Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/npliwAa2a2yhW8AOH1KksVmnL4g.roa
File: npliwAa2a2yhW8AOH1KksVmnL4g.roa (raw, json)
Hash identifier: huGQT+WRiQ8zSCN1ALt68zzpGH1TZRR4S4sHHDTPpf4=
Subject key identifier: 9E:99:62:C0:06:B6:6B:6C:A1:5B:C0:0E:1F:52:A4:B1:59:A7:2F:88
Certificate issuer: /CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Certificate serial: 0193F4E715C834B7BBEA9D187ECCCCBEEDE7
Authority key identifier: DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/npliwAa2a2yhW8AOH1KksVmnL4g.roa
Signing time: Mon 23 Dec 2024 19:03:25 +0000
ROA not before: Mon 23 Dec 2024 19:03:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48955
IP address blocks: 2.59.12.0/24 maxlen: 24
2.59.15.0/24 maxlen: 24
91.196.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:e7:15:c8:34:b7:bb:ea:9d:18:7e:cc:cc:be:ed:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc7821e1bcbf6e074ea4814aaa5c63e3ba813c5f
Validity
Not Before: Dec 23 19:03:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e9962c006b66b6ca15bc00e1f52a4b159a72f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f2:bf:4e:d8:9c:79:55:e1:f5:0f:0c:ae:be:
53:60:07:db:6b:2e:d4:d2:81:01:48:02:da:90:e3:
10:cb:5c:5c:ea:dd:cb:e1:28:19:86:c4:44:e3:29:
df:e6:de:6e:ee:0a:86:62:35:c7:98:ec:66:a8:9e:
2a:e0:75:31:5b:eb:88:be:fa:ff:9b:c5:d7:86:4b:
a7:26:25:4f:5f:b2:c0:cd:9d:a6:07:d9:c6:b7:11:
e8:23:67:3c:0a:38:81:27:21:72:1f:62:14:cd:6a:
7a:d4:42:10:52:23:85:fa:56:52:a5:bf:86:90:49:
de:ec:60:98:63:ae:d6:6f:9c:e2:2b:13:69:ad:a1:
66:e5:61:2f:8c:9d:78:f1:c9:5d:27:fb:e9:e0:d6:
52:e6:91:78:2e:e2:70:18:4d:1f:e5:9e:19:f7:df:
04:5f:06:ba:25:db:05:07:5b:f1:f1:b8:33:32:9c:
06:2b:ab:27:88:c1:1a:47:1b:ff:f6:6d:e6:86:e8:
1e:6f:81:28:bc:1a:b5:0b:b7:8c:0b:53:2b:cd:c3:
87:61:60:64:b7:65:a4:52:52:d4:db:2c:06:a2:16:
d9:b2:b3:a0:8a:60:d6:14:7b:33:ec:1f:32:71:ef:
db:81:f3:ab:c3:3a:b4:28:8f:2b:ca:3c:5b:1c:2e:
8c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:99:62:C0:06:B6:6B:6C:A1:5B:C0:0E:1F:52:A4:B1:59:A7:2F:88
X509v3 Authority Key Identifier:
keyid:DC:78:21:E1:BC:BF:6E:07:4E:A4:81:4A:AA:5C:63:E3:BA:81:3C:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Hgh4by_bgdOpIFKqlxj47qBPF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/npliwAa2a2yhW8AOH1KksVmnL4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/9daff4-f158-480f-b41f-d48b42ef159b/1/3Hgh4by_bgdOpIFKqlxj47qBPF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.12.0/24
2.59.15.0/24
91.196.154.0/24
Signature Algorithm: sha256WithRSAEncryption
74:7b:9c:30:0b:2e:83:f5:ed:62:45:93:5b:50:ec:bc:3f:4d:
ab:3a:b5:df:00:f2:74:0c:7f:99:b6:ae:96:c0:19:d1:87:72:
cf:a6:94:81:2c:db:df:85:47:55:9d:f2:20:ba:c0:45:45:49:
99:22:e6:86:3c:d8:96:94:f5:04:f4:c1:ae:1a:44:98:81:d5:
c4:cd:a3:fc:7a:00:b7:f7:a8:e6:9a:f2:ab:10:21:a5:ec:24:
77:20:33:83:82:88:c1:05:7b:e2:d7:c8:65:6b:cd:c2:d3:f0:
de:79:d6:9d:ad:56:0e:e9:13:4b:25:af:73:ae:03:9f:06:f3:
a0:26:34:7c:09:77:6a:fd:cc:45:ee:24:07:b2:80:69:c6:90:
7f:c9:ed:dc:c5:96:6c:93:8c:a1:bf:a9:c8:3b:a5:1e:b9:68:
bd:ed:79:35:52:0d:c9:ef:00:c6:ac:bf:d7:a0:b3:73:63:29:
bd:10:d2:ef:d3:ad:38:f7:23:96:ac:fd:3b:8e:f2:cf:20:49:
58:b7:3e:71:ce:cd:bc:e5:07:c8:6b:c0:44:41:b5:63:14:29:
7f:74:18:1b:cf:58:8e:98:0f:4b:0c:ff:b9:7f:0d:61:8e:5c:
f1:81:ba:5b:85:2d:03:83:b2:e1:4b:f8:bc:65:9b:6a:27:23:
74:0d:68:76
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZP05xXINLe76p0YfszMvu3nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjNzgyMWUxYmNiZjZlMDc0ZWE0ODE0YWFhNWM2M2UzYmE4
MTNjNWYwHhcNMjQxMjIzMTkwMzI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTk5NjJjMDA2YjY2YjZjYTE1YmMwMGUxZjUyYTRiMTU5YTcyZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/K/TticeVXh9Q8Mrr5TYAfbay7U
0oEBSALakOMQy1xc6t3L4SgZhsRE4ynf5t5u7gqGYjXHmOxmqJ4q4HUxW+uIvvr/
m8XXhkunJiVPX7LAzZ2mB9nGtxHoI2c8CjiBJyFyH2IUzWp61EIQUiOF+lZSpb+G
kEne7GCYY67Wb5ziKxNpraFm5WEvjJ148cldJ/vp4NZS5pF4LuJwGE0f5Z4Z998E
Xwa6JdsFB1vx8bgzMpwGK6sniMEaRxv/9m3mhugeb4EovBq1C7eMC1MrzcOHYWBk
t2WkUlLU2ywGohbZsrOgimDWFHsz7B8yce/bgfOrwzq0KI8ryjxbHC6MKwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ6ZYsAGtmtsoVvADh9SpLFZpy+IMB8GA1UdIwQY
MBaAFNx4IeG8v24HTqSBSqpcY+O6gTxfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYt
ZDQ4YjQyZWYxNTliLzEvbnBsaXdBYTJhMnloVzhBT0gxS2tzVm1uTDRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC85ZGFmZjQtZjE1OC00ODBmLWI0MWYtZDQ4YjQyZWYxNTli
LzEvM0hnaDRieV9iZ2RPcElGS3FseGo0N3FCUEY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjsMAwQA
AjsPAwQAW8SaMA0GCSqGSIb3DQEBCwUAA4IBAQB0e5wwCy6D9e1iRZNbUOy8P02r
OrXfAPJ0DH+Ztq6WwBnRh3LPppSBLNvfhUdVnfIgusBFRUmZIuaGPNiWlPUE9MGu
GkSYgdXEzaP8egC396jmmvKrECGl7CR3IDODgojBBXvi18hla83C0/DeedadrVYO
6RNLJa9zrgOfBvOgJjR8CXdq/cxF7iQHsoBpxpB/ye3cxZZsk4yhv6nIO6UeuWi9
7Xk1Ug3J7wDGrL/XoLNzYym9ENLv06049yOWrP07jvLPIElYtz5xzs285QfIa8BE
QbVjFCl/dBgbz1iOmA9LDP+5fw1hjlzxgbpbhS0Dg7LhS/i8ZZtqJyN0DWh2
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:41 2025 by rpki-client