Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/njwOGlfwWafpUWfS1StpIsw3fLs.roa
File: njwOGlfwWafpUWfS1StpIsw3fLs.roa (raw, json)
Hash identifier: TuRhi+ThLqdIGyABBe580qJYhSWeHwD16GMJM2l9EfY=
Subject key identifier: 9E:3C:0E:1A:57:F0:59:A7:E9:51:67:D2:D5:2B:69:22:CC:37:7C:BB
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0186EA9E495C882AAAB1A7E99972FE9D74E3
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/njwOGlfwWafpUWfS1StpIsw3fLs.roa
Signing time: Thu 16 Mar 2023 13:31:27 +0000
ROA not before: Thu 16 Mar 2023 13:31:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199465
IP address blocks: 2a13:b487:1c00::/39 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ea:9e:49:5c:88:2a:aa:b1:a7:e9:99:72:fe:9d:74:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Mar 16 13:31:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e3c0e1a57f059a7e95167d2d52b6922cc377cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:31:ab:a0:ed:34:30:91:52:24:dc:d5:5b:
a2:1b:7c:3d:5e:58:60:39:f8:ad:b2:bf:fc:63:ec:
ef:5e:08:62:bf:06:0e:de:26:b9:10:db:60:b4:2f:
65:ad:6c:73:bb:fd:f7:f1:05:fd:1f:00:b7:bc:5a:
b9:7d:35:e4:1b:1f:e7:a3:01:71:35:17:8f:3e:92:
86:3f:44:06:97:d8:36:4f:b4:32:fb:c5:d7:9d:22:
53:4c:72:be:cd:c2:1f:8d:9e:a4:ef:41:3a:26:31:
df:f2:06:9e:64:e9:10:b9:1b:5f:85:2c:c8:ee:05:
38:27:e1:5c:6a:73:fa:eb:f5:a6:87:08:5d:e3:a3:
dd:d5:59:15:18:8a:12:c7:fd:9a:74:5b:99:14:10:
82:ef:2d:b1:33:09:b4:2c:3f:d0:8d:cb:e6:91:90:
6c:01:cd:69:04:9f:15:b8:72:2f:22:ae:e6:f7:c4:
fb:47:6d:2f:a4:28:0c:b2:3f:0c:2e:15:67:2c:19:
5a:85:f4:e8:3c:c4:aa:fc:82:4d:1f:9c:3f:3d:8a:
f9:89:5d:75:d0:ca:dd:2e:74:5c:20:27:66:8e:ea:
3d:06:b8:32:34:90:9d:e7:ea:5d:aa:df:ae:af:5b:
0b:87:5b:1a:99:71:d8:06:bd:38:12:52:42:bd:b0:
69:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3C:0E:1A:57:F0:59:A7:E9:51:67:D2:D5:2B:69:22:CC:37:7C:BB
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/njwOGlfwWafpUWfS1StpIsw3fLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1c00::/39
Signature Algorithm: sha256WithRSAEncryption
9c:59:ce:5c:2b:d4:5b:09:b8:bc:03:81:e4:4b:84:1f:59:d0:
4d:39:8d:25:50:63:08:4a:46:32:1f:06:fb:e3:2b:b5:05:90:
51:97:a4:83:98:2e:11:13:7f:18:e5:f7:ce:b8:c3:de:73:15:
8b:35:5b:89:d5:10:43:8f:70:53:29:1a:9e:75:c6:70:a4:91:
ed:61:ce:6d:12:70:ad:ab:fe:9f:46:c4:9a:7e:f5:30:8e:cf:
31:0f:80:02:f0:28:6c:db:fc:d7:8a:c0:6b:16:f4:d7:5a:50:
ba:9e:ce:dc:a9:94:54:63:97:84:1d:f0:59:0f:eb:f8:14:91:
4d:54:18:8d:0b:14:ee:bd:c4:5a:c6:16:9a:72:cc:4c:e3:8e:
a8:dd:fa:72:a4:53:7e:c5:75:76:0f:8e:c0:a6:4b:a2:13:63:
a9:25:23:42:e2:4a:b8:fa:92:85:c7:18:f2:29:10:5b:19:1c:
f1:e2:63:2b:46:4d:e3:b4:52:1b:2c:c7:3b:a5:e4:44:c3:ef:
e7:24:4d:03:fc:95:02:78:50:db:70:0e:13:de:0b:3d:aa:2b:
63:72:35:2f:53:a3:ed:34:5b:c8:7d:da:78:db:9e:ea:38:c6:
7b:72:d6:be:ef:42:39:17:fb:12:e9:bd:a9:24:3e:bd:d7:c6:
1d:f6:d4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org