Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/NqN6Pw3AmfH1yFrMpsOw8raTHyM.roa
File: NqN6Pw3AmfH1yFrMpsOw8raTHyM.roa (raw, json)
Hash identifier: MgKtxfSABxK6EA4NuICn6HXXnf2ByoL5zboW8YpHsXI=
Subject key identifier: 36:A3:7A:3F:0D:C0:99:F1:F5:C8:5A:CC:A6:C3:B0:F2:B6:93:1F:23
Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Certificate serial: 0192044E3DD7E6A1D0C050E8A5628A49DF24
Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/NqN6Pw3AmfH1yFrMpsOw8raTHyM.roa
Signing time: Wed 18 Sep 2024 08:44:49 +0000
ROA not before: Wed 18 Sep 2024 08:44:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 51.198.68.0/23 maxlen: 24
2a06:5901:8400::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:4e:3d:d7:e6:a1:d0:c0:50:e8:a5:62:8a:49:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82
Validity
Not Before: Sep 18 08:44:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36a37a3f0dc099f1f5c85acca6c3b0f2b6931f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f2:1e:c0:2e:fb:a9:b7:77:b2:3b:0a:aa:da:
b9:3e:5b:4e:2b:dc:bc:c9:00:a2:00:89:89:0f:2f:
5d:4e:b8:93:a3:1f:bc:c2:64:76:5d:77:e9:9b:cb:
fd:7b:91:dc:5b:07:de:5e:b1:17:5b:2d:ef:be:98:
3a:3f:13:84:7f:d4:a3:ee:ac:7e:b2:74:ab:c4:0a:
91:a7:2a:b9:56:12:92:b8:b7:70:0e:a3:09:30:b3:
d6:d3:ad:8a:5e:1b:a7:b8:09:58:ee:d8:b1:90:aa:
93:03:6e:6e:55:65:bd:49:ef:4c:fe:18:12:b5:f3:
82:9c:44:9e:ee:d2:41:21:82:f5:97:08:ea:12:5f:
54:5e:17:fc:3f:1c:c9:eb:9d:16:ba:61:1d:96:bb:
8c:96:47:3a:98:74:6f:7f:09:14:8c:aa:a1:ad:2a:
93:1e:86:56:9b:ce:3b:07:93:83:a0:bb:d8:9d:b2:
a3:2b:60:51:c9:8e:35:85:21:cd:b8:e7:33:66:79:
ee:1f:6f:d5:d4:0a:cb:85:d0:4f:9f:99:40:67:92:
59:27:a3:e1:70:e7:2d:75:22:21:12:66:d0:2d:30:
92:f8:9d:a1:dc:8c:f4:ac:2c:c2:c8:85:7e:46:41:
5a:b8:de:cd:57:29:39:88:d9:72:d6:fc:31:c2:a2:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A3:7A:3F:0D:C0:99:F1:F5:C8:5A:CC:A6:C3:B0:F2:B6:93:1F:23
X509v3 Authority Key Identifier:
keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/NqN6Pw3AmfH1yFrMpsOw8raTHyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.198.68.0/23
IPv6:
2a06:5901:8400::/40
Signature Algorithm: sha256WithRSAEncryption
76:0c:b9:a6:40:12:34:6c:36:78:6a:9c:51:20:90:df:0c:2f:
d5:ba:23:6e:bf:cc:90:0f:d4:8f:a8:db:5e:2a:eb:f2:e2:f7:
84:54:0e:20:69:a9:f5:eb:83:5b:f0:13:10:c3:e2:8c:39:0f:
74:df:8c:a1:80:47:42:57:ce:78:46:0f:3f:31:7e:f3:39:da:
d2:da:48:3b:a3:11:28:3c:1d:cd:62:18:fb:64:da:57:2c:be:
68:19:d2:0a:a9:00:d4:cc:a5:f7:28:8f:c7:ac:7c:aa:da:4f:
2e:90:95:e5:4d:e5:3d:6f:13:63:2c:8f:0d:89:0d:1e:bd:ac:
90:e8:8f:b8:bb:4c:b0:d2:07:9d:0e:55:b1:83:9d:e4:91:d9:
8f:19:5a:f3:58:44:fe:e7:35:92:16:a6:7a:82:06:4c:97:fc:
c5:e5:c5:bf:8b:29:51:8f:75:9c:0d:07:86:2b:0f:e3:bf:f6:
7f:c7:0a:ba:2f:f3:01:15:ba:9c:21:23:11:d3:2b:08:c4:54:
d9:36:f7:a1:17:6f:f4:49:e5:9f:8d:45:85:88:1b:04:a2:e0:
3a:02:d2:41:03:a6:b9:22:c1:b3:97:ee:a5:f6:b1:e7:89:93:
af:87:39:5c:2c:59:df:dd:78:1b:6b:d0:2a:d6:0a:5c:4c:dc:
df:46:db:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:56 2025 by rpki-client