Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/w0I12E-Sj2UIv0NVGIFqJxwWiC0.roa
File: w0I12E-Sj2UIv0NVGIFqJxwWiC0.roa (raw, json)
Hash identifier: LsyOpWMHqn/G8H0E/gO51nS1UTE41bjslZ3rNsL9DZI=
Subject key identifier: C3:42:35:D8:4F:92:8F:65:08:BF:43:55:18:81:6A:27:1C:16:88:2D
Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Certificate serial: 01856CB8169E5FD8AC1A7A38B84DAA88990D
Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/w0I12E-Sj2UIv0NVGIFqJxwWiC0.roa
Signing time: Sun 01 Jan 2023 09:44:41 +0000
ROA not before: Sun 01 Jan 2023 09:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2852
IP address blocks: 158.194.0.0/16 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:16:9e:5f:d8:ac:1a:7a:38:b8:4d:aa:88:99:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7
Validity
Not Before: Jan 1 09:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c34235d84f928f6508bf435518816a271c16882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:0a:ed:c9:fe:b4:e5:3a:ab:1b:99:36:6d:
c5:d2:11:d9:a2:95:2d:20:fc:bf:16:e5:75:56:c4:
fb:2c:33:75:51:71:e3:e9:90:52:ff:63:b1:b2:f9:
e1:18:09:87:a3:88:55:ea:a1:27:da:70:0a:92:2f:
5d:6d:ba:07:29:7d:38:11:b3:13:ee:cf:07:b3:83:
75:86:63:72:22:bd:57:81:1e:97:e0:dd:9c:50:62:
3d:bd:e1:79:5b:2a:e3:0d:48:d5:b0:5e:4b:71:f6:
e9:f0:f0:b2:bd:98:01:5f:80:ce:99:6e:11:07:38:
d9:89:0f:38:8b:25:ab:d9:e2:96:83:cf:44:a0:76:
65:16:dd:0c:bd:c3:ea:36:c3:b8:fb:02:9a:5c:a9:
e8:30:26:c4:55:67:fc:18:db:ac:64:74:7d:5b:50:
27:94:93:9e:a7:b6:20:d7:d4:ac:53:88:5a:cc:2f:
b6:4a:d6:26:d9:40:df:54:87:a8:aa:76:be:4c:c1:
47:d7:7e:96:ad:d8:c2:58:a7:7c:e5:3e:6e:b1:2e:
d0:15:af:91:b1:45:52:64:b2:df:3d:bf:3f:43:f7:
5e:5f:2f:c6:2e:b6:59:5e:4f:54:7a:69:ca:bd:a5:
f1:56:ea:03:80:d3:74:6d:ab:50:73:de:52:85:61:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:42:35:D8:4F:92:8F:65:08:BF:43:55:18:81:6A:27:1C:16:88:2D
X509v3 Authority Key Identifier:
keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/w0I12E-Sj2UIv0NVGIFqJxwWiC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.194.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5c:6b:91:d1:8b:d1:6b:12:21:63:74:28:bd:0c:76:6d:8c:ee:
ed:c0:ae:c7:4e:d3:b2:8e:ab:89:8a:b7:58:5c:ee:74:92:ce:
0a:92:6a:4a:aa:a6:e5:3d:d0:05:f6:ee:a0:19:40:28:0b:58:
5c:21:f1:67:c9:ed:6f:b9:2a:be:75:7f:58:d9:e9:39:ad:f3:
1e:9f:a0:d2:0e:3f:f6:2e:bc:0a:92:76:5e:f4:04:77:28:88:
51:70:10:6c:55:06:1f:d3:9d:a5:75:73:7a:7b:8f:cc:77:c1:
bb:6b:96:72:eb:ea:c4:dd:e8:44:5e:06:c5:bb:61:49:35:9e:
89:3e:21:7d:f4:b1:6f:7c:4a:53:2c:ea:29:5e:c5:5b:21:f4:
eb:83:c0:13:96:5b:27:45:f1:a2:b3:1a:97:22:90:68:22:af:
02:34:ca:8f:84:2e:e6:be:84:44:75:42:d2:4b:bd:6c:26:14:
1a:c4:a2:55:df:c5:99:13:13:e7:2b:69:5a:66:bd:34:dd:23:
9b:9c:1b:07:fc:f1:43:7a:c5:1a:20:0d:e6:27:2a:76:64:dd:
4c:4b:31:b0:68:41:58:58:2a:31:81:9f:36:86:06:92:db:d9:
12:91:33:3d:bf:84:53:f7:53:6c:e4:69:95:28:05:d0:a3:4c:
81:b1:25:a3
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVsuBaeX9isGno4uE2qiJkNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll
NTljYzcwHhcNMjMwMTAxMDk0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzQyMzVkODRmOTI4ZjY1MDhiZjQzNTUxODgxNmEyNzFjMTY4ODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsoK7cn+tOU6qxuZNm3F0hHZopUt
IPy/FuV1VsT7LDN1UXHj6ZBS/2OxsvnhGAmHo4hV6qEn2nAKki9dbboHKX04EbMT
7s8Hs4N1hmNyIr1XgR6X4N2cUGI9veF5WyrjDUjVsF5Lcfbp8PCyvZgBX4DOmW4R
BzjZiQ84iyWr2eKWg89EoHZlFt0MvcPqNsO4+wKaXKnoMCbEVWf8GNusZHR9W1An
lJOep7Yg19SsU4hazC+2StYm2UDfVIeoqna+TMFH136WrdjCWKd85T5usS7QFa+R
sUVSZLLfPb8/Q/deXy/GLrZZXk9UemnKvaXxVuoDgNN0batQc95ShWET6wIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFMNCNdhPko9lCL9DVRiBaiccFogtMB8GA1UdIwQY
MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt
NzQ3ZTc1ZTU1NDYxLzEvdzBJMTJFLVNqMlVJdjBOVkdJRnFKeHdXaUMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx
LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAnsIwDQYJ
KoZIhvcNAQELBQADggEBAFxrkdGL0WsSIWN0KL0Mdm2M7u3ArsdO07KOq4mKt1hc
7nSSzgqSakqqpuU90AX27qAZQCgLWFwh8WfJ7W+5Kr51f1jZ6Tmt8x6foNIOP/Yu
vAqSdl70BHcoiFFwEGxVBh/TnaV1c3p7j8x3wbtrlnLr6sTd6EReBsW7YUk1nok+
IX30sW98SlMs6ilexVsh9OuDwBOWWydF8aKzGpcikGgirwI0yo+ELua+hER1QtJL
vWwmFBrEolXfxZkTE+craVpmvTTdI5ucGwf88UN6xRogDeYnKnZk3UxLMbBoQVhY
KjGBnzaGBpLb2RKRMz2/hFP3U2zkaZUoBdCjTIGxJaM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:18 2024 by rpki-client on console-ams.rpki-client.org