Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/NCweJmgBSiZvJh7l4ZX-UC6B3TY.roa
File: NCweJmgBSiZvJh7l4ZX-UC6B3TY.roa (raw, json)
Hash identifier: Wk+GiQIwOlIQbIxqYNX1nuu46y/nTnEKSbNWBOKB+7o=
Subject key identifier: 34:2C:1E:26:68:01:4A:26:6F:26:1E:E5:E1:95:FE:50:2E:81:DD:36
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01856C781112A34F3EDD825325F1C16A264C
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/NCweJmgBSiZvJh7l4ZX-UC6B3TY.roa
Signing time: Sun 01 Jan 2023 08:34:46 +0000
ROA not before: Sun 01 Jan 2023 08:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206766
IP address blocks: 92.63.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:11:12:a3:4f:3e:dd:82:53:25:f1:c1:6a:26:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 1 08:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=342c1e2668014a266f261ee5e195fe502e81dd36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f5:4b:ff:12:a1:3d:c7:1e:69:2a:7a:7c:f8:
63:3e:6c:c7:11:dd:69:1b:f6:f2:dc:eb:eb:b2:ad:
65:0f:7a:c5:1a:c0:80:78:8b:8a:86:08:25:f6:57:
02:4d:7b:e5:3d:4d:10:b4:2d:b1:df:4f:d6:44:ab:
21:b8:97:f0:de:45:38:08:74:fd:e6:af:5f:3b:92:
02:3a:23:74:cf:bc:d9:ab:2c:8a:31:d8:7c:e3:2b:
bc:50:88:b3:29:20:6c:c9:1c:a2:4d:d3:01:15:b9:
a7:74:7b:69:98:c3:fc:82:80:21:69:d4:dc:f3:59:
23:b4:2c:14:96:bd:f3:b7:23:c3:27:b1:16:ed:4b:
fc:bc:5c:a7:d4:b4:20:32:61:9a:46:01:17:48:1b:
c2:a3:f8:e4:0a:5a:15:20:e0:ad:a1:08:ab:7b:8f:
98:0a:c7:c4:36:bc:f5:ab:bd:bd:91:13:37:9d:55:
4d:c5:b5:b5:64:99:fd:c2:ff:f8:83:7a:43:11:0c:
5e:11:42:88:b1:e0:2d:63:11:47:b0:76:4e:ad:64:
a9:02:74:fa:92:52:da:d4:40:b7:cc:2c:df:4a:8d:
40:81:a6:95:18:f4:1e:a3:fc:54:d7:db:62:35:36:
07:74:5e:70:dc:9b:67:09:bc:a9:55:18:38:6a:c2:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2C:1E:26:68:01:4A:26:6F:26:1E:E5:E1:95:FE:50:2E:81:DD:36
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/NCweJmgBSiZvJh7l4ZX-UC6B3TY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.198.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bf:ea:52:32:dd:43:04:3b:2d:14:6a:c3:40:73:17:0f:e9:
a0:58:9c:59:c7:72:b2:ea:cf:47:c6:88:4c:8a:59:38:e8:42:
5f:76:b2:f9:f6:69:75:cb:5c:1c:ac:1a:0a:db:f7:aa:9b:09:
47:db:76:94:52:e5:03:12:f9:8d:74:6c:0e:51:d2:09:bc:41:
5b:f6:ab:dd:18:33:54:65:6d:53:46:13:e0:a3:c0:82:b9:48:
1d:38:45:06:68:98:a2:6b:20:d2:4f:ff:15:51:b8:4f:22:2c:
77:a0:30:fb:18:9e:fb:c8:b3:73:e4:2c:a4:b1:2a:55:f5:b5:
29:87:65:43:e0:f5:7c:01:35:44:b5:1c:95:1b:4f:d8:f2:5e:
7e:92:7f:b4:f4:93:5f:1c:f1:b7:78:3b:8a:26:c9:bc:e3:23:
a3:58:fd:1e:f3:0b:7e:bc:7c:af:be:c1:32:e0:88:68:00:75:
e2:67:ed:f6:1d:0d:be:ef:42:44:aa:1c:24:0f:61:52:f3:e7:
24:3b:82:98:4e:ec:f5:82:f1:2f:81:8f:48:0f:16:04:eb:00:
0c:53:20:f7:13:9f:82:7e:36:d9:9e:f6:12:52:4c:1a:79:4a:
91:61:c6:87:9d:18:32:33:93:dc:99:a0:c3:b7:9a:12:ad:96:
a6:6d:d8:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseBESo08+3YJTJfHBaiZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz
N2Y0ZWQwHhcNMjMwMTAxMDgzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDJjMWUyNjY4MDE0YTI2NmYyNjFlZTVlMTk1ZmU1MDJlODFkZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovVL/xKhPcceaSp6fPhjPmzHEd1p
G/by3Ovrsq1lD3rFGsCAeIuKhggl9lcCTXvlPU0QtC2x30/WRKshuJfw3kU4CHT9
5q9fO5ICOiN0z7zZqyyKMdh84yu8UIizKSBsyRyiTdMBFbmndHtpmMP8goAhadTc
81kjtCwUlr3ztyPDJ7EW7Uv8vFyn1LQgMmGaRgEXSBvCo/jkCloVIOCtoQire4+Y
CsfENrz1q729kRM3nVVNxbW1ZJn9wv/4g3pDEQxeEUKIseAtYxFHsHZOrWSpAnT6
klLa1EC3zCzfSo1AgaaVGPQeo/xU19tiNTYHdF5w3JtnCbypVRg4asIsYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDQsHiZoAUombyYe5eGV/lAugd02MB8GA1UdIwQY
MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt
NTc2MGVmYmNjNjU0LzEvTkN3ZUptZ0JTaVp2Smg3bDRaWC1VQzZCM1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0
LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD/GMA0G
CSqGSIb3DQEBCwUAA4IBAQBmv+pSMt1DBDstFGrDQHMXD+mgWJxZx3Ky6s9HxohM
ilk46EJfdrL59ml1y1wcrBoK2/eqmwlH23aUUuUDEvmNdGwOUdIJvEFb9qvdGDNU
ZW1TRhPgo8CCuUgdOEUGaJiiayDST/8VUbhPIix3oDD7GJ77yLNz5CyksSpV9bUp
h2VD4PV8ATVEtRyVG0/Y8l5+kn+09JNfHPG3eDuKJsm84yOjWP0e8wt+vHyvvsEy
4IhoAHXiZ+32HQ2+70JEqhwkD2FS8+ckO4KYTuz1gvEvgY9IDxYE6wAMUyD3E5+C
fjbZnvYSUkwaeUqRYcaHnRgyM5PcmaDDt5oSrZambdgi
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:43 2024 by rpki-client on console-ams.rpki-client.org