Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/NGJKwMtlp5NBwwcVuc2TbRE16fE.roa
File: NGJKwMtlp5NBwwcVuc2TbRE16fE.roa (raw, json)
Hash identifier: 9hxG/7mIwIwTAIeboDnZiPuU2RQmjLZspasVHmrlOpY=
Subject key identifier: 34:62:4A:C0:CB:65:A7:93:41:C3:07:15:B9:CD:93:6D:11:35:E9:F1
Certificate issuer: /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial: 018CCA2BA2CFDE4BE2DD5CABEF3B708FF78C
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/NGJKwMtlp5NBwwcVuc2TbRE16fE.roa
Signing time: Tue 02 Jan 2024 12:35:06 +0000
ROA not before: Tue 02 Jan 2024 12:35:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57651
IP address blocks: 2001:78c::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:a2:cf:de:4b:e2:dd:5c:ab:ef:3b:70:8f:f7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Validity
Not Before: Jan 2 12:35:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34624ac0cb65a79341c30715b9cd936d1135e9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bd:03:63:44:39:80:fe:2e:c9:bf:7a:22:4a:
04:97:9a:c8:39:25:c1:71:61:17:4b:d4:06:7a:02:
67:bc:01:22:e2:d0:8a:7d:c7:5f:91:70:bc:25:e5:
4b:0c:6e:c9:13:28:b0:62:60:6c:c7:f7:ac:0a:58:
47:45:34:d3:80:d7:04:f9:b3:0e:48:17:da:63:a4:
96:0b:10:1f:e2:32:e9:73:16:7c:e1:dc:71:a2:ea:
37:ce:e5:11:1b:c7:7d:31:73:c4:2b:97:c7:64:7b:
26:9c:f8:cb:e3:f5:f6:fb:96:69:5e:61:7c:03:0b:
6b:d9:81:40:15:08:b3:8e:e9:bd:e8:36:16:71:fc:
b8:fb:58:86:4d:8c:ab:05:00:a5:0a:cf:a1:3c:8b:
57:4c:4d:27:a7:f6:18:79:62:d2:25:2c:ca:e2:5e:
f2:50:e8:a6:74:c3:67:13:d4:59:17:96:c1:99:6e:
20:6c:13:53:b9:63:f1:b5:24:05:fd:68:67:23:a6:
a9:c8:1e:f6:cb:46:5a:29:cb:89:02:5c:c1:11:51:
9d:7b:18:33:2e:51:cd:9e:8a:e5:91:8a:50:39:dd:
cf:95:3d:98:b7:d5:b3:78:a2:5b:7f:de:35:71:9e:
c7:58:42:14:7c:5e:33:fc:79:c8:ef:e5:6a:0a:1f:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:62:4A:C0:CB:65:A7:93:41:C3:07:15:B9:CD:93:6D:11:35:E9:F1
X509v3 Authority Key Identifier:
keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/NGJKwMtlp5NBwwcVuc2TbRE16fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:78c::/32
Signature Algorithm: sha256WithRSAEncryption
4e:fc:f0:4d:55:62:8a:c1:35:e1:6e:f7:c1:2f:84:d4:73:0c:
4f:1d:ac:40:b1:08:e8:aa:2d:9f:a0:b6:c1:d4:24:12:43:dd:
29:57:e9:d3:53:dc:a9:66:45:de:1e:38:f7:87:31:f3:0a:dc:
e7:0c:7a:26:41:e6:ed:87:c9:99:aa:65:31:7d:51:5c:28:05:
49:48:ad:ef:dd:0f:7c:92:62:ed:8a:a7:a7:52:56:aa:5f:ce:
90:80:3e:76:31:ad:52:75:b0:ad:c2:9d:1f:e1:ee:37:b3:a0:
d8:14:95:3c:dd:e0:ab:99:c1:9f:0e:29:ee:59:d5:d7:04:c3:
07:f5:9d:92:77:fd:54:14:e8:d9:49:a2:6a:ff:dd:b6:3f:1a:
d2:06:1b:27:b2:7b:d9:a1:70:6a:0f:65:bb:08:28:a0:79:44:
6d:00:38:37:d0:44:4f:69:1f:42:e6:79:ea:1a:f4:5d:80:8d:
90:e7:27:36:91:70:8a:26:2b:8d:80:a7:cd:66:e9:b9:a7:f5:
9a:22:0a:71:62:94:54:b6:31:21:2e:96:86:8e:dd:32:03:a3:
cf:05:58:92:1c:6f:75:ce:ff:bc:42:76:79:11:45:c7:f5:f3:
01:e2:84:59:c6:9b:0a:62:8c:7f:94:ad:49:63:a6:47:37:f2:
2e:39:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:13:25 2025 by rpki-client