Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/NHYOaRdRhvecregi9YcN9Hkg1c4.roa
File: NHYOaRdRhvecregi9YcN9Hkg1c4.roa (raw, json)
Hash identifier: /Zoni2MnBGadb3xfviGI+8OSvSgpwgfAoRinWp60nEY=
Subject key identifier: 34:76:0E:69:17:51:86:F7:9C:AD:E8:22:F5:87:0D:F4:79:20:D5:CE
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018611C5ED5DCF2E343248F70D9FFE3B88B6
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/NHYOaRdRhvecregi9YcN9Hkg1c4.roa
Signing time: Thu 02 Feb 2023 10:57:09 +0000
ROA not before: Thu 02 Feb 2023 10:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:c5:ed:5d:cf:2e:34:32:48:f7:0d:9f:fe:3b:88:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 2 10:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34760e69175186f79cade822f5870df47920d5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:9c:ab:9c:a3:a7:ef:e4:3b:4d:ec:a0:7c:
ad:dd:3b:6a:00:77:7b:9a:18:f8:02:4a:41:2f:03:
1a:87:a9:7f:55:ac:16:a1:86:a8:42:51:53:c0:08:
42:53:71:67:93:da:38:50:9b:10:a8:e1:67:a1:91:
fc:c0:02:74:0d:3f:83:ce:bf:e5:e2:33:bc:d8:a1:
d2:da:b5:2c:89:60:36:04:e7:e5:86:8f:1b:e2:49:
f1:26:ec:53:d2:b3:0f:61:a6:7a:67:3c:9c:7f:0f:
e5:57:5b:7d:2e:6d:4f:18:f7:a1:14:8f:04:83:01:
07:54:e5:2a:f0:86:de:c2:1f:d1:30:7b:8c:82:74:
36:24:c2:9f:2f:44:cd:8b:46:fd:96:e1:9f:06:96:
33:78:3c:6e:46:67:ec:85:ac:65:c4:dd:a9:a8:76:
c1:7e:45:16:6f:17:6f:36:4a:10:18:99:c8:76:62:
be:61:3d:a7:26:78:06:d5:68:08:1f:41:0c:59:44:
dd:eb:2a:2a:70:52:4a:dd:6d:7d:b0:09:57:ad:76:
0e:ca:da:cd:93:0f:c7:6b:bc:27:59:df:fd:1b:95:
83:ff:d6:b2:ab:1d:87:63:fb:c3:43:eb:15:31:02:
82:a8:ca:a0:7b:56:f5:fd:f6:63:a5:59:e2:0b:13:
bf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:76:0E:69:17:51:86:F7:9C:AD:E8:22:F5:87:0D:F4:79:20:D5:CE
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/NHYOaRdRhvecregi9YcN9Hkg1c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.201.0-37.128.203.255
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:87:02:fa:57:46:fd:c2:d9:9a:c2:28:d9:4e:a1:57:3c:55:
16:d5:44:a8:08:cf:db:49:04:b2:e1:63:75:db:6c:b9:49:c2:
e9:e4:0e:3a:31:0e:2e:80:fa:f0:1f:c5:05:8c:29:1d:d4:ba:
eb:05:e9:94:68:ba:e4:55:28:48:b9:54:1b:df:71:ee:d2:af:
a6:7a:03:7d:12:07:8f:c8:75:ee:82:3d:c3:8f:3a:4a:bd:43:
70:ce:51:df:65:4d:49:9c:88:c6:ec:36:cb:c1:68:bb:a2:77:
36:27:71:95:11:da:fc:2b:6d:ca:9e:f5:87:b0:69:81:ca:12:
f4:f3:04:61:20:5f:71:3b:63:22:19:bd:47:47:7f:ff:83:1a:
c1:75:ef:72:c6:dc:0b:e8:37:2c:17:47:e4:e3:6a:6a:0a:4a:
be:0e:55:47:d6:a0:67:e7:53:13:43:6a:a5:d8:2c:54:6f:87:
91:ca:61:b3:fa:7d:3a:3b:4d:7c:2a:94:2a:f6:4f:5f:a8:6b:
85:b5:cb:a3:f0:67:eb:ff:7e:e0:ae:0d:01:87:e1:91:ad:62:
97:b8:b6:2f:26:ae:5a:92:33:01:c1:16:d1:a9:80:a4:f1:cc:
3b:2d:1e:9f:0e:12:e9:f4:a8:b2:30:41:9e:93:c6:ca:ea:22:
66:1d:7b:4f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYYRxe1dzy40Mkj3DZ/+O4i2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMjAyMTA1NzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDc2MGU2OTE3NTE4NmY3OWNhZGU4MjJmNTg3MGRmNDc5MjBkNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEycq5yjp+/kO03soHyt3TtqAHd7
mhj4AkpBLwMah6l/VawWoYaoQlFTwAhCU3Fnk9o4UJsQqOFnoZH8wAJ0DT+Dzr/l
4jO82KHS2rUsiWA2BOflho8b4knxJuxT0rMPYaZ6Zzycfw/lV1t9Lm1PGPehFI8E
gwEHVOUq8Ibewh/RMHuMgnQ2JMKfL0TNi0b9luGfBpYzeDxuRmfshaxlxN2pqHbB
fkUWbxdvNkoQGJnIdmK+YT2nJngG1WgIH0EMWUTd6yoqcFJK3W19sAlXrXYOytrN
kw/Ha7wnWd/9G5WD/9ayqx2HY/vDQ+sVMQKCqMqge1b1/fZjpVniCxO/2QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFDR2DmkXUYb3nK3oIvWHDfR5INXOMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvTkhZT2FSZFJodmVjcmVnaTlZY045SGtnMWM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAlgMkD
BAIlgMgDBAC5UdswDQYJKoZIhvcNAQELBQADggEBAFuHAvpXRv3C2ZrCKNlOoVc8
VRbVRKgIz9tJBLLhY3XbbLlJwunkDjoxDi6A+vAfxQWMKR3UuusF6ZRouuRVKEi5
VBvfce7Sr6Z6A30SB4/Ide6CPcOPOkq9Q3DOUd9lTUmciMbsNsvBaLuidzYncZUR
2vwrbcqe9YewaYHKEvTzBGEgX3E7YyIZvUdHf/+DGsF173LG3AvoNywXR+TjamoK
Sr4OVUfWoGfnUxNDaqXYLFRvh5HKYbP6fTo7TXwqlCr2T1+oa4W1y6PwZ+v/fuCu
DQGH4ZGtYpe4ti8mrlqSMwHBFtGpgKTxzDstHp8OEun0qLIwQZ6TxsrqImYde08=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org