Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/NnTySckuzCDmpQ9ALpolUHRf2Zg.roa
File: NnTySckuzCDmpQ9ALpolUHRf2Zg.roa (raw, json)
Hash identifier: OmjrDtRAs0y5XtcPfmeFCGk8fpEXPFq+4MNwkzGRosw=
Subject key identifier: 36:74:F2:49:C9:2E:CC:20:E6:A5:0F:40:2E:9A:25:50:74:5F:D9:98
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 01867F719CDD92C401EC747107558B975170
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/NnTySckuzCDmpQ9ALpolUHRf2Zg.roa
Signing time: Thu 23 Feb 2023 18:03:17 +0000
ROA not before: Thu 23 Feb 2023 18:03:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44774
IP address blocks: 91.237.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:71:9c:dd:92:c4:01:ec:74:71:07:55:8b:97:51:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Feb 23 18:03:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3674f249c92ecc20e6a50f402e9a2550745fd998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:5a:58:50:6c:a3:0e:4b:dc:78:43:e3:d7:
bd:44:2a:d0:43:cb:2f:0b:52:19:3f:30:04:d4:30:
61:d3:20:a5:4a:a2:15:9a:4a:9c:b2:0a:e9:a0:29:
de:40:66:6b:df:3f:59:9e:01:4a:df:b2:e3:16:6b:
d4:33:5f:29:8f:2f:e2:f9:19:62:e5:e6:64:91:43:
c2:e9:41:bd:ec:f4:01:f5:69:3b:ea:6a:50:a8:19:
44:d4:f2:11:17:20:95:99:c9:9b:8c:a3:69:ee:76:
eb:cd:61:f1:21:a8:ad:9d:b8:20:fc:5d:16:a7:d1:
79:f8:8b:98:92:46:4a:a4:81:56:e9:60:e6:09:f9:
77:1f:61:7f:44:ca:4b:de:c5:5d:64:48:e8:74:76:
bc:6e:88:91:11:25:32:e3:ef:8f:d4:93:da:6f:ad:
7c:5d:e1:9d:bd:c3:2e:a6:37:f6:40:47:38:7a:bf:
1d:d9:80:3d:7c:65:36:55:ca:2f:4f:9c:7f:9f:b4:
42:fb:3f:43:8c:a0:85:ae:35:37:e5:ce:a9:60:f9:
4e:2f:ee:de:9c:86:14:ea:22:19:6d:7d:a4:db:4b:
cd:b3:71:c4:1e:5e:0d:97:a1:f4:dc:75:bd:da:64:
5f:fe:b1:2a:91:26:80:63:f5:45:7e:e1:c5:30:5c:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:74:F2:49:C9:2E:CC:20:E6:A5:0F:40:2E:9A:25:50:74:5F:D9:98
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/NnTySckuzCDmpQ9ALpolUHRf2Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.181.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:af:39:cc:fe:7f:0d:c4:0f:cf:19:0c:69:9f:e8:e4:1b:95:
e0:34:96:ce:94:75:d2:37:05:ca:cd:a9:c4:35:56:b7:68:02:
d9:0f:02:9e:9d:bd:62:77:9a:0d:95:a9:9c:c6:ca:de:8f:de:
e0:4d:31:0e:82:43:45:3d:73:89:27:35:b1:d1:a4:41:75:51:
22:34:a9:25:9a:3d:ed:ad:ab:94:ec:e3:c7:b9:7f:eb:a5:5e:
44:aa:3b:0f:c1:2e:cb:f2:e1:dd:4c:1c:42:b3:ca:f0:4c:cb:
6d:e1:55:96:9b:f5:ff:09:f9:7d:15:a4:48:59:04:d0:08:d2:
50:0d:6d:48:48:44:b4:83:d4:6b:0c:3d:a5:80:ae:6a:58:a9:
c8:91:c8:af:e3:d5:e2:91:89:e3:82:2e:0a:c3:55:2c:9a:2a:
f5:20:32:16:27:47:0f:75:7f:be:4f:39:14:e2:1a:81:4a:1b:
97:33:97:38:46:db:e7:84:23:29:82:9e:98:50:bf:39:d9:85:
ab:05:e1:2b:ee:b2:89:af:0a:df:5b:3a:47:65:fc:89:e0:a0:
8f:d8:34:60:73:c0:5b:10:3b:8d:1f:5a:a7:ca:b8:87:84:f0:
05:f7:08:e1:2a:97:7f:f4:f9:7c:e1:a3:9c:b5:db:49:1b:8e:
52:20:d0:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ/cZzdksQB7HRxB1WLl1FwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjMwMjIzMTgwMzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjc0ZjI0OWM5MmVjYzIwZTZhNTBmNDAyZTlhMjU1MDc0NWZkOTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSdaWFBsow5L3HhD49e9RCrQQ8sv
C1IZPzAE1DBh0yClSqIVmkqcsgrpoCneQGZr3z9ZngFK37LjFmvUM18pjy/i+Rli
5eZkkUPC6UG97PQB9Wk76mpQqBlE1PIRFyCVmcmbjKNp7nbrzWHxIaitnbgg/F0W
p9F5+IuYkkZKpIFW6WDmCfl3H2F/RMpL3sVdZEjodHa8boiRESUy4++P1JPab618
XeGdvcMupjf2QEc4er8d2YA9fGU2VcovT5x/n7RC+z9DjKCFrjU35c6pYPlOL+7e
nIYU6iIZbX2k20vNs3HEHl4Nl6H03HW92mRf/rEqkSaAY/VFfuHFMFz31wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDZ08knJLswg5qUPQC6aJVB0X9mYMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvTm5UeVNja3V6Q0RtcFE5QUxwb2xVSFJmMlpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+21MA0G
CSqGSIb3DQEBCwUAA4IBAQA/rznM/n8NxA/PGQxpn+jkG5XgNJbOlHXSNwXKzanE
NVa3aALZDwKenb1id5oNlamcxsrej97gTTEOgkNFPXOJJzWx0aRBdVEiNKklmj3t
rauU7OPHuX/rpV5EqjsPwS7L8uHdTBxCs8rwTMtt4VWWm/X/Cfl9FaRIWQTQCNJQ
DW1ISES0g9RrDD2lgK5qWKnIkciv49XikYnjgi4Kw1Usmir1IDIWJ0cPdX++TzkU
4hqBShuXM5c4RtvnhCMpgp6YUL852YWrBeEr7rKJrwrfWzpHZfyJ4KCP2DRgc8Bb
EDuNH1qnyriHhPAF9wjhKpd/9Pl84aOctdtJG45SINAX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:52 2024 by rpki-client on console-ams.rpki-client.org