Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/NCPPwab-m4Y6XuevALEb2dG-KYg.roa
File: NCPPwab-m4Y6XuevALEb2dG-KYg.roa (raw, json)
Hash identifier: FoQFtrwzmFVeKCxvN3cFSUOqcoqMoclpj/lWrYV7+5E=
Subject key identifier: 34:23:CF:C1:A6:FE:9B:86:3A:5E:E7:AF:00:B1:1B:D9:D1:BE:29:88
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 01856BEEC0763B598441E0915F302F1F8CC8
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/NCPPwab-m4Y6XuevALEb2dG-KYg.roa
Signing time: Sun 01 Jan 2023 06:04:47 +0000
ROA not before: Sun 01 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206403
IP address blocks: 89.223.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:c0:76:3b:59:84:41:e0:91:5f:30:2f:1f:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 1 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3423cfc1a6fe9b863a5ee7af00b11bd9d1be2988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:13:66:99:b6:b5:e4:e2:30:b9:20:ff:01:4c:
32:be:fa:08:6b:24:0d:a2:45:dc:a8:58:b6:65:f5:
24:88:08:59:9f:18:e1:69:64:0d:0f:bf:d9:2e:fd:
5c:33:a1:ad:a6:87:87:5c:07:d3:67:b7:99:e4:2e:
50:b2:4e:0a:49:3b:ed:a9:bd:58:5f:aa:3f:e7:0b:
33:8a:98:7b:b3:0b:00:8e:20:76:98:39:d7:7d:e0:
8f:61:18:70:45:fe:87:10:fa:fe:b8:17:a9:9f:cd:
a0:4e:7e:88:3a:66:f0:c0:42:0c:fe:dd:9d:68:47:
93:c8:c4:d6:43:92:37:ad:4d:68:30:97:01:77:83:
73:84:58:dc:49:c1:b1:76:1c:3c:e0:a1:e2:c7:26:
6a:a6:62:51:1d:6f:19:3f:41:8c:c0:a1:11:61:c2:
60:2e:22:9a:49:d7:ba:77:27:b7:9c:93:88:98:46:
c6:c7:0a:bd:f7:9c:bf:ff:94:86:79:0d:13:cc:39:
30:b8:01:80:bd:30:82:8e:b2:2e:eb:12:ef:5c:fe:
d0:24:fa:23:dd:7b:6c:b6:10:be:69:e9:d8:bd:9c:
31:d0:46:a0:43:ac:b8:da:07:3f:ce:0c:8e:d1:a6:
3d:ea:af:75:6b:80:f7:0c:5b:3a:c4:01:14:70:6a:
0d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:23:CF:C1:A6:FE:9B:86:3A:5E:E7:AF:00:B1:1B:D9:D1:BE:29:88
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/NCPPwab-m4Y6XuevALEb2dG-KYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.223.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:e6:07:8c:1b:3c:7e:61:7b:48:2d:48:71:d3:05:dc:f2:b0:
9f:0b:2a:20:da:6c:5e:5b:d0:32:08:4e:21:61:a2:8d:14:6b:
db:19:8f:34:29:2f:10:e1:2c:8c:a9:64:08:89:f2:bf:08:cf:
57:8a:0d:ea:9f:3e:af:de:2a:2e:4b:08:a4:73:80:11:95:a3:
11:5a:41:e0:cc:a1:c2:9c:c5:58:0f:b4:e8:29:67:78:2d:88:
95:68:7c:41:63:80:a9:da:e2:b4:2e:2b:42:90:fe:db:b6:fb:
93:36:ce:05:ce:35:e2:06:5c:45:cc:df:2a:49:ac:4c:0c:ce:
8f:3a:ba:c2:ea:a6:91:04:f5:02:0a:32:71:24:84:12:50:59:
5c:f2:d9:a2:f5:84:b5:c3:81:38:91:af:0f:c5:6a:af:57:eb:
db:2e:04:ef:49:3b:8b:65:6a:da:7e:46:71:22:ce:7a:16:bf:
cd:81:90:27:bd:63:50:b0:81:fc:ab:3b:78:90:6d:2b:c2:e7:
df:b5:1f:2c:ee:2e:34:0b:da:e9:15:8c:f3:49:5f:5e:9e:6c:
ca:23:71:f1:bb:9d:c2:89:af:57:a2:36:c8:9f:4d:be:37:1d:
29:df:08:83:df:e7:05:b3:c2:c2:66:0a:b1:79:02:19:5a:ab:
7f:e2:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:02 2024 by rpki-client on console-fra.rpki-client.org