Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/Njt0OlndmCZsUgY4mA3G4b2ETSw.roa
File: Njt0OlndmCZsUgY4mA3G4b2ETSw.roa (raw, json)
Hash identifier: 9ore6ViFXpUXKzhYbB6BsfRyYXNzNixQ8B3M37OYXoI=
Subject key identifier: 36:3B:74:3A:59:DD:98:26:6C:52:06:38:98:0D:C6:E1:BD:84:4D:2C
Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial: 0194F9519C06AA1FA012B873D7B7B852F1D2
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/Njt0OlndmCZsUgY4mA3G4b2ETSw.roa
Signing time: Wed 12 Feb 2025 08:41:02 +0000
ROA not before: Wed 12 Feb 2025 08:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207308
IP address blocks: 2a06:d581:2000::/36 maxlen: 36
2a06:d581:2000::/37 maxlen: 37
2a06:d581:2800::/37 maxlen: 37
Validation: Failed, certificate revoked on Fri 14 Feb 2025 08:37:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:51:9c:06:aa:1f:a0:12:b8:73:d7:b7:b8:52:f1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Validity
Not Before: Feb 12 08:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=363b743a59dd98266c520638980dc6e1bd844d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a1:d6:b9:7a:8a:83:66:67:45:5a:2f:93:56:
49:33:f9:9e:eb:7b:e4:6d:52:61:85:76:f6:e2:2e:
58:4a:69:cd:5d:ce:77:4b:92:c3:cd:88:a7:48:12:
f6:04:a3:d0:44:d3:a8:6b:b4:15:2c:f8:7a:03:49:
ee:5f:9c:58:d7:f3:97:18:0d:13:9d:9e:0f:06:88:
18:25:7e:bc:60:28:f5:7a:a6:f8:b8:79:87:77:fb:
8a:b0:3a:a0:ba:76:8c:3e:64:1c:ef:68:72:d8:d7:
42:c9:52:c9:ae:93:af:ca:52:7f:2c:20:6d:42:d7:
11:54:57:48:37:fb:8d:8b:f4:ff:9f:29:a8:e3:be:
75:29:e9:af:41:1d:c4:65:26:8b:c3:42:58:e5:4a:
b3:9d:ed:ed:93:44:42:21:bb:36:89:18:17:96:f9:
3b:a0:fb:79:4e:bd:0b:67:44:d9:49:ee:a7:58:1c:
ab:7d:70:5b:d5:be:53:b9:1d:38:c5:9a:4d:04:5f:
39:7e:0f:2d:04:0c:01:74:81:ee:6f:b1:29:4d:8a:
6d:d5:03:fe:09:19:b3:0f:7d:1a:b4:a4:88:8e:eb:
2c:2e:de:09:6e:ad:b7:2a:a0:30:8e:cf:47:8b:52:
87:84:82:27:c2:ad:c8:2b:b2:a9:c0:d4:6e:3d:ab:
1f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3B:74:3A:59:DD:98:26:6C:52:06:38:98:0D:C6:E1:BD:84:4D:2C
X509v3 Authority Key Identifier:
keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/Njt0OlndmCZsUgY4mA3G4b2ETSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d581:2000::/36
Signature Algorithm: sha256WithRSAEncryption
0e:76:89:f8:ff:3d:a8:63:7d:dd:d9:53:f0:bd:bc:51:eb:6b:
30:72:f5:28:aa:17:ed:bc:61:89:aa:d0:1d:b2:0b:78:1e:60:
32:0e:e9:d7:b0:62:bc:ed:0a:12:e3:15:08:41:71:2a:54:11:
48:af:17:9b:da:cb:e9:ed:eb:67:42:70:ea:e7:57:be:60:a1:
c0:0d:32:62:a2:91:e4:9b:cf:e5:91:3b:86:5a:e5:fd:44:8d:
79:e1:64:2c:bd:5a:81:f7:44:f3:1a:6c:dc:d7:3b:05:0b:6c:
66:7c:26:49:6e:02:9a:20:fd:d5:fa:58:4c:2d:54:20:93:c2:
c5:ce:96:b1:f8:d8:bf:1f:ea:d5:a3:45:a0:1e:3c:cc:db:4f:
0b:86:a4:c4:c6:c6:c6:02:f0:44:d9:74:77:d1:b7:b2:e9:6a:
12:a9:4c:4f:27:03:e8:9f:8a:ab:d0:07:00:db:2f:b9:69:6b:
e6:b9:80:00:fb:cb:f0:d9:78:2a:84:e7:cf:70:5e:65:15:70:
dc:4d:e2:21:c4:bd:a8:51:5e:8b:11:82:91:4a:0e:05:b8:ed:
90:d3:06:0c:88:dc:91:ef:61:e8:b6:4c:c1:9a:95:a7:3f:1c:
e2:e0:79:be:a3:a2:15:a9:02:58:0a:a2:c1:bb:7a:e5:09:72:
8e:e4:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:25:48 2025 by rpki-client