Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB5rlLt8nmkSTliVeN7WFbdqpt8.roa
File: NB5rlLt8nmkSTliVeN7WFbdqpt8.roa (raw, json)
Hash identifier: RpFtCIV9xlWm2AAw/xS30rWaiBHv2T1hPBqfpHtb+q0=
Subject key identifier: 34:1E:6B:94:BB:7C:9E:69:12:4E:58:95:78:DE:D6:15:B7:6A:A6:DF
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185A0C0FC92956315AFAE562B5B7D60CCBB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB5rlLt8nmkSTliVeN7WFbdqpt8.roa
Signing time: Wed 11 Jan 2023 12:14:40 +0000
ROA not before: Wed 11 Jan 2023 12:14:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:b107:5d0::/44 maxlen: 48
2a0e:b107:660::/44 maxlen: 48
2a0e:b107:5e0::/44 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:900::/44 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a0e:97c0:736::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b102:12f::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:97c0:73f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a0:c0:fc:92:95:63:15:af:ae:56:2b:5b:7d:60:cc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 11 12:14:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=341e6b94bb7c9e69124e589578ded615b76aa6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d2:fa:d9:61:77:80:fa:69:89:7c:f7:1c:e5:
5c:8a:1e:89:07:fc:e9:e8:07:12:c6:cf:de:ed:3a:
20:55:6e:23:dc:bc:2b:fc:24:62:75:c3:69:44:d9:
40:1b:ab:53:e0:ac:41:56:5a:e8:67:20:d7:f9:d5:
d1:42:17:e8:fc:f0:34:ae:75:64:52:b2:2e:88:b5:
d2:e2:93:db:88:34:7e:35:da:c4:b0:0c:02:ca:17:
65:1f:fd:ee:c4:6b:43:dd:4e:78:70:ae:d0:f0:ca:
04:22:68:52:15:71:99:44:0f:ee:a9:d7:80:01:39:
c8:de:5d:5f:18:57:a3:f2:c7:fe:c9:29:a2:6e:18:
33:20:ab:28:4e:14:35:75:19:f2:42:c0:53:e1:42:
e7:29:ed:e5:86:53:77:ac:e2:c3:9e:88:5c:46:a3:
aa:ab:6a:9f:51:9d:5b:ad:c4:bd:5e:15:c4:e0:9d:
ec:d1:a9:58:8a:e3:96:c2:2c:c0:cf:aa:88:10:4f:
2e:72:2a:eb:da:01:99:24:40:98:c4:a1:af:b4:c8:
93:0b:5a:f9:c7:ea:55:fb:be:a6:03:a9:af:55:83:
a1:3e:32:1f:43:41:cc:60:1e:ab:e9:39:63:27:ee:
32:b4:43:90:15:6a:6e:d0:5c:8a:01:6f:7c:7a:bf:
87:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:1E:6B:94:BB:7C:9E:69:12:4E:58:95:78:DE:D6:15:B7:6A:A6:DF
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NB5rlLt8nmkSTliVeN7WFbdqpt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:736::/48
2a0e:97c0:73f::/48
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:b102:12f::/48
2a0e:b107:5d0::-2a0e:b107:5ef:ffff:ffff:ffff:ffff:ffff
2a0e:b107:660::/44
2a0e:b107:900::/44
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
Signature Algorithm: sha256WithRSAEncryption
7a:df:44:06:35:2a:fd:ca:a9:cf:db:07:6e:1b:83:f9:1f:7b:
c1:0f:d8:d2:5b:cc:c4:ee:5d:ca:c8:4d:11:7a:35:24:ba:50:
79:59:6b:77:79:8d:6a:7f:23:81:a8:ff:1b:bc:c9:94:63:62:
37:4b:a3:47:72:c0:e5:0e:8c:40:61:1d:68:b6:8b:fb:c0:0b:
98:20:6b:d2:d6:c3:87:74:f3:21:b4:35:8a:e1:bc:b2:d6:ad:
78:68:7e:0b:af:10:b9:09:b1:f7:57:0a:83:d9:e6:68:13:fd:
3a:ca:e1:bd:c9:a3:3c:f4:c5:76:22:44:37:ad:9f:10:2f:94:
df:8a:cb:3a:49:ea:10:78:75:2c:b7:77:10:ac:7d:76:d5:ce:
8a:cd:3c:93:9d:2f:bb:21:7d:02:e1:db:c5:c6:15:47:54:de:
2b:39:ea:3e:0c:39:39:90:84:cd:2f:94:1c:0d:ae:a7:be:a2:
8b:db:fe:72:56:26:c7:1e:24:f5:91:57:aa:b5:6a:0b:d3:e4:
c2:fe:6c:ec:5a:1a:f0:7c:12:78:0e:2b:04:65:b3:3e:7a:3e:
76:aa:72:92:77:30:4a:f1:a4:18:97:ad:e1:fa:97:3a:88:bd:
c1:ed:24:87:63:99:ae:cc:a8:8e:50:35:dc:ab:5f:4a:15:ec:
5a:fe:91:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org