Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/NXARVC8EAzG3EZB9EAP_79IqHsE.roa
File: NXARVC8EAzG3EZB9EAP_79IqHsE.roa (raw, json)
Hash identifier: eMmpWd9b45tcZuAyXKscG7swL1YrcpmgMF0fv1n3dQM=
Subject key identifier: 35:70:11:54:2F:04:03:31:B7:11:90:7D:10:03:FF:EF:D2:2A:1E:C1
Certificate issuer: /CN=00b2987c613aabb659e6be9903ac3501d537312e
Certificate serial: 01856F3924241CB43D5A4545138B2697F08B
Authority key identifier: 00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/NXARVC8EAzG3EZB9EAP_79IqHsE.roa
Signing time: Sun 01 Jan 2023 21:24:53 +0000
ROA not before: Sun 01 Jan 2023 21:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43847
IP address blocks: 185.58.156.0/22 maxlen: 24
31.185.104.0/21 maxlen: 24
46.182.16.0/21 maxlen: 24
2a02:2970::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:24:24:1c:b4:3d:5a:45:45:13:8b:26:97:f0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00b2987c613aabb659e6be9903ac3501d537312e
Validity
Not Before: Jan 1 21:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=357011542f040331b711907d1003ffefd22a1ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:04:a0:09:b4:53:2d:a8:02:ce:5f:a6:84:
00:a4:41:49:ee:6e:cf:5c:bf:a7:62:e7:04:e9:02:
12:22:59:4e:e3:91:e0:a4:c0:5a:1d:b1:49:80:94:
24:bf:f5:92:fe:8b:f4:01:67:5d:d2:b1:40:b7:05:
a3:cc:3f:69:9b:42:23:fc:62:79:2c:c3:87:d9:7d:
76:8c:89:89:99:b9:50:f7:be:98:ee:be:9a:43:43:
77:fe:b9:46:bb:69:53:23:7b:f2:f3:76:74:10:22:
29:c4:e5:77:ca:cc:4d:ad:a7:8e:0c:7e:4a:56:6e:
3b:5b:d3:58:7e:d7:ff:73:d1:ac:5d:b3:b6:5a:0f:
c8:3e:20:0b:74:a2:83:8f:bd:17:2a:bd:0b:54:e8:
53:86:4f:fc:d0:29:be:81:03:75:bb:50:c5:fa:7c:
ce:16:03:04:41:4e:80:33:ad:a3:8e:57:f8:17:b7:
2b:4a:b6:2a:4e:50:4d:0f:a6:d6:fb:42:20:fa:42:
1b:58:8d:b5:df:81:28:4e:8a:dc:df:1b:d3:88:34:
f9:7e:44:d5:3e:5e:a5:ef:8d:05:49:54:8e:0c:09:
f4:a8:b9:7e:d9:4e:8f:91:7b:d1:a1:a9:70:a9:92:
73:72:93:ee:7b:a5:fb:73:5b:30:71:d8:f9:9d:b8:
6a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:70:11:54:2F:04:03:31:B7:11:90:7D:10:03:FF:EF:D2:2A:1E:C1
X509v3 Authority Key Identifier:
keyid:00:B2:98:7C:61:3A:AB:B6:59:E6:BE:99:03:AC:35:01:D5:37:31:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/NXARVC8EAzG3EZB9EAP_79IqHsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/468104-3458-44ae-9587-ac842a00d476/1/ALKYfGE6q7ZZ5r6ZA6w1AdU3MS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.104.0/21
46.182.16.0/21
185.58.156.0/22
IPv6:
2a02:2970::/29
Signature Algorithm: sha256WithRSAEncryption
47:f2:27:e1:71:96:69:5a:47:27:80:1c:34:0d:c8:08:d0:ad:
fb:a7:46:62:9b:6c:2d:f0:4e:f5:c0:ef:f2:e0:d7:3c:d3:42:
72:53:d0:d0:94:64:b0:60:7f:26:7e:cc:c9:41:ca:71:e9:fd:
43:10:d9:c4:ee:33:48:71:9c:35:7a:fd:0b:d1:eb:f4:8c:00:
cf:c9:27:c2:34:2b:77:ab:40:ed:03:c4:5b:cd:15:10:37:88:
fa:3a:6e:97:ac:81:fd:d0:2e:cd:73:8a:0a:14:55:d9:2d:5e:
50:9e:e5:48:f0:f4:c3:29:2f:01:c9:30:a9:cb:3b:86:86:01:
5c:38:d5:92:bb:4b:f9:51:bf:39:e6:6d:13:38:ad:ad:cd:30:
64:23:42:11:af:f6:c7:04:03:fc:75:7f:07:ba:51:7a:dd:28:
b1:c8:2a:18:16:8f:e9:6d:08:b7:39:c0:1f:bd:57:72:0a:47:
9a:58:cf:df:67:4d:58:6a:d2:48:ff:86:27:e0:b1:8d:da:0f:
ee:82:a2:87:27:ef:20:9c:86:a4:af:f5:26:6f:a8:33:16:05:
57:86:52:33:2f:69:6f:24:52:8f:7a:2e:c2:3f:33:0b:c8:12:
a8:4c:74:9a:01:fc:fe:76:1a:36:3d:67:37:63:64:dc:98:51:
9d:bc:c0:cb
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVvOSQkHLQ9WkVFE4sml/CLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYjI5ODdjNjEzYWFiYjY1OWU2YmU5OTAzYWMzNTAxZDUz
NzMxMmUwHhcNMjMwMTAxMjEyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTcwMTE1NDJmMDQwMzMxYjcxMTkwN2QxMDAzZmZlZmQyMmExZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAUEoAm0Uy2oAs5fpoQApEFJ7m7P
XL+nYucE6QISIllO45HgpMBaHbFJgJQkv/WS/ov0AWdd0rFAtwWjzD9pm0Ij/GJ5
LMOH2X12jImJmblQ976Y7r6aQ0N3/rlGu2lTI3vy83Z0ECIpxOV3ysxNraeODH5K
Vm47W9NYftf/c9GsXbO2Wg/IPiALdKKDj70XKr0LVOhThk/80Cm+gQN1u1DF+nzO
FgMEQU6AM62jjlf4F7crSrYqTlBND6bW+0Ig+kIbWI2134EoTorc3xvTiDT5fkTV
Pl6l740FSVSODAn0qLl+2U6PkXvRoalwqZJzcpPue6X7c1swcdj5nbhq+wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFDVwEVQvBAMxtxGQfRAD/+/SKh7BMB8GA1UdIwQY
MBaAFACymHxhOqu2Wea+mQOsNQHVNzEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUxLWWZHRTZxN1paNXI2WkE2dzFBZFUzTVM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NjgxMDQtMzQ1OC00NGFlLTk1ODct
YWM4NDJhMDBkNDc2LzEvTlhBUlZDOEVBekczRVpCOUVBUF83OUlxSHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy80NjgxMDQtMzQ1OC00NGFlLTk1ODctYWM4NDJhMDBkNDc2
LzEvQUxLWWZHRTZxN1paNXI2WkE2dzFBZFUzTVM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDH7loAwQD
LrYQAwQCuTqcMA0EAgACMAcDBQMqAilwMA0GCSqGSIb3DQEBCwUAA4IBAQBH8ifh
cZZpWkcngBw0DcgI0K37p0Zim2wt8E71wO/y4Nc800JyU9DQlGSwYH8mfszJQcpx
6f1DENnE7jNIcZw1ev0L0ev0jADPySfCNCt3q0DtA8RbzRUQN4j6Om6XrIH90C7N
c4oKFFXZLV5QnuVI8PTDKS8ByTCpyzuGhgFcONWSu0v5Ub855m0TOK2tzTBkI0IR
r/bHBAP8dX8HulF63SixyCoYFo/pbQi3OcAfvVdyCkeaWM/fZ01YatJI/4Yn4LGN
2g/ugqKHJ+8gnIakr/Umb6gzFgVXhlIzL2lvJFKPei7CPzMLyBKoTHSaAfz+dho2
PWc3Y2TcmFGdvMDL
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:00 2024 by rpki-client on console-ams.rpki-client.org