Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/NSGYRDY9ifu5Ro3HIABkdAf9Sfs.roa
File: NSGYRDY9ifu5Ro3HIABkdAf9Sfs.roa (raw, json)
Hash identifier: JJb4MN++teQawqbUVwbZniBaQhSFhp5h/tewYNQzBtI=
Subject key identifier: 35:21:98:44:36:3D:89:FB:B9:46:8D:C7:20:00:64:74:07:FD:49:FB
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018CC5DC0C9DB1FB8AFAB47E004C8ADE1D44
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/NSGYRDY9ifu5Ro3HIABkdAf9Sfs.roa
Signing time: Mon 01 Jan 2024 16:29:41 +0000
ROA not before: Mon 01 Jan 2024 16:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203535
IP address blocks: 2a05:b0c6:80e::/48 maxlen: 48
2a05:b0c6:80b::/48 maxlen: 48
2a05:b0c6:80d::/48 maxlen: 48
2a05:b0c6:80c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:0c:9d:b1:fb:8a:fa:b4:7e:00:4c:8a:de:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 1 16:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=35219844363d89fbb9468dc72000647407fd49fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:72:ad:4d:c5:2b:79:59:59:ee:26:b9:db:8d:
53:86:23:72:64:12:7d:62:6b:2d:20:7b:56:59:58:
48:6e:d4:70:55:3f:d1:8f:71:16:09:57:7c:66:ff:
9b:0e:3f:fe:88:42:10:9a:b5:d4:3d:1e:49:23:de:
da:f0:8a:6b:db:29:52:76:c8:98:75:78:12:2e:c1:
12:55:b7:95:37:37:74:f1:ae:de:ba:e6:c3:36:49:
c1:54:1f:c1:e8:6e:f4:d0:21:8c:e2:96:b3:10:48:
3b:05:6d:68:7a:b4:00:80:66:17:35:2f:13:55:65:
f5:0a:95:d1:27:3f:19:ee:44:c1:63:9e:3f:7c:e2:
fb:5b:09:3c:1f:eb:ed:fd:6f:99:e0:4a:77:11:c3:
bc:ad:ed:0e:d2:2f:b7:e9:08:69:86:c9:d9:71:2f:
a3:b3:0d:f3:0b:c0:86:d6:fa:4d:dd:c8:a2:04:61:
6a:ff:c4:d3:09:26:5a:80:bf:8a:11:e9:94:53:d3:
4c:c5:64:d9:12:78:32:e7:e1:c4:2c:da:f8:5b:78:
5c:00:8a:ca:71:f3:d6:3a:01:65:dc:72:48:a0:ee:
8a:31:23:46:77:a1:56:94:f1:38:a6:f1:3b:bb:f4:
65:30:9c:6d:13:9f:27:19:3c:b4:3d:f8:69:a4:de:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:98:44:36:3D:89:FB:B9:46:8D:C7:20:00:64:74:07:FD:49:FB
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/NSGYRDY9ifu5Ro3HIABkdAf9Sfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:80b::-2a05:b0c6:80e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:b6:c1:f6:d8:f5:92:2e:ed:9e:3d:57:5b:a3:80:00:5a:6d:
c9:96:c7:f3:84:8f:8e:2a:f5:98:63:7d:3c:45:66:a8:12:06:
5a:59:76:6d:3b:8d:43:74:d5:ae:f9:32:6f:09:a8:06:72:07:
e5:1a:af:b2:ac:8f:a8:42:8d:8d:94:3b:73:89:cb:01:9b:1b:
53:83:b0:2b:6a:8f:bd:c1:f7:94:cc:ed:5e:9a:e7:9c:ff:ab:
94:e2:a2:a6:4c:e4:cd:89:85:81:d6:f6:27:6b:db:61:f5:30:
fc:57:bf:7c:e6:44:c5:49:d8:4b:65:76:05:c1:95:01:e8:c8:
5a:30:03:b5:82:01:f1:88:5c:43:97:29:ec:e4:4c:f5:be:6c:
19:32:44:23:14:c4:c7:9a:13:a4:23:38:6c:86:8b:be:a9:18:
9f:7e:c8:51:c3:79:f7:d0:6e:84:48:53:33:e6:a2:8b:b3:0f:
56:5e:24:aa:9c:b1:d6:9b:d0:f6:b5:0d:1a:83:16:ef:73:40:
65:e9:f9:ea:a6:a6:0c:a3:cd:b8:36:09:eb:4d:28:ec:0c:9b:
fe:fd:1d:e4:a4:1e:be:63:8c:d0:77:a3:0c:5f:23:d7:91:81:
37:25:dd:72:ba:2c:88:a0:46:db:44:35:be:d6:f4:5e:58:3c:
11:b9:90:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:58 2025 by rpki-client