Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nNDg0I3qIWdphyN8cswmKADgB7M.roa
File: nNDg0I3qIWdphyN8cswmKADgB7M.roa (raw, json)
Hash identifier: o1wEeQ2UQuP0OSpCKVfhvdZy+bI9MGs7KXoKm5b58jg=
Subject key identifier: 9C:D0:E0:D0:8D:EA:21:67:69:87:23:7C:72:CC:26:28:00:E0:07:B3
Certificate issuer: /CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Certificate serial: 018571CC2A0145D97375C2798526E48A1A3B
Authority key identifier: 9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nNDg0I3qIWdphyN8cswmKADgB7M.roa
Signing time: Mon 02 Jan 2023 09:24:43 +0000
ROA not before: Mon 02 Jan 2023 09:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205414
IP address blocks: 2001:67c:2d20::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:cc:2a:01:45:d9:73:75:c2:79:85:26:e4:8a:1a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Validity
Not Before: Jan 2 09:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cd0e0d08dea21676987237c72cc262800e007b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:4d:b9:bb:d0:b3:86:6b:f6:fd:62:8d:9c:
c4:96:1b:39:b3:0e:33:e7:d5:9e:f9:e4:0f:ac:34:
d1:65:2b:22:62:73:88:26:a2:b3:e2:94:c3:1d:11:
10:51:ba:83:33:81:84:67:10:c6:4e:3c:db:61:f7:
3e:e7:bb:8f:c2:0a:18:dc:f9:d1:b2:c2:a8:f6:3d:
18:32:be:c5:fc:d3:66:db:9b:14:df:28:36:65:22:
5c:48:5f:13:1a:b0:60:ca:90:fd:e6:9d:38:1d:c5:
4b:42:b3:d2:a5:be:e0:20:ca:9b:6b:35:89:48:68:
e1:66:b3:98:db:0f:93:d9:f5:e3:f7:ed:f6:88:57:
18:de:5a:e1:c7:88:bf:c8:fe:b8:d0:e3:32:70:c7:
a0:27:7f:cd:0f:f1:27:b7:8e:4c:f5:8b:80:92:24:
14:82:87:77:15:2e:59:18:a8:5f:4b:9e:82:2e:ad:
7f:1b:00:44:76:ee:38:bb:18:13:6c:a6:06:ff:9c:
0b:fe:60:d5:91:ac:7f:3f:8f:a9:d1:83:87:d4:5d:
13:e9:fe:3d:35:1b:7c:f4:a9:c3:fc:1b:7c:ce:ed:
51:2e:4d:4b:b2:38:eb:74:e8:7f:7d:44:09:94:e0:
75:7d:c8:cb:8c:e7:de:8b:b6:ed:c4:d7:40:7a:69:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D0:E0:D0:8D:EA:21:67:69:87:23:7C:72:CC:26:28:00:E0:07:B3
X509v3 Authority Key Identifier:
keyid:9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nNDg0I3qIWdphyN8cswmKADgB7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2d20::/48
Signature Algorithm: sha256WithRSAEncryption
60:8e:46:41:2f:c3:ef:15:dc:db:94:11:41:ad:0c:1a:28:92:
47:38:a0:57:41:f8:27:d5:ca:45:c7:d2:87:df:8b:d8:f9:8f:
57:99:35:e3:6e:3c:57:d2:88:be:b4:87:79:a4:73:ce:86:e5:
2b:07:da:6b:6e:83:35:ce:61:b9:7e:54:11:de:a9:68:00:17:
69:c4:36:aa:de:e4:c6:34:d0:53:89:cf:7a:e6:5f:e3:df:79:
84:65:bf:1b:20:6f:b6:d0:4c:33:8b:7d:03:35:c0:dd:24:94:
dd:b5:9e:6e:10:7d:a9:46:88:41:d2:89:fe:78:d4:2d:2e:1b:
75:db:aa:8d:75:85:f6:3d:2b:5d:d3:41:64:de:7e:bf:0e:f9:
cf:79:8e:f2:37:9b:71:9c:9d:0a:6a:91:37:1f:4b:d0:ac:e5:
8b:ba:0e:0c:f5:d4:44:5e:36:49:8d:45:e8:f3:e3:a5:03:57:
ab:23:07:d7:c1:ec:66:a0:fc:34:8a:6b:01:26:a0:e6:63:de:
8c:49:34:86:c7:a3:76:47:5a:88:44:00:a1:2f:e1:69:3e:55:
e6:3b:00:b9:db:a5:fd:d8:3a:b8:9d:79:3b:60:5d:3e:f0:b4:
53:7f:83:cc:fc:27:de:e3:93:0e:a7:84:7e:c1:f3:ad:b8:52:
09:29:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:23 2024 by rpki-client on console-ams.rpki-client.org