Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/NE3a11OvJo31pNCiKPoVytNw5B0.roa
File: NE3a11OvJo31pNCiKPoVytNw5B0.roa (raw, json)
Hash identifier: nLUC08mhEWYxvxiSyujtQ/+KyyGY00ULiHR3zaCchfs=
Subject key identifier: 34:4D:DA:D7:53:AF:26:8D:F5:A4:D0:A2:28:FA:15:CA:D3:70:E4:1D
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018E3D7904B5319B3C20DDE6F2D9E81B9BCA
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/NE3a11OvJo31pNCiKPoVytNw5B0.roa
Signing time: Thu 14 Mar 2024 14:58:45 +0000
ROA not before: Thu 14 Mar 2024 14:58:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0a:e2c0::/29 maxlen: 32
2a0e:7780::/29 maxlen: 32
2a0f:e000::/29 maxlen: 32
2a11:2f40::/29 maxlen: 29
2a11:3b40::/29 maxlen: 29
2a11:7240::/29 maxlen: 29
2a11:9600::/29 maxlen: 29
2a11:dcc0::/29 maxlen: 29
2a12:6640::/29 maxlen: 29
2a13:ba00::/29 maxlen: 32
2a13:dac0::/29 maxlen: 32
2a14:140::/29 maxlen: 29
2a14:1c0::/29 maxlen: 29
2a14:800::/29 maxlen: 29
2a14:f40::/29 maxlen: 29
2a14:7e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Sat 30 Mar 2024 09:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:79:04:b5:31:9b:3c:20:dd:e6:f2:d9:e8:1b:9b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Mar 14 14:58:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=344ddad753af268df5a4d0a228fa15cad370e41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:47:fa:e3:b2:ea:1b:ba:4c:74:19:d3:dc:
7a:80:2b:87:21:98:27:0d:34:d3:3f:26:28:b3:25:
57:86:fa:1d:7a:d9:69:61:dd:78:db:70:fc:28:77:
2d:45:3c:d7:48:f7:15:9b:51:d3:43:3c:69:c4:9e:
f3:63:f1:cb:f6:bd:6d:f7:90:c7:41:b9:6b:3b:7a:
13:6a:6e:2e:e5:67:e7:36:46:18:e9:67:58:e7:14:
9b:06:af:26:4d:ab:b8:00:bd:03:9d:4e:03:e8:27:
28:8e:14:51:ab:e9:33:da:78:75:c6:bb:27:06:c9:
55:8d:03:44:2f:e7:16:4d:28:f2:d9:75:de:48:3c:
9e:39:7b:e0:97:4a:59:72:0a:77:34:44:ce:4c:0a:
7a:92:e4:58:3e:6d:fc:7d:80:94:3f:1b:8d:bd:ed:
d1:61:90:6d:27:de:65:93:fb:88:66:26:10:49:7b:
0c:85:3f:72:d3:f9:f9:a4:06:85:cc:02:c6:ba:e4:
85:6d:d3:d9:f8:e8:26:a6:1b:bd:25:40:ae:06:4f:
09:c7:5b:09:e3:10:db:88:a6:b5:c4:54:60:a6:7e:
21:b1:2e:b2:19:70:07:fa:bf:c3:2d:f9:07:f2:8b:
b3:f0:53:a5:b1:43:80:bc:19:e6:df:65:d2:a1:86:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4D:DA:D7:53:AF:26:8D:F5:A4:D0:A2:28:FA:15:CA:D3:70:E4:1D
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/NE3a11OvJo31pNCiKPoVytNw5B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e2c0::/29
2a0e:7780::/29
2a0f:e000::/29
2a11:2f40::/29
2a11:3b40::/29
2a11:7240::/29
2a11:9600::/29
2a11:dcc0::/29
2a12:6640::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:140::/29
2a14:1c0::/29
2a14:800::/29
2a14:f40::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
28:79:ed:f8:93:dc:50:56:45:ca:d4:70:5d:d7:f1:5a:53:e4:
91:2d:91:4c:2c:fd:76:46:48:12:08:76:04:21:47:dd:01:ba:
e2:72:1a:e9:11:1c:95:18:be:14:cb:de:b3:6d:41:f5:21:0e:
21:51:19:f7:55:8c:f7:67:f6:34:3b:68:ac:cd:89:10:6f:0f:
43:9b:dd:58:d0:53:d5:1e:6b:9a:96:1d:a7:39:79:1d:a8:fd:
b6:80:47:56:67:b0:9c:21:52:b1:c4:33:f0:fb:60:a5:18:15:
a4:f3:66:00:d4:99:5f:dd:15:28:ab:df:77:e5:05:bf:39:5a:
f7:0c:1a:6f:2b:92:80:aa:a7:b6:99:47:d1:b7:4f:3e:77:f1:
0f:d1:8e:ac:4a:c7:ef:e1:f6:93:95:a1:ef:41:ec:2e:b0:a4:
01:74:16:26:c4:1d:a7:9d:4f:b2:b5:80:76:43:ea:cc:67:a2:
88:ad:04:1f:8b:69:e6:99:b2:d8:6f:16:92:a4:e8:be:a2:e0:
aa:04:4f:23:18:40:95:ac:d1:78:ad:ab:a0:a9:a6:c3:e7:75:
cd:a7:e6:bd:00:c0:13:7d:be:d6:80:7d:30:31:5e:6b:c8:25:
87:cd:34:85:9c:ea:23:07:1a:56:e4:c1:4a:3f:60:f1:f8:82:
74:bb:7a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org