Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nsNVigjoEmOONLZ0sr6cf070hGA.roa
File: nsNVigjoEmOONLZ0sr6cf070hGA.roa (raw, json)
Hash identifier: ncs2SUoiG9WcbzAI7Hy7aSLyXC6A/YYl39Yw5SWCqg8=
Subject key identifier: 9E:C3:55:8A:08:E8:12:63:8E:34:B6:74:B2:BE:9C:7F:4E:F4:84:60
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019238D66ACD8D615821CD0218755942F9AB
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nsNVigjoEmOONLZ0sr6cf070hGA.roa
Signing time: Sat 28 Sep 2024 13:33:48 +0000
ROA not before: Sat 28 Sep 2024 13:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 85.133.221.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 05 Oct 2024 12:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:38:d6:6a:cd:8d:61:58:21:cd:02:18:75:59:42:f9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Sep 28 13:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9ec3558a08e812638e34b674b2be9c7f4ef48460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6d:50:72:84:27:df:ee:b9:69:da:16:ff:51:
a0:1f:b7:0a:4c:20:e2:75:c0:92:bb:d6:82:ba:54:
c5:eb:50:e0:84:15:16:45:74:fd:2f:31:8f:d0:21:
32:10:3b:ae:55:a6:32:99:9d:53:fe:d2:53:0d:3a:
cd:e6:9d:f0:39:d6:bb:b5:9c:5d:fe:14:01:aa:79:
ef:6e:1c:f9:49:0c:c9:a3:0a:0a:71:be:5f:60:e0:
ce:b4:84:48:da:09:cd:c8:37:e8:75:09:d2:78:02:
e7:2f:eb:65:ee:97:42:f3:4b:13:6a:2c:a2:f8:b0:
dc:68:33:09:42:33:cd:1d:2c:39:bf:dc:88:5a:63:
06:a5:f3:84:be:81:3d:2f:bc:ce:1a:f1:35:de:72:
85:06:17:e3:2e:a7:41:60:50:c6:e1:df:63:d4:a4:
e5:cb:97:1e:95:70:0f:b5:a0:77:03:f6:bf:b6:64:
fe:13:87:ed:fe:4f:84:64:5a:ea:3a:b4:67:2a:bf:
c7:8f:0d:05:44:d7:38:fb:d5:62:b2:90:ad:d8:8a:
de:03:f2:52:28:03:1d:86:fd:0c:7b:be:d2:a0:09:
d0:02:e4:a1:92:7a:c0:bd:51:2f:77:6e:2e:1c:c3:
4b:65:d0:d7:0d:9d:9a:07:9c:a2:04:a4:0b:08:f1:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C3:55:8A:08:E8:12:63:8E:34:B6:74:B2:BE:9C:7F:4E:F4:84:60
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/nsNVigjoEmOONLZ0sr6cf070hGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.221.0/24
85.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
93:16:05:c0:ae:f4:b4:d9:ae:e5:39:fb:2d:76:7f:87:2c:d7:
6f:3e:6e:5e:ba:11:ea:a8:48:52:77:78:45:ab:12:21:6c:60:
49:27:ef:78:ca:59:ef:11:54:05:0b:08:f5:14:60:33:97:c2:
91:2d:c5:51:4d:45:30:1a:af:b0:58:37:ee:30:1f:bc:b2:c4:
22:02:28:80:68:0f:88:ce:6d:0b:f1:3e:2e:d6:45:83:ce:3f:
eb:9c:c4:41:ed:f7:8c:8f:1e:4c:09:52:ec:11:2d:f7:40:fe:
21:d2:6d:a0:72:3c:bf:4d:8f:a1:d5:0c:c2:91:4e:f7:39:d5:
21:c1:64:93:99:d8:97:20:c0:c8:18:c1:88:71:41:e8:c9:18:
18:cf:cf:c8:f4:c2:77:4e:c7:67:f8:e3:f1:4c:f0:9d:fb:63:
f6:2b:76:02:1c:9e:bc:74:29:26:57:dc:cf:6a:97:f2:ed:51:
b3:89:46:8d:b6:f2:7e:58:5d:a0:b0:b8:29:14:b9:5a:ae:ea:
8c:4d:02:89:14:fd:86:92:ed:f9:a3:b6:bb:40:9a:12:17:2e:
60:5f:23:96:38:9b:4b:21:0f:a5:9c:e2:de:be:6c:c9:4b:a0:
68:99:b5:57:40:90:f0:ec:d8:be:4c:80:c6:34:f5:bc:17:fc:
3b:e8:f7:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZI41mrNjWFYIc0CGHVZQvmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5
NDY3MDIwHhcNMjQwOTI4MTMzMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWMzNTU4YTA4ZTgxMjYzOGUzNGI2NzRiMmJlOWM3ZjRlZjQ4NDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm1QcoQn3+65adoW/1GgH7cKTCDi
dcCSu9aCulTF61DghBUWRXT9LzGP0CEyEDuuVaYymZ1T/tJTDTrN5p3wOda7tZxd
/hQBqnnvbhz5SQzJowoKcb5fYODOtIRI2gnNyDfodQnSeALnL+tl7pdC80sTaiyi
+LDcaDMJQjPNHSw5v9yIWmMGpfOEvoE9L7zOGvE13nKFBhfjLqdBYFDG4d9j1KTl
y5celXAPtaB3A/a/tmT+E4ft/k+EZFrqOrRnKr/Hjw0FRNc4+9VispCt2IreA/JS
KAMdhv0Me77SoAnQAuShknrAvVEvd24uHMNLZdDXDZ2aB5yiBKQLCPEh0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ7DVYoI6BJjjjS2dLK+nH9O9IRgMB8GA1UdIwQY
MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt
NWQxZmE2NmMzNjNiLzEvbnNOVmlnam9FbU9PTkxaMHNyNmNmMDcwaEdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi
LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVYXdAwQA
VYXxMA0GCSqGSIb3DQEBCwUAA4IBAQCTFgXArvS02a7lOfstdn+HLNdvPm5euhHq
qEhSd3hFqxIhbGBJJ+94ylnvEVQFCwj1FGAzl8KRLcVRTUUwGq+wWDfuMB+8ssQi
AiiAaA+Izm0L8T4u1kWDzj/rnMRB7feMjx5MCVLsES33QP4h0m2gcjy/TY+h1QzC
kU73OdUhwWSTmdiXIMDIGMGIcUHoyRgYz8/I9MJ3Tsdn+OPxTPCd+2P2K3YCHJ68
dCkmV9zPapfy7VGziUaNtvJ+WF2gsLgpFLlaruqMTQKJFP2Gku35o7a7QJoSFy5g
XyOWOJtLIQ+lnOLevmzJS6BombVXQJDw7Ni+TIDGNPW8F/w76PdH
-----END CERTIFICATE-----
Generated at Sat Oct 5 16:36:55 2024 by rpki-client on console-fra.rpki-client.org