Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/NMMN5c375UywzLpw5c3Md5GaLjc.roa
File: NMMN5c375UywzLpw5c3Md5GaLjc.roa (raw, json)
Hash identifier: Q3z8ucnG+0/lAq4k/o5jkAQEuluqA2hBP0WBt4Qot/8=
Subject key identifier: 34:C3:0D:E5:CD:FB:E5:4C:B0:CC:BA:70:E5:CD:CC:77:91:9A:2E:37
Certificate issuer: /CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Certificate serial: 0185710C0B0BD93548ACC3484E708561769E
Authority key identifier: 9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/NMMN5c375UywzLpw5c3Md5GaLjc.roa
Signing time: Mon 02 Jan 2023 05:54:52 +0000
ROA not before: Mon 02 Jan 2023 05:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60522
IP address blocks: 194.76.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:0b:0b:d9:35:48:ac:c3:48:4e:70:85:61:76:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff2f682053d43c9ad1c6539caee9f4621b0da16
Validity
Not Before: Jan 2 05:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=34c30de5cdfbe54cb0ccba70e5cdcc77919a2e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b8:07:ac:55:ff:9f:95:8e:f5:b9:53:c7:5a:
24:6a:8e:dc:5d:75:99:c6:41:f3:b7:d9:12:9c:f8:
8a:71:c8:7b:81:26:a2:5b:34:38:b0:88:cc:96:05:
4b:86:2a:f0:ea:1f:ae:38:c9:37:4d:34:60:e9:e0:
d0:43:b2:b2:61:50:b1:52:32:bc:77:6d:bc:d4:88:
43:3e:51:f2:88:19:4e:ea:85:e8:99:24:5d:06:fb:
c9:9d:0a:2b:34:92:9e:32:d8:00:b0:01:1a:87:01:
fe:fb:74:46:07:cf:56:97:63:94:a6:70:d7:ca:7d:
0f:b0:88:d9:67:d4:af:8d:d5:fc:be:5f:a1:20:dd:
9a:ec:4c:d4:0d:ba:1a:a8:dd:ca:19:cc:ba:c6:6a:
66:7e:f3:68:86:50:73:f6:e9:44:14:d1:15:e8:e6:
b8:d3:a7:8a:b3:3c:80:24:ae:60:6b:22:48:7d:98:
52:82:35:93:44:44:df:16:92:50:f7:dd:20:a8:fa:
19:e7:66:76:ef:5b:f1:91:97:51:34:df:6c:98:3a:
8f:f4:bb:63:a2:ed:50:9d:74:33:35:e1:70:3f:be:
a1:71:c6:4d:77:37:f9:a8:74:38:fb:4a:6f:cf:85:
d5:4c:a2:9d:d5:e3:16:1a:a8:4d:23:5d:ed:41:ba:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C3:0D:E5:CD:FB:E5:4C:B0:CC:BA:70:E5:CD:CC:77:91:9A:2E:37
X509v3 Authority Key Identifier:
keyid:9F:F2:F6:82:05:3D:43:C9:AD:1C:65:39:CA:EE:9F:46:21:B0:DA:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/NMMN5c375UywzLpw5c3Md5GaLjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2fa624-5b5d-4646-b13d-16511a6ed9c6/1/n_L2ggU9Q8mtHGU5yu6fRiGw2hY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:fb:c4:55:c6:00:0c:50:1f:42:ff:56:3e:25:13:59:4c:85:
83:bb:12:11:69:28:37:57:ad:ef:88:ab:ad:27:84:45:cb:b7:
77:53:d4:43:60:22:05:3f:59:78:7c:78:e5:2a:b2:2a:e2:cf:
5e:36:7b:c2:7f:87:a5:e2:6f:07:59:45:dc:e0:c0:57:97:88:
80:91:b7:31:42:e2:37:16:2c:b7:5b:c5:83:7c:ff:05:96:bc:
3b:09:84:42:04:97:0b:e2:03:6b:3f:d8:88:f0:c2:7e:b4:bf:
aa:dc:09:d6:a6:e4:28:86:92:e6:d0:32:a7:4c:fc:ca:e2:df:
b4:07:a2:3e:19:c0:6b:75:48:2e:e6:a7:56:9b:9f:3c:fb:2b:
e9:96:a2:f0:4f:2f:90:54:2b:6e:ca:9f:e2:2b:02:1c:cf:39:
b7:26:c1:17:14:ac:0f:cf:ea:c9:7c:e3:8c:73:c4:4c:39:3e:
b4:1d:c3:f2:45:77:ba:8a:37:66:28:50:20:ec:7b:36:b4:bb:
29:c0:94:8c:0e:53:4a:af:93:99:dc:b6:7c:87:39:85:0d:60:
c9:93:8b:53:f3:91:80:97:31:87:a0:ba:a8:f8:c3:ba:12:99:
f8:3c:5f:9f:35:50:3e:a9:ad:89:8b:7d:15:c5:b0:8c:c2:d6:
8a:d6:45:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDAsL2TVIrMNITnCFYXaeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjJmNjgyMDUzZDQzYzlhZDFjNjUzOWNhZWU5ZjQ2MjFi
MGRhMTYwHhcNMjMwMTAyMDU1NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNGMzMGRlNWNkZmJlNTRjYjBjY2JhNzBlNWNkY2M3NzkxOWEyZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7gHrFX/n5WO9blTx1okao7cXXWZ
xkHzt9kSnPiKcch7gSaiWzQ4sIjMlgVLhirw6h+uOMk3TTRg6eDQQ7KyYVCxUjK8
d2281IhDPlHyiBlO6oXomSRdBvvJnQorNJKeMtgAsAEahwH++3RGB89Wl2OUpnDX
yn0PsIjZZ9SvjdX8vl+hIN2a7EzUDboaqN3KGcy6xmpmfvNohlBz9ulEFNEV6Oa4
06eKszyAJK5gayJIfZhSgjWTRETfFpJQ990gqPoZ52Z271vxkZdRNN9smDqP9Ltj
ou1QnXQzNeFwP76hccZNdzf5qHQ4+0pvz4XVTKKd1eMWGqhNI13tQbo+bwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDTDDeXN++VMsMy6cOXNzHeRmi43MB8GA1UdIwQY
MBaAFJ/y9oIFPUPJrRxlOcrun0YhsNoWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2Qt
MTY1MTFhNmVkOWM2LzEvTk1NTjVjMzc1VXl3ekxwdzVjM01kNUdhTGpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yZmE2MjQtNWI1ZC00NjQ2LWIxM2QtMTY1MTFhNmVkOWM2
LzEvbl9MMmdnVTlROG10SEdVNXl1NmZSaUd3MmhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkwOMA0G
CSqGSIb3DQEBCwUAA4IBAQA9+8RVxgAMUB9C/1Y+JRNZTIWDuxIRaSg3V63viKut
J4RFy7d3U9RDYCIFP1l4fHjlKrIq4s9eNnvCf4el4m8HWUXc4MBXl4iAkbcxQuI3
Fiy3W8WDfP8Flrw7CYRCBJcL4gNrP9iI8MJ+tL+q3AnWpuQohpLm0DKnTPzK4t+0
B6I+GcBrdUgu5qdWm588+yvplqLwTy+QVCtuyp/iKwIczzm3JsEXFKwPz+rJfOOM
c8RMOT60HcPyRXe6ijdmKFAg7Hs2tLspwJSMDlNKr5OZ3LZ8hzmFDWDJk4tT85GA
lzGHoLqo+MO6Epn4PF+fNVA+qa2Ji30VxbCMwtaK1kV7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:53 2024 by rpki-client on console-fra.rpki-client.org