Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/nctmoaSJOmpueWGi_E5m_Jr2zzM.roa
File: nctmoaSJOmpueWGi_E5m_Jr2zzM.roa (raw, json)
Hash identifier: J1emRJktcGH+pW+sCGN1ddm3SPKxFe1k6ohqdthOWY4=
Subject key identifier: 9D:CB:66:A1:A4:89:3A:6A:6E:79:61:A2:FC:4E:66:FC:9A:F6:CF:33
Certificate issuer: /CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Certificate serial: 01876A2638A243D12FF9B39814B033617749
Authority key identifier: 5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/nctmoaSJOmpueWGi_E5m_Jr2zzM.roa
Signing time: Mon 10 Apr 2023 07:51:42 +0000
ROA not before: Mon 10 Apr 2023 07:51:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51375
IP address blocks: 84.235.102.0/24 maxlen: 24
84.235.101.0/24 maxlen: 24
84.235.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:26:38:a2:43:d1:2f:f9:b3:98:14:b0:33:61:77:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e1bf6a319da2489816aedba1b4fd0cc7ddf3e1e
Validity
Not Before: Apr 10 07:51:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dcb66a1a4893a6a6e7961a2fc4e66fc9af6cf33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1d:08:90:e6:da:46:6a:51:94:fe:3b:fc:33:
4e:c5:5c:95:87:6b:ad:0d:74:a7:a7:8f:68:f2:f6:
58:5c:d6:35:48:4d:33:86:9c:98:6f:8c:4f:5d:af:
86:da:f5:19:a1:c2:5c:61:67:1e:6e:13:73:ee:bb:
1f:ac:8a:0c:37:cb:10:cf:eb:2f:6a:e0:20:3a:18:
45:52:75:b3:c4:6b:43:f8:41:a6:aa:f3:71:d9:66:
23:84:bb:cc:ce:7a:d6:5e:1a:26:10:63:4c:ea:53:
0f:1c:c4:e8:07:51:6a:fc:39:aa:64:09:5a:c2:6a:
95:fe:fc:12:fd:56:c2:2b:26:36:15:79:d2:b8:83:
30:32:bb:fa:99:cc:7d:24:3f:97:4f:c8:12:57:3d:
0b:22:a2:9a:8a:b8:89:3f:88:da:a5:c0:bb:f2:08:
af:8f:e2:81:dd:de:47:aa:a5:3d:30:13:32:be:6c:
fb:74:78:77:b2:19:ca:98:98:33:81:f5:17:33:9f:
3e:b0:c2:a3:28:06:ae:18:4c:1d:73:b5:52:ac:dd:
a6:77:81:b7:01:49:bf:e1:cf:83:65:2e:da:0a:51:
71:22:e7:31:d0:09:39:a0:7d:c8:a3:f2:4d:a3:e9:
70:8e:8e:4c:57:16:e1:1a:a1:d8:00:dc:e6:42:fc:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:CB:66:A1:A4:89:3A:6A:6E:79:61:A2:FC:4E:66:FC:9A:F6:CF:33
X509v3 Authority Key Identifier:
keyid:5E:1B:F6:A3:19:DA:24:89:81:6A:ED:BA:1B:4F:D0:CC:7D:DF:3E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhv2oxnaJImBau26G0_QzH3fPh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/nctmoaSJOmpueWGi_E5m_Jr2zzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/88fdd1-8b7b-4101-ac66-b590957d9415/1/Xhv2oxnaJImBau26G0_QzH3fPh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.235.101.0-84.235.102.255
84.235.107.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2f:db:52:d2:75:55:90:ac:a7:40:74:cb:67:6a:53:15:73:
22:81:b4:c8:45:70:8a:de:5a:97:6f:84:a9:ce:29:2d:0b:88:
09:9c:f0:18:80:a6:9d:00:86:f3:c0:36:78:5e:3a:43:3d:50:
53:23:77:fb:0e:12:d2:ea:f4:94:19:b8:14:ef:c9:78:3f:cc:
a2:91:0c:04:a3:80:b1:58:4c:1a:b4:87:cf:7e:aa:ba:30:c7:
65:f4:1c:10:20:76:06:b2:33:4c:0f:24:3c:85:8d:93:66:f6:
3c:41:d6:73:60:1f:bf:85:7a:76:b0:e3:bf:ab:f9:1c:77:46:
46:36:ea:34:cd:72:f0:74:be:60:7c:a1:b4:fa:20:67:6f:70:
13:ec:bf:8e:49:26:29:c1:5e:79:09:09:92:38:ee:44:5d:44:
0b:7c:66:a7:ee:df:6d:9b:e4:1d:2e:a8:66:67:12:70:10:af:
2e:8f:8a:7a:1d:f5:41:89:7f:03:cd:46:e8:e0:34:99:25:62:
e9:f1:aa:63:c1:9d:ad:b9:b6:72:ad:65:39:e9:af:db:0c:2e:
60:69:98:fc:a7:0c:93:17:68:ad:16:8a:7c:1e:6a:8d:53:75:
29:43:8b:ac:cc:a6:10:dd:6f:77:9f:7a:e2:cf:86:76:45:30:
22:9e:47:50
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYdqJjiiQ9Ev+bOYFLAzYXdJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMWJmNmEzMTlkYTI0ODk4MTZhZWRiYTFiNGZkMGNjN2Rk
ZjNlMWUwHhcNMjMwNDEwMDc1MTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGNiNjZhMWE0ODkzYTZhNmU3OTYxYTJmYzRlNjZmYzlhZjZjZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR0IkObaRmpRlP47/DNOxVyVh2ut
DXSnp49o8vZYXNY1SE0zhpyYb4xPXa+G2vUZocJcYWcebhNz7rsfrIoMN8sQz+sv
auAgOhhFUnWzxGtD+EGmqvNx2WYjhLvMznrWXhomEGNM6lMPHMToB1Fq/DmqZAla
wmqV/vwS/VbCKyY2FXnSuIMwMrv6mcx9JD+XT8gSVz0LIqKairiJP4japcC78giv
j+KB3d5HqqU9MBMyvmz7dHh3shnKmJgzgfUXM58+sMKjKAauGEwdc7VSrN2md4G3
AUm/4c+DZS7aClFxIucx0Ak5oH3Io/JNo+lwjo5MVxbhGqHYANzmQvygDwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJ3LZqGkiTpqbnlhovxOZvya9s8zMB8GA1UdIwQY
MBaAFF4b9qMZ2iSJgWrtuhtP0Mx93z4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYt
YjU5MDk1N2Q5NDE1LzEvbmN0bW9hU0pPbXB1ZVdHaV9FNW1fSnIyenpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84OGZkZDEtOGI3Yi00MTAxLWFjNjYtYjU5MDk1N2Q5NDE1
LzEvWGh2Mm94bmFKSW1CYXUyNkcwX1F6SDNmUGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABU62UD
BABU62YDBABU62swDQYJKoZIhvcNAQELBQADggEBACUv21LSdVWQrKdAdMtnalMV
cyKBtMhFcIreWpdvhKnOKS0LiAmc8BiApp0AhvPANnheOkM9UFMjd/sOEtLq9JQZ
uBTvyXg/zKKRDASjgLFYTBq0h89+qrowx2X0HBAgdgayM0wPJDyFjZNm9jxB1nNg
H7+Fenaw47+r+Rx3RkY26jTNcvB0vmB8obT6IGdvcBPsv45JJinBXnkJCZI47kRd
RAt8Zqfu322b5B0uqGZnEnAQry6Pinod9UGJfwPNRujgNJklYunxqmPBna25tnKt
ZTnpr9sMLmBpmPynDJMXaK0Winweao1TdSlDi6zMphDdb3efeuLPhnZFMCKeR1A=
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:50 2024 by rpki-client on console-fra.rpki-client.org