:53:8c:de:6b:22:55:ae:b1:0c:
f7:5f:48:e8:8b:b9:a7:7c:e6:4c:b6:8d:81:ee:2e:14:35:e0:
95:d1:6c:1c:59:a8:91:1f:8a:59:f8:33:ea:5c:22:52:f2:51:
a8:86:ff:4b:0c:ea:6b:c7:2e:2e:4d:01:9c:64:b4:aa:75:0d:
ee:97:ab:01:9f:c8:f6:d0:01:6c:36:05:1b:35:ae:2b:53:d6:
a8:db:5c:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDamez2D9uAda7znQSv0cz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4
NjJlNWYwHhcNMjQwNzIyMTMyMDM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTRkMWQyZWM5ZDFmNmU4OWI1NGFhM2RkMzAyNmEzYzcwMWY3YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE+tkcshwH0tWPrECMHpBGo09tUc
ESk7wLXzQtufvcBA/V3RGfduTcnQfYkWp2b4djy318bAK7gEBaSfO3N040ik5qm4
+rRYlel2nlQ8GNJz1ZlgUJOf8m9KMp7WcgynKnAkO/QE1uFk5ledMNecDdEHMlUA
RcUPFRp28+fp9Uc9tkTrM5z4G4oIaW+YtKuRwlkAqHYEhTisLo7LxcSKukxPRV5v
ZyZ0YAG4CMtIe3KO1ICDg4eCQ+vHS2rJ4i3k7H87FnfUhovUoLDPFCJ0Bb68bJ9I
qPlFLv/2uc1rRXyFJFzcgRNX2npGCkx6ziQ2VTjk9sMQclMT9mq6lJKdTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDVNHS7J0fbom1SqPdMCajxwH3qRMB8GA1UdIwQY
MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt
MGQzZmNlNDI5YmRlLzEvTlUwZExzblI5dWliVktvOTB3SnFQSEFmZXBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl
LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXFCMA0G
CSqGSIb3DQEBCwUAA4IBAQCkGcdotojR55wZmhggbjtnZTbZ44rECyL6HAOE5qtU
AdA+CuhL7+PZ9N8CwVYnSVbTwj4vQiYdpoOpMEiuLKQ7kttJQMa5UW+BviA38SiU
9e4sZfpdEW1uGGzfBdmmTmvGpQ/fYMioYZlsBU1YH8HWAvNn64kjbcESYn4yeB4q
CH5Jsp++OY2KzSH9t03TtFpaxx/aY742uCjFURfbguBowzYBHZhRCmsAtxxTjN5r
IlWusQz3X0joi7mnfOZMto2B7i4UNeCV0WwcWaiRH4pZ+DPqXCJS8lGohv9LDOpr
xy4uTQGcZLSqdQ3ul6sBn8j20AFsNgUbNa4rU9ao21xT
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:26 2025 by rpki-client