Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/NUGCr4UShnPmBglIRUbn5ut9nRU.roa
File: NUGCr4UShnPmBglIRUbn5ut9nRU.roa (raw, json)
Hash identifier: wBHvpSB1lOyDKheR3JbdKdjrgfxHirQEIqUbeG2NGR0=
Subject key identifier: 35:41:82:AF:85:12:86:73:E6:06:09:48:45:46:E7:E6:EB:7D:9D:15
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0193EEA79514BB1B263593256F73594C3D46
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/NUGCr4UShnPmBglIRUbn5ut9nRU.roa
Signing time: Sun 22 Dec 2024 13:56:20 +0000
ROA not before: Sun 22 Dec 2024 13:56:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216056
IP address blocks: 2a13:a5c3:ff30::/44 maxlen: 48
2a13:a5c7:1600::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ee:a7:95:14:bb:1b:26:35:93:25:6f:73:59:4c:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Dec 22 13:56:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=354182af85128673e60609484546e7e6eb7d9d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:da:05:18:e2:f5:1b:03:90:a9:b7:42:35:
01:ce:e2:ab:5e:c1:68:95:69:0c:31:c0:6d:a3:5b:
cb:68:40:aa:6d:fa:75:0b:9d:93:79:16:e6:5e:27:
87:af:72:20:5e:24:02:88:f9:2b:10:4e:a0:6d:a6:
d6:01:d3:08:23:63:cb:23:c5:44:ec:84:3d:11:8a:
47:ec:76:7d:e9:da:10:62:66:4d:d8:f5:02:57:33:
60:35:68:6e:44:98:1e:ff:8a:b7:30:37:ce:cd:cb:
65:c7:e8:ab:13:58:80:f0:54:45:40:1b:84:94:f8:
c2:78:fc:a5:1b:f3:0d:1b:88:40:54:26:5d:64:c1:
d0:a2:52:3c:c9:51:47:35:c6:be:43:75:be:9b:f0:
a0:43:08:22:77:2b:f7:91:99:43:f5:0e:58:4d:f6:
19:01:1d:90:8f:be:70:58:49:99:98:db:26:b2:6f:
23:aa:90:6c:4c:ec:46:7d:31:c6:99:e2:ae:4c:e7:
3d:d3:66:17:22:4b:4f:24:a3:38:25:d4:de:63:42:
5a:2f:cb:b6:1e:20:24:55:49:c5:b6:f8:7f:47:ee:
6e:e9:e2:29:7e:9d:a8:75:9e:58:68:d5:e6:93:ad:
fc:fb:53:22:d6:b5:98:0b:20:15:4d:f2:fd:dd:e1:
76:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:41:82:AF:85:12:86:73:E6:06:09:48:45:46:E7:E6:EB:7D:9D:15
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/NUGCr4UShnPmBglIRUbn5ut9nRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:ff30::/44
2a13:a5c7:1600::/40
Signature Algorithm: sha256WithRSAEncryption
1e:2e:5d:e4:ca:02:05:cc:17:26:6f:2e:b8:fe:7d:2e:c0:e8:
5e:8d:b6:8a:ca:90:73:f6:4d:86:88:4d:8f:f7:e4:88:75:f3:
7f:3c:e7:94:1f:ce:ed:3f:34:b0:6d:78:66:57:f9:a0:ce:50:
b4:ed:0c:44:6c:58:c2:16:f8:3f:76:a3:ab:38:ce:d2:a1:4d:
8f:3f:a4:12:32:22:92:3c:87:f8:d1:4e:c0:f1:9c:0a:0e:51:
47:67:6c:19:04:23:59:0d:4a:4d:3d:37:35:1d:ad:49:c0:22:
6d:65:c1:9a:0a:76:b8:f3:98:3c:43:44:a5:92:46:26:71:e2:
76:87:cd:85:d9:e3:c6:f5:24:27:ef:a2:13:3f:b4:64:ba:8d:
3d:24:fe:98:f5:25:10:9a:de:f8:68:d9:7c:5a:f8:ea:00:a6:
69:01:ab:3b:a6:d1:2a:05:9c:8f:d6:5a:3c:e9:96:48:be:db:
b6:37:21:2d:2d:71:d4:8b:21:84:4c:7f:95:e5:03:db:09:6c:
48:65:38:86:7e:5f:a9:5b:a2:0f:53:8f:3b:f7:c1:7b:e2:2e:
81:74:84:18:fd:7e:59:ea:a5:ff:67:a0:5b:af:dc:24:89:38:
12:d1:58:76:d8:ac:58:94:2c:d0:2d:b3:d6:cf:67:8c:a6:13:
56:73:1e:b6
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgISAZPup5UUuxsmNZMlb3NZTD1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3
MWRkOWQwHhcNMjQxMjIyMTM1NjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNTQxODJhZjg1MTI4NjczZTYwNjA5NDg0NTQ2ZTdlNmViN2Q5ZDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZraBRji9RsDkKm3QjUBzuKrXsFo
lWkMMcBto1vLaECqbfp1C52TeRbmXieHr3IgXiQCiPkrEE6gbabWAdMII2PLI8VE
7IQ9EYpH7HZ96doQYmZN2PUCVzNgNWhuRJge/4q3MDfOzctlx+irE1iA8FRFQBuE
lPjCePylG/MNG4hAVCZdZMHQolI8yVFHNca+Q3W+m/CgQwgidyv3kZlD9Q5YTfYZ
AR2Qj75wWEmZmNsmsm8jqpBsTOxGfTHGmeKuTOc902YXIktPJKM4JdTeY0JaL8u2
HiAkVUnFtvh/R+5u6eIpfp2odZ5YaNXmk638+1Mi1rWYCyAVTfL93eF2BQIDAQAB
o4ICFDCCAhAwHQYDVR0OBBYEFDVBgq+FEoZz5gYJSEVG5+brfZ0VMB8GA1UdIwQY
MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct
NjNjNzIxY2YxZjU2LzEvTlVHQ3I0VVNoblBtQmdsSVJVYm41dXQ5blJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2
LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEKhOlw/8w
AwYAKhOlxxYwDQYJKoZIhvcNAQELBQADggEBAB4uXeTKAgXMFyZvLrj+fS7A6F6N
torKkHP2TYaITY/35Ih1838855Qfzu0/NLBteGZX+aDOULTtDERsWMIW+D92o6s4
ztKhTY8/pBIyIpI8h/jRTsDxnAoOUUdnbBkEI1kNSk09NzUdrUnAIm1lwZoKdrjz
mDxDRKWSRiZx4naHzYXZ48b1JCfvohM/tGS6jT0k/pj1JRCa3vho2Xxa+OoApmkB
qzum0SoFnI/WWjzplki+27Y3IS0tcdSLIYRMf5XlA9sJbEhlOIZ+X6lbog9Tjzv3
wXviLoF0hBj9flnqpf9noFuv3CSJOBLRWHbYrFiULNAts9bPZ4ymE1ZzHrY=
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:51:13 2025 by rpki-client