Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/nddl_xTzylWIxUz2FZAyP-sVOOs.roa
File: nddl_xTzylWIxUz2FZAyP-sVOOs.roa (raw, json)
Hash identifier: urFnXnXzFoqSovILdbXgttAU9rQs2L4BVZ9zLAmyBBQ=
Subject key identifier: 9D:D7:65:FF:14:F3:CA:55:88:C5:4C:F6:15:90:32:3F:EB:15:38:EB
Certificate issuer: /CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Certificate serial: 01856F4B77FA668D588A9D311B248E6C0B01
Authority key identifier: 08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/nddl_xTzylWIxUz2FZAyP-sVOOs.roa
Signing time: Sun 01 Jan 2023 21:44:54 +0000
ROA not before: Sun 01 Jan 2023 21:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.37.38.0/24 maxlen: 24
185.37.37.0/24 maxlen: 24
185.37.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:77:fa:66:8d:58:8a:9d:31:1b:24:8e:6c:0b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084059a0ca6078a9b75daa66db806ff22c0eaad9
Validity
Not Before: Jan 1 21:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dd765ff14f3ca5588c54cf61590323feb1538eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d0:2b:44:71:a9:02:47:5a:82:81:eb:dc:f1:
75:2f:69:f2:8b:ac:7c:bd:d0:80:9b:6c:c1:32:31:
74:52:ee:6f:f0:64:a5:4e:ae:c8:8f:56:18:48:79:
7d:ba:93:5f:ab:8c:02:84:1f:cc:33:82:e6:ae:6b:
fe:c8:27:8c:00:58:58:3f:86:ce:9e:fc:3b:eb:bb:
59:bf:d7:2d:85:71:ff:75:3a:75:41:0c:d1:3a:75:
c0:b1:21:67:b1:97:ef:6a:a5:79:6d:ff:aa:d1:52:
10:e8:aa:77:84:6b:03:32:2d:22:b0:77:15:ec:77:
f9:31:a8:b4:50:c6:b4:c7:2d:6f:96:68:43:d1:f9:
81:a3:45:12:b6:94:58:e2:e0:30:e8:5e:5f:1d:cf:
ad:db:5a:f7:b2:e7:1a:4f:6a:f0:81:30:a9:20:da:
25:04:64:2b:a4:0a:c1:11:dc:c6:34:a2:c2:9a:52:
64:67:4a:a3:f9:b3:96:e4:ff:82:68:f1:98:bd:65:
96:c6:12:b4:7f:fb:ac:39:5c:ed:65:24:96:97:61:
22:00:e6:f4:cd:e3:d9:a3:a8:d2:3f:d3:27:62:85:
bd:4f:2f:b2:69:67:ce:0c:b8:e2:75:43:6c:7c:ce:
f8:4f:43:24:02:a4:91:0b:34:7e:2a:ce:16:07:e7:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D7:65:FF:14:F3:CA:55:88:C5:4C:F6:15:90:32:3F:EB:15:38:EB
X509v3 Authority Key Identifier:
keyid:08:40:59:A0:CA:60:78:A9:B7:5D:AA:66:DB:80:6F:F2:2C:0E:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEBZoMpgeKm3Xapm24Bv8iwOqtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/nddl_xTzylWIxUz2FZAyP-sVOOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c4c861-b327-41f2-820c-4c0a1c33fa8a/1/CEBZoMpgeKm3Xapm24Bv8iwOqtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.37.0-185.37.39.255
Signature Algorithm: sha256WithRSAEncryption
86:c0:33:fd:8c:4a:eb:d3:e7:4c:21:a8:a4:67:e0:a9:46:a9:
38:21:d3:cd:14:d8:87:5d:df:ee:d3:b8:f8:7a:e0:7f:41:e1:
1b:30:58:05:43:51:d7:89:7e:75:c6:4b:55:ac:81:94:3f:37:
3d:46:43:26:9c:8e:5b:af:24:f9:c5:2a:78:72:d0:1a:01:db:
34:14:cf:4a:19:e6:dd:4b:bd:64:d0:e3:7c:cf:50:5f:0d:ab:
1c:42:67:ec:f9:11:af:da:c4:69:0b:89:48:31:34:ee:d9:56:
d5:15:09:c3:25:91:4b:e2:f7:d0:61:43:74:f1:19:16:b9:1b:
08:c3:30:ac:a4:58:9e:93:5e:3b:fe:06:fa:2e:81:a2:eb:28:
67:bf:e5:6c:89:a0:c9:0a:36:72:51:90:ce:29:0d:5f:9b:5f:
3a:97:b2:60:fd:b8:c5:23:28:8d:0b:28:3a:5f:d8:30:d1:ad:
68:c4:ce:f8:b1:83:3b:89:4a:5c:10:83:70:ea:15:1f:b4:56:
2c:da:eb:f8:4f:93:07:81:9b:02:f9:5a:8f:f3:68:7b:69:8b:
3a:a1:8f:77:fc:89:6f:11:4e:c1:f8:e2:bb:3f:2e:9d:60:df:
a3:db:17:38:9b:3f:f2:b2:bc:4c:55:b7:4e:b3:c2:e8:9f:9e:
f4:2f:cf:67
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvS3f6Zo1Yip0xGySObAsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDA1OWEwY2E2MDc4YTliNzVkYWE2NmRiODA2ZmYyMmMw
ZWFhZDkwHhcNMjMwMTAxMjE0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGQ3NjVmZjE0ZjNjYTU1ODhjNTRjZjYxNTkwMzIzZmViMTUzOGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9ArRHGpAkdagoHr3PF1L2nyi6x8
vdCAm2zBMjF0Uu5v8GSlTq7Ij1YYSHl9upNfq4wChB/MM4Lmrmv+yCeMAFhYP4bO
nvw767tZv9cthXH/dTp1QQzROnXAsSFnsZfvaqV5bf+q0VIQ6Kp3hGsDMi0isHcV
7Hf5Mai0UMa0xy1vlmhD0fmBo0UStpRY4uAw6F5fHc+t21r3sucaT2rwgTCpINol
BGQrpArBEdzGNKLCmlJkZ0qj+bOW5P+CaPGYvWWWxhK0f/usOVztZSSWl2EiAOb0
zePZo6jSP9MnYoW9Ty+yaWfODLjidUNsfM74T0MkAqSRCzR+Ks4WB+eV0QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJ3XZf8U88pViMVM9hWQMj/rFTjrMB8GA1UdIwQY
MBaAFAhAWaDKYHipt12qZtuAb/IsDqrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VCWm9NcGdlS20zWGFwbTI0QnY4aXdPcXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jNGM4NjEtYjMyNy00MWYyLTgyMGMt
NGMwYTFjMzNmYThhLzEvbmRkbF94VHp5bFdJeFV6MkZaQXlQLXNWT09zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jNGM4NjEtYjMyNy00MWYyLTgyMGMtNGMwYTFjMzNmYThh
LzEvQ0VCWm9NcGdlS20zWGFwbTI0QnY4aXdPcXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5JSUD
BAO5JSAwDQYJKoZIhvcNAQELBQADggEBAIbAM/2MSuvT50whqKRn4KlGqTgh080U
2Idd3+7TuPh64H9B4RswWAVDUdeJfnXGS1WsgZQ/Nz1GQyacjluvJPnFKnhy0BoB
2zQUz0oZ5t1LvWTQ43zPUF8NqxxCZ+z5Ea/axGkLiUgxNO7ZVtUVCcMlkUvi99Bh
Q3TxGRa5GwjDMKykWJ6TXjv+BvougaLrKGe/5WyJoMkKNnJRkM4pDV+bXzqXsmD9
uMUjKI0LKDpf2DDRrWjEzvixgzuJSlwQg3DqFR+0Viza6/hPkweBmwL5Wo/zaHtp
izqhj3f8iW8RTsH44rs/Lp1g36PbFzibP/KyvExVt06zwuifnvQvz2c=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:28 2024 by rpki-client on console-ams.rpki-client.org