Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/NBIfXCEg7p4KPv9-HeiskthT16E.roa
File: NBIfXCEg7p4KPv9-HeiskthT16E.roa (raw, json)
Hash identifier: tsi+GNFfOhhjpHnxdO06ND/ibg4QlYOs3jEqTiB6EjI=
Subject key identifier: 34:12:1F:5C:21:20:EE:9E:0A:3E:FF:7E:1D:E8:AC:92:D8:53:D7:A1
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018A223E90A41B60FCC788F4228FD824F8F2
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/NBIfXCEg7p4KPv9-HeiskthT16E.roa
Signing time: Wed 23 Aug 2023 11:54:00 +0000
ROA not before: Wed 23 Aug 2023 11:54:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.50.0.0/24 maxlen: 24
45.149.61.0/24 maxlen: 24
45.149.62.0/24 maxlen: 24
45.149.62.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 14 Sep 2023 15:37:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:3e:90:a4:1b:60:fc:c7:88:f4:22:8f:d8:24:f8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Aug 23 11:54:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34121f5c2120ee9e0a3eff7e1de8ac92d853d7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:81:ef:29:8f:7f:d4:2f:b6:fa:62:43:a7:e8:
c7:69:fc:7e:5a:d2:74:d9:bb:3a:af:2c:ea:f6:74:
da:22:46:36:33:bc:0a:14:c1:57:9c:93:7d:f6:43:
38:72:73:cf:d6:a6:65:31:63:19:f0:33:7c:70:68:
c7:7d:58:a9:18:83:96:6f:a9:b7:49:6f:2f:3a:aa:
2c:ed:c4:b3:7e:04:11:87:71:9f:1e:23:08:e4:a0:
88:cd:24:47:63:2f:dd:1e:fd:cb:a4:23:64:63:d6:
24:29:26:a9:ac:e9:6a:e4:b2:20:9c:9c:96:cf:9f:
93:09:22:c1:28:ca:55:5f:65:4d:36:0e:fb:91:f6:
b1:71:78:e0:d6:07:e8:15:fe:0d:fe:a4:32:c9:3d:
eb:24:07:5e:9a:92:93:55:31:df:9e:85:89:de:7e:
65:7a:02:7e:f2:e9:34:b7:4b:ec:e0:ea:02:17:51:
1b:cb:dc:5c:6f:e8:d0:10:71:fa:52:e5:e9:15:41:
9b:a2:5e:65:2f:57:49:2b:71:f3:0e:1a:89:ba:b9:
44:55:62:bb:6d:4d:ff:60:c1:1a:4a:9b:5a:d3:03:
fd:c1:f0:77:b9:ff:3d:42:70:72:ff:f7:3e:4b:f7:
28:51:43:85:8b:d3:f2:6c:29:1d:65:61:8e:f7:88:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:12:1F:5C:21:20:EE:9E:0A:3E:FF:7E:1D:E8:AC:92:D8:53:D7:A1
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/NBIfXCEg7p4KPv9-HeiskthT16E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.61.0-45.149.63.255
194.50.0.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ea:01:34:61:47:1a:5e:8f:44:7e:72:ef:e3:61:28:44:66:
7f:24:48:95:07:e2:28:85:cd:d0:0d:73:15:4d:b4:d8:58:6f:
87:75:5c:e7:36:8c:0a:d3:02:43:80:91:4e:51:05:80:6f:fe:
5f:cb:2e:f9:85:ee:17:23:af:5d:ab:5f:1b:aa:7a:49:d2:0f:
bd:37:5f:8c:27:24:77:0a:19:6b:f7:67:bb:aa:37:fd:4d:3a:
c3:94:03:de:3b:9a:57:d5:ce:12:f5:69:af:39:1b:ee:76:a4:
1f:00:f1:dd:fb:d2:d7:c6:57:3f:b7:29:86:eb:84:00:79:33:
d3:e1:79:dd:70:8b:3c:7a:49:c2:c8:f4:3f:68:39:2f:ca:60:
f7:68:07:93:bc:10:db:31:58:51:15:b9:ab:e5:43:aa:11:18:
9c:9f:13:b2:72:b9:eb:79:d4:ff:70:f8:c5:47:09:95:06:65:
f0:22:09:0b:8e:e0:99:c7:21:21:28:4d:23:65:1a:34:1b:91:
4f:8b:26:04:78:f4:c3:0a:d9:97:15:23:50:07:00:76:d5:4b:
9f:79:1d:4a:69:43:f1:50:97:05:64:1b:07:f7:ce:75:a2:5f:
d2:36:ae:49:33:89:5d:b7:be:d1:ce:f2:72:cd:7a:1f:6b:98:
b1:e6:22:92
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYoiPpCkG2D8x4j0Io/YJPjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjMwODIzMTE1NDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDEyMWY1YzIxMjBlZTllMGEzZWZmN2UxZGU4YWM5MmQ4NTNkN2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4HvKY9/1C+2+mJDp+jHafx+WtJ0
2bs6ryzq9nTaIkY2M7wKFMFXnJN99kM4cnPP1qZlMWMZ8DN8cGjHfVipGIOWb6m3
SW8vOqos7cSzfgQRh3GfHiMI5KCIzSRHYy/dHv3LpCNkY9YkKSaprOlq5LIgnJyW
z5+TCSLBKMpVX2VNNg77kfaxcXjg1gfoFf4N/qQyyT3rJAdempKTVTHfnoWJ3n5l
egJ+8uk0t0vs4OoCF1Eby9xcb+jQEHH6UuXpFUGbol5lL1dJK3HzDhqJurlEVWK7
bU3/YMEaSpta0wP9wfB3uf89QnBy//c+S/coUUOFi9PybCkdZWGO94jyMwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFDQSH1whIO6eCj7/fh3orJLYU9ehMB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvTkJJZlhDRWc3cDRLUHY5LUhlaXNrdGhUMTZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw
LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtlT0D
BAYtlQADBADCMgAwDQYJKoZIhvcNAQELBQADggEBAHvqATRhRxpej0R+cu/jYShE
Zn8kSJUH4iiFzdANcxVNtNhYb4d1XOc2jArTAkOAkU5RBYBv/l/LLvmF7hcjr12r
XxuqeknSD703X4wnJHcKGWv3Z7uqN/1NOsOUA947mlfVzhL1aa85G+52pB8A8d37
0tfGVz+3KYbrhAB5M9Phed1wizx6ScLI9D9oOS/KYPdoB5O8ENsxWFEVuavlQ6oR
GJyfE7Jyuet51P9w+MVHCZUGZfAiCQuO4JnHISEoTSNlGjQbkU+LJgR49MMK2ZcV
I1AHAHbVS595HUppQ/FQlwVkGwf3znWiX9I2rkkziV23vtHO8nLNeh9rmLHmIpI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org