Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/NgpiIrGxMpxlrh6hSbHcDrxe2jM.roa
File: NgpiIrGxMpxlrh6hSbHcDrxe2jM.roa (raw, json)
Hash identifier: Y+vZ4Rn6P6+2/vvD2+JirCuUe/59qWyiRn6Ej0gMQ+w=
Subject key identifier: 36:0A:62:22:B1:B1:32:9C:65:AE:1E:A1:49:B1:DC:0E:BC:5E:DA:33
Certificate issuer: /CN=041f2ec8e276c17d76f95c78d4a92a2b87ef2542
Certificate serial: 01857030427F718B5CB523C460DCF8743455
Authority key identifier: 04:1F:2E:C8:E2:76:C1:7D:76:F9:5C:78:D4:A9:2A:2B:87:EF:25:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BB8uyOJ2wX12-Vx41KkqK4fvJUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/NgpiIrGxMpxlrh6hSbHcDrxe2jM.roa
Signing time: Mon 02 Jan 2023 01:54:48 +0000
ROA not before: Mon 02 Jan 2023 01:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209858
IP address blocks: 213.184.73.0/24 maxlen: 24
213.184.72.0/22 maxlen: 22
213.184.74.0/24 maxlen: 24
213.184.75.0/24 maxlen: 24
213.184.72.0/24 maxlen: 24
185.186.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:42:7f:71:8b:5c:b5:23:c4:60:dc:f8:74:34:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=041f2ec8e276c17d76f95c78d4a92a2b87ef2542
Validity
Not Before: Jan 2 01:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=360a6222b1b1329c65ae1ea149b1dc0ebc5eda33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:91:4b:0b:74:89:3d:28:82:aa:44:6e:a8:
da:08:74:1d:4b:31:92:e6:1c:d7:61:e7:28:b3:82:
71:b2:c6:55:7a:76:42:af:47:d8:47:3f:20:47:9c:
24:bb:14:0f:d1:30:3b:b3:be:ad:54:81:13:9b:b3:
ee:9d:49:b6:8b:c9:8d:6d:6d:5e:c2:37:c3:40:03:
c1:71:a4:80:47:3a:80:03:33:3e:86:ec:18:d6:d2:
81:82:70:ab:2f:48:82:26:11:a2:8c:83:1d:b2:81:
5c:3d:b6:e2:90:f5:af:bd:3c:17:d4:19:3c:7d:cb:
aa:65:24:85:1d:c7:86:47:e9:80:f5:b7:82:9e:89:
34:fd:70:8b:e8:55:16:dd:82:01:40:e3:c3:3e:f3:
8d:b2:5b:d7:71:cb:18:16:02:af:ac:7f:69:fd:94:
c1:a6:a5:b2:f8:4f:2c:61:a3:2e:51:64:84:ed:b1:
01:3a:d6:e1:05:21:ac:e9:62:04:20:97:cb:68:ba:
54:b7:44:fb:3d:54:49:95:da:ed:c6:60:9b:63:a5:
75:61:77:1f:77:c7:0c:69:0e:89:b0:b9:f9:c7:80:
72:e6:c2:97:64:4b:64:b5:0d:92:ca:85:48:3e:e6:
81:71:62:76:50:8d:83:f4:34:7c:51:6c:e5:87:89:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:0A:62:22:B1:B1:32:9C:65:AE:1E:A1:49:B1:DC:0E:BC:5E:DA:33
X509v3 Authority Key Identifier:
keyid:04:1F:2E:C8:E2:76:C1:7D:76:F9:5C:78:D4:A9:2A:2B:87:EF:25:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BB8uyOJ2wX12-Vx41KkqK4fvJUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/NgpiIrGxMpxlrh6hSbHcDrxe2jM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e19744-dabe-4096-8e67-ff65ae2c1032/1/BB8uyOJ2wX12-Vx41KkqK4fvJUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.186.183.0/24
213.184.72.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:29:41:2b:0e:23:b1:93:c4:f2:d8:9b:69:a8:bd:a4:67:38:
42:4a:75:da:b2:ff:5e:b9:7d:a8:8e:86:a0:8f:35:3e:ab:d6:
ed:97:09:fa:5f:3e:c8:c7:39:6c:1e:e7:23:20:8f:3d:7d:93:
91:4b:c9:50:73:ed:ee:70:a8:37:ac:3a:3a:dd:a0:d3:f5:50:
e9:c2:d1:78:00:ca:53:10:74:5c:98:74:bc:24:a8:bd:ff:61:
87:35:be:29:96:db:0d:25:6e:4a:04:1f:07:67:0b:16:0b:72:
f3:67:8d:03:39:da:e7:00:53:a9:50:fb:d0:1b:94:00:0b:3d:
25:03:61:cc:9e:75:a3:7a:6b:86:66:01:99:11:b2:d4:e1:0f:
dc:07:3c:69:fb:a7:53:19:55:f7:79:bf:ab:84:fe:4b:36:4b:
5a:4d:72:1d:ea:b9:b1:56:07:a0:63:32:76:e7:b4:eb:56:01:
30:b1:ff:4c:95:f1:ab:32:3e:6a:0a:1b:6b:0d:2f:cb:c0:81:
98:4b:62:9e:a1:a3:c7:cc:ea:7d:4b:aa:4f:71:83:d3:5f:70:
60:bf:29:a2:90:0e:1d:b0:28:fe:1a:b4:fd:2a:f4:1d:7e:6a:
02:76:00:57:51:4e:88:8c:9f:2d:ff:b0:57:5e:03:ed:92:bb:
d5:2a:6b:dd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwMEJ/cYtctSPEYNz4dDRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MWYyZWM4ZTI3NmMxN2Q3NmY5NWM3OGQ0YTkyYTJiODdl
ZjI1NDIwHhcNMjMwMTAyMDE1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNjBhNjIyMmIxYjEzMjljNjVhZTFlYTE0OWIxZGMwZWJjNWVkYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEiRSwt0iT0ogqpEbqjaCHQdSzGS
5hzXYecos4JxssZVenZCr0fYRz8gR5wkuxQP0TA7s76tVIETm7PunUm2i8mNbW1e
wjfDQAPBcaSARzqAAzM+huwY1tKBgnCrL0iCJhGijIMdsoFcPbbikPWvvTwX1Bk8
fcuqZSSFHceGR+mA9beCnok0/XCL6FUW3YIBQOPDPvONslvXccsYFgKvrH9p/ZTB
pqWy+E8sYaMuUWSE7bEBOtbhBSGs6WIEIJfLaLpUt0T7PVRJldrtxmCbY6V1YXcf
d8cMaQ6JsLn5x4By5sKXZEtktQ2SyoVIPuaBcWJ2UI2D9DR8UWzlh4nEqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDYKYiKxsTKcZa4eoUmx3A68XtozMB8GA1UdIwQY
MBaAFAQfLsjidsF9dvlceNSpKiuH7yVCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkI4dXlPSjJ3WDEyLVZ4NDFLa3FLNGZ2SlVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMTk3NDQtZGFiZS00MDk2LThlNjct
ZmY2NWFlMmMxMDMyLzEvTmdwaUlyR3hNcHhscmg2aFNiSGNEcnhlMmpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lMTk3NDQtZGFiZS00MDk2LThlNjctZmY2NWFlMmMxMDMy
LzEvQkI4dXlPSjJ3WDEyLVZ4NDFLa3FLNGZ2SlVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAubq3AwQC
1bhIMA0GCSqGSIb3DQEBCwUAA4IBAQBcKUErDiOxk8Ty2JtpqL2kZzhCSnXasv9e
uX2ojoagjzU+q9btlwn6Xz7IxzlsHucjII89fZORS8lQc+3ucKg3rDo63aDT9VDp
wtF4AMpTEHRcmHS8JKi9/2GHNb4pltsNJW5KBB8HZwsWC3LzZ40DOdrnAFOpUPvQ
G5QACz0lA2HMnnWjemuGZgGZEbLU4Q/cBzxp+6dTGVX3eb+rhP5LNktaTXId6rmx
VgegYzJ257TrVgEwsf9MlfGrMj5qChtrDS/LwIGYS2KeoaPHzOp9S6pPcYPTX3Bg
vymikA4dsCj+GrT9KvQdfmoCdgBXUU6IjJ8t/7BXXgPtkrvVKmvd
-----END CERTIFICATE-----
Generated at Fri Aug 11 10:30:52 2023 by rpki-client on console-fra.rpki-client.org