Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NVDM4MsuWJ87zEIC-8mERWOijGs.roa
File: NVDM4MsuWJ87zEIC-8mERWOijGs.roa (raw, json)
Hash identifier: Dqkn6FXJcMVI4eBxjJTfiAh61S9hvRhuWuoaArVJIZQ=
Subject key identifier: 35:50:CC:E0:CB:2E:58:9F:3B:CC:42:02:FB:C9:84:45:63:A2:8C:6B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246D1DC91809430331D87338FBBA5BB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NVDM4MsuWJ87zEIC-8mERWOijGs.roa
Signing time: Mon 02 Jan 2023 11:38:41 +0000
ROA not before: Mon 02 Jan 2023 11:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204438
IP address blocks: 2a0c:9a40:8113::/48 maxlen: 48
2a0c:9a40:8106::/48 maxlen: 48
2a0c:9a40:8101::/48 maxlen: 48
2a0c:9a40:8114::/48 maxlen: 48
2a0c:9a40:811a::/48 maxlen: 48
2a0c:9a40:8112::/48 maxlen: 48
2a0c:9a40:8115::/48 maxlen: 48
2a0c:9a40:8110::/44 maxlen: 48
2a0c:9a40:8110::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d1:dc:91:80:94:30:33:1d:87:33:8f:bb:a5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3550cce0cb2e589f3bcc4202fbc9844563a28c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:a5:49:8a:ba:a9:44:d2:91:5d:be:48:7f:
07:42:12:5c:2f:a9:e7:0e:44:11:67:d1:6a:01:21:
73:ea:8f:63:b6:a3:2b:47:6e:8b:59:f9:b6:23:94:
79:fb:e9:81:5d:75:36:8c:80:63:49:c0:d1:a0:0f:
f0:6a:1e:f2:11:f7:d4:63:42:78:80:69:c0:86:dc:
32:23:6c:24:08:80:1c:37:a2:77:80:49:e9:fe:92:
3a:e9:73:6f:64:b5:55:59:b0:4f:97:02:05:0a:61:
c6:c3:e2:67:03:c3:f4:9b:8f:aa:2b:5d:c3:38:d7:
b9:6c:ca:1d:75:1d:c3:b0:eb:45:cd:25:bd:2b:2e:
4f:f8:6d:c5:fa:fb:2c:e4:2f:98:26:95:b2:e7:ef:
e1:29:17:73:34:78:b6:e7:e5:52:2d:58:0c:af:5d:
9a:21:48:15:6b:8d:03:c2:c4:74:91:4e:0c:fc:61:
57:cc:a5:88:78:ac:9f:c5:81:56:bb:90:4d:9a:d5:
bf:df:52:aa:57:67:c0:8f:88:6e:a5:e1:79:ad:78:
33:12:2f:ba:fa:3f:9f:53:ca:fb:03:96:80:a9:15:
88:ed:4e:f1:03:9a:dd:a3:62:e0:50:e8:bc:62:8b:
89:1b:2c:b5:fb:33:05:97:77:79:a8:43:1b:f3:71:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:50:CC:E0:CB:2E:58:9F:3B:CC:42:02:FB:C9:84:45:63:A2:8C:6B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/NVDM4MsuWJ87zEIC-8mERWOijGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8101::/48
2a0c:9a40:8106::/48
2a0c:9a40:8110::/44
Signature Algorithm: sha256WithRSAEncryption
10:86:02:d8:c6:90:bd:e7:7e:9d:33:42:52:f7:a1:c3:3a:89:
eb:5e:6b:ca:33:f5:2c:26:21:e5:8d:db:b9:c0:ad:fb:5a:e3:
1d:bd:38:5d:c2:b5:cf:9c:4f:a1:36:ab:c4:50:db:b3:4b:db:
85:66:be:d6:86:c7:f9:54:71:b9:d5:2d:ca:11:47:87:30:ca:
fa:11:49:ef:da:f8:7a:d6:4c:7d:f7:12:92:7d:5b:64:e2:84:
32:fe:e1:d5:ae:7c:aa:d8:46:84:74:e8:84:e8:ef:2f:16:d6:
80:ec:d0:19:07:6e:96:0b:fc:be:29:5f:a5:ec:99:61:86:41:
78:10:f6:75:c5:2b:fb:bf:12:70:bb:13:3f:c2:26:46:07:8f:
33:8f:05:c9:ee:03:d4:b8:9d:cc:ee:c7:5e:ef:21:5a:30:7c:
e2:00:7e:be:86:6f:17:2d:8c:27:f2:cc:b5:5d:e7:97:c5:68:
25:0d:57:d6:4c:d2:e5:4d:22:a5:52:1a:b0:99:a9:e2:75:f4:
69:d0:20:ca:fe:d9:0b:3e:2a:36:55:be:88:0e:e2:35:9e:c0:
0a:67:c9:3f:3e:85:ff:ab:7a:e9:9c:b9:ca:61:e6:33:06:be:
10:ed:e7:71:e5:f3:8c:a4:e2:aa:93:35:1e:0e:6b:7d:6a:53:
fb:6b:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:36:57 2024 by rpki-client on console-fra.rpki-client.org