Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/NoRC_JCfKDAAUVPl8X2nGC_sfic.roa
File: NoRC_JCfKDAAUVPl8X2nGC_sfic.roa (raw, json)
Hash identifier: iKtf9rlN8Y6SNHP1DPTsZtBfeXOcZCD+5YmopHnjIQQ=
Subject key identifier: 36:84:42:FC:90:9F:28:30:00:51:53:E5:F1:7D:A7:18:2F:EC:7E:27
Certificate issuer: /CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Certificate serial: 019266B4F7234291DA281C16484942717A89
Authority key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/NoRC_JCfKDAAUVPl8X2nGC_sfic.roa
Signing time: Mon 07 Oct 2024 11:19:48 +0000
ROA not before: Mon 07 Oct 2024 11:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210036
IP address blocks: 193.36.104.0/24 maxlen: 24
193.36.105.0/24 maxlen: 24
193.36.106.0/24 maxlen: 24
2a0d:d740::/48 maxlen: 48
2a0d:d740:105::/48 maxlen: 48
2a0d:d740:c001::/48 maxlen: 48
2a0d:d742::/45 maxlen: 45
Validation: Failed, certificate revoked on Mon 07 Oct 2024 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:b4:f7:23:42:91:da:28:1c:16:48:49:42:71:7a:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Validity
Not Before: Oct 7 11:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=368442fc909f2830005153e5f17da7182fec7e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:49:c0:4e:ee:67:20:04:3f:49:c2:1c:df:
3a:07:74:da:4f:6b:41:48:03:19:67:02:57:f4:6b:
5b:64:92:4a:a5:3e:2d:a6:f7:42:49:de:b5:52:61:
2b:2a:45:3e:b5:b0:4b:e2:a1:9a:b5:e1:41:58:67:
7d:7d:d8:84:06:ba:e6:ca:3b:d7:b1:ae:9f:51:ed:
b9:d4:d1:16:36:cb:ae:ff:57:b7:ec:66:a9:72:29:
5b:a3:28:d9:da:6f:10:13:b8:67:9a:84:d1:f9:93:
88:f7:74:47:17:ad:3d:1b:34:71:fd:57:3a:d6:fc:
a7:c7:e6:6b:8f:42:7e:3d:a5:a3:23:6b:4b:5b:7d:
0d:97:c0:b1:c1:63:3d:3c:ac:57:d3:b3:2a:cf:b6:
a0:71:46:fe:76:5a:f7:fb:ed:78:39:3f:9e:36:1a:
9f:a2:6e:54:8f:cf:23:19:97:8b:6e:e3:bf:b5:2a:
06:e1:4a:bf:9f:25:ac:07:f8:54:ea:ff:03:be:b2:
6a:1f:d0:5d:41:7e:1c:ad:ed:54:ac:27:2a:7f:f1:
39:5d:a3:19:3c:f7:f9:69:49:67:da:1a:11:3f:94:
9d:11:7a:f9:c4:23:62:8e:fe:48:0f:0d:2f:6e:a0:
ef:f0:63:37:cd:b6:0d:f9:72:5a:70:ba:d6:b4:31:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:84:42:FC:90:9F:28:30:00:51:53:E5:F1:7D:A7:18:2F:EC:7E:27
X509v3 Authority Key Identifier:
keyid:BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/NoRC_JCfKDAAUVPl8X2nGC_sfic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.104.0-193.36.106.255
IPv6:
2a0d:d740::/48
2a0d:d740:105::/48
2a0d:d740:c001::/48
2a0d:d742::/45
Signature Algorithm: sha256WithRSAEncryption
5e:a1:2a:a2:85:1c:f6:5a:3c:2b:18:a0:0e:45:59:d7:dd:dc:
6b:d9:4a:72:63:9e:f5:91:0f:66:50:18:d4:83:74:63:e9:27:
6a:d7:3a:5b:5a:24:b4:a3:59:52:05:ec:57:30:b3:74:26:66:
af:37:6a:c8:d0:ac:44:f1:96:f0:9d:ad:7e:e7:ce:4e:55:05:
7d:c4:0b:26:ee:3c:d4:66:82:05:4f:2e:d5:89:0f:52:db:18:
9e:e4:e9:4b:c3:f8:d0:49:0f:dd:1f:bf:76:a4:3b:5c:99:e1:
5b:e0:87:1a:4f:48:ac:f5:47:bd:ad:24:c1:ce:c5:cb:14:08:
54:15:ff:b6:b1:82:43:48:54:64:d6:fe:cc:d7:e1:fd:fc:9d:
de:22:a7:ec:c8:2a:65:d8:16:e5:3c:bc:ae:28:89:79:35:f4:
54:00:11:5f:fa:26:c9:7f:78:1d:2e:e4:80:54:68:0c:af:bc:
84:aa:d1:af:ef:18:7d:08:9d:e4:8d:3c:92:c2:ac:3a:9b:7e:
8c:7d:27:d2:be:31:83:8c:ca:e9:94:07:f5:36:fa:d5:be:30:
95:c5:8f:e3:4f:b7:2a:e5:43:d2:a9:dd:3a:b3:a9:53:de:38:
87:d0:3b:43:bd:c8:7b:25:0a:9c:47:42:d2:9f:f5:58:72:95:
ea:1a:70:08
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgISAZJmtPcjQpHaKBwWSElCcXqJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTZmZTE0Yjg3NTVkOWZmNzQ2NmZhOTdjNGE1NWY3MzUx
ODMyNDkwHhcNMjQxMDA3MTExOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjg0NDJmYzkwOWYyODMwMDA1MTUzZTVmMTdkYTcxODJmZWM3ZTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG5JwE7uZyAEP0nCHN86B3TaT2tB
SAMZZwJX9GtbZJJKpT4tpvdCSd61UmErKkU+tbBL4qGateFBWGd9fdiEBrrmyjvX
sa6fUe251NEWNsuu/1e37GapcilboyjZ2m8QE7hnmoTR+ZOI93RHF609GzRx/Vc6
1vynx+Zrj0J+PaWjI2tLW30Nl8CxwWM9PKxX07Mqz7agcUb+dlr3++14OT+eNhqf
om5Uj88jGZeLbuO/tSoG4Uq/nyWsB/hU6v8DvrJqH9BdQX4cre1UrCcqf/E5XaMZ
PPf5aUln2hoRP5SdEXr5xCNijv5IDw0vbqDv8GM3zbYN+XJacLrWtDGTmwIDAQAB
o4ICPTCCAjkwHQYDVR0OBBYEFDaEQvyQnygwAFFT5fF9pxgv7H4nMB8GA1UdIwQY
MBaAFLvm/hS4dV2f90ZvqXxKVfc1GDJJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMt
ODdhNjMzM2Q2ZTY0LzEvTm9SQ19KQ2ZLREFBVVZQbDhYMm5HQ19zZmljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC83NWQ0ZmQtOTBmNS00YmFhLWEzNWMtODdhNjMzM2Q2ZTY0
LzEvdS1iLUZMaDFYWl8zUm0tcGZFcFY5elVZTWtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAUBAIAATAOMAwDBAPBJGgD
BADBJGowKgQCAAIwJAMHACoN10AAAAMHACoN10ABBQMHACoN10DAAQMHAyoN10IA
ADANBgkqhkiG9w0BAQsFAAOCAQEAXqEqooUc9lo8KxigDkVZ193ca9lKcmOe9ZEP
ZlAY1IN0Y+knatc6W1oktKNZUgXsVzCzdCZmrzdqyNCsRPGW8J2tfufOTlUFfcQL
Ju481GaCBU8u1YkPUtsYnuTpS8P40EkP3R+/dqQ7XJnhW+CHGk9IrPVHva0kwc7F
yxQIVBX/trGCQ0hUZNb+zNfh/fyd3iKn7MgqZdgW5Ty8riiJeTX0VAARX/omyX94
HS7kgFRoDK+8hKrRr+8YfQid5I08ksKsOpt+jH0n0r4xg4zK6ZQH9Tb61b4wlcWP
40+3KuVD0qndOrOpU944h9A7Q73IeyUKnEdC0p/1WHKV6hpwCA==
-----END CERTIFICATE-----
Generated at Mon Oct 7 20:37:58 2024 by rpki-client on console-fra.rpki-client.org