Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/NuANJ3EF7X8X0xUJTRdhGICFHhw.roa
File: NuANJ3EF7X8X0xUJTRdhGICFHhw.roa (raw, json)
Hash identifier: zOgejs+3RM/rmNTmBiywOUGbPAjjSWKthKalK/PrAU0=
Subject key identifier: 36:E0:0D:27:71:05:ED:7F:17:D3:15:09:4D:17:61:18:80:85:1E:1C
Certificate issuer: /CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Certificate serial: 0189966D86193BCA0D72C513F5E6557F6D97
Authority key identifier: 31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/NuANJ3EF7X8X0xUJTRdhGICFHhw.roa
Signing time: Thu 27 Jul 2023 08:18:27 +0000
ROA not before: Thu 27 Jul 2023 08:18:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205771
IP address blocks: 2a13:740::/32 maxlen: 32
2a13:741::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:6d:86:19:3b:ca:0d:72:c5:13:f5:e6:55:7f:6d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=319eddb366919ed75f4660cfb0e0b6e5fc401613
Validity
Not Before: Jul 27 08:18:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36e00d277105ed7f17d315094d17611880851e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:a5:00:a0:40:2a:4d:9b:9b:59:e1:6a:bb:
15:c2:00:96:fc:6d:a8:b3:78:02:03:12:55:6e:df:
fa:4b:cb:3b:1c:4c:36:e9:39:ee:b3:ab:7f:04:b6:
5d:1d:5f:c8:77:0a:86:be:5a:d1:00:ca:b7:5c:a7:
5d:a4:73:b9:5c:b0:ff:ab:93:fe:4f:29:aa:c4:5b:
98:44:ce:0e:29:3a:14:91:16:36:4e:ee:f0:e0:6e:
71:0d:96:f2:7e:96:b2:4f:04:5c:18:b4:2e:f0:1d:
37:f1:6b:fd:52:10:60:23:3e:8b:26:17:31:bb:ed:
76:0b:59:2f:54:1e:51:cc:3c:fc:66:ff:38:28:bd:
6c:de:51:3b:a0:ac:bb:bb:fc:38:82:3c:7e:ad:db:
3a:c5:b6:e2:4d:7d:3c:85:eb:40:b4:bf:fc:e2:93:
ba:a9:77:24:86:c7:12:0a:c6:0c:52:80:10:5f:59:
6f:c8:10:11:26:fc:e5:57:ca:43:17:81:94:02:67:
5f:50:64:8b:7d:f5:5b:e9:f4:6d:27:76:f9:2f:cf:
e4:9c:7e:b7:f0:9d:1f:87:dc:43:1c:b9:b0:37:81:
b9:fe:9c:f6:20:ae:f2:21:2a:cf:b1:53:a1:40:28:
0c:e6:3a:dc:15:f3:2e:54:36:c9:15:f7:2d:70:ae:
c4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E0:0D:27:71:05:ED:7F:17:D3:15:09:4D:17:61:18:80:85:1E:1C
X509v3 Authority Key Identifier:
keyid:31:9E:DD:B3:66:91:9E:D7:5F:46:60:CF:B0:E0:B6:E5:FC:40:16:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZ7ds2aRntdfRmDPsOC25fxAFhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/NuANJ3EF7X8X0xUJTRdhGICFHhw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9a36cc-6dca-4a2a-bf6f-d47bd7d0192f/1/MZ7ds2aRntdfRmDPsOC25fxAFhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:740::/31
Signature Algorithm: sha256WithRSAEncryption
39:1f:92:99:86:eb:78:e8:d6:72:f5:1d:29:f5:57:14:33:99:
0f:1d:73:76:c6:e7:09:c9:a4:24:b6:9d:f4:f8:a5:83:e3:fa:
08:14:f2:5f:93:5a:63:6a:f4:5d:d4:50:82:10:0c:93:79:65:
c9:19:23:e2:98:4b:38:13:ff:86:88:f7:5c:20:39:cd:07:a6:
f6:2a:b0:c8:b7:e1:c3:a5:ba:78:00:64:35:a7:a9:ef:7a:fc:
06:52:b1:87:5c:97:2d:7c:2b:19:28:5e:2d:84:54:a7:fa:4d:
0e:10:c9:9f:90:e1:eb:1d:62:00:d6:4e:d8:ba:d4:57:51:f8:
eb:91:c8:e3:99:91:d4:94:f9:36:4f:2a:6c:cf:25:fe:33:27:
70:f2:36:97:b7:51:c4:6c:ec:98:70:53:64:98:b3:cd:a1:35:
6e:02:bf:86:19:4a:9f:df:53:7d:ad:aa:ac:b2:c5:1f:ee:97:
27:cb:c3:32:bc:20:c6:ee:64:a6:10:40:b5:ed:23:fa:5a:79:
f2:96:0c:ff:ac:3f:b7:f0:69:f9:be:c5:5a:d6:63:c4:67:a9:
0e:2d:8a:40:7d:73:2a:84:09:fb:0e:d6:b3:7d:e2:bb:76:f3:
fd:a6:1d:cd:7d:41:f4:02:0d:e0:de:b4:65:d4:2c:20:7b:c0:
76:7e:c2:5e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYmWbYYZO8oNcsUT9eZVf22XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxOWVkZGIzNjY5MTllZDc1ZjQ2NjBjZmIwZTBiNmU1ZmM0
MDE2MTMwHhcNMjMwNzI3MDgxODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmUwMGQyNzcxMDVlZDdmMTdkMzE1MDk0ZDE3NjExODgwODUxZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX+lAKBAKk2bm1nharsVwgCW/G2o
s3gCAxJVbt/6S8s7HEw26Tnus6t/BLZdHV/IdwqGvlrRAMq3XKddpHO5XLD/q5P+
TymqxFuYRM4OKToUkRY2Tu7w4G5xDZbyfpayTwRcGLQu8B038Wv9UhBgIz6LJhcx
u+12C1kvVB5RzDz8Zv84KL1s3lE7oKy7u/w4gjx+rds6xbbiTX08hetAtL/84pO6
qXckhscSCsYMUoAQX1lvyBARJvzlV8pDF4GUAmdfUGSLffVb6fRtJ3b5L8/knH63
8J0fh9xDHLmwN4G5/pz2IK7yISrPsVOhQCgM5jrcFfMuVDbJFfctcK7E2wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDbgDSdxBe1/F9MVCU0XYRiAhR4cMB8GA1UdIwQY
MBaAFDGe3bNmkZ7XX0Zgz7DgtuX8QBYTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYt
ZDQ3YmQ3ZDAxOTJmLzEvTnVBTkozRUY3WDhYMHhVSlRSZGhHSUNGSGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS85YTM2Y2MtNmRjYS00YTJhLWJmNmYtZDQ3YmQ3ZDAxOTJm
LzEvTVo3ZHMyYVJudGRmUm1EUHNPQzI1ZnhBRmhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKhMHQDAN
BgkqhkiG9w0BAQsFAAOCAQEAOR+SmYbreOjWcvUdKfVXFDOZDx1zdsbnCcmkJLad
9Pilg+P6CBTyX5NaY2r0XdRQghAMk3llyRkj4phLOBP/hoj3XCA5zQem9iqwyLfh
w6W6eABkNaep73r8BlKxh1yXLXwrGSheLYRUp/pNDhDJn5Dh6x1iANZO2LrUV1H4
65HI45mR1JT5Nk8qbM8l/jMncPI2l7dRxGzsmHBTZJizzaE1bgK/hhlKn99Tfa2q
rLLFH+6XJ8vDMrwgxu5kphBAte0j+lp58pYM/6w/t/Bp+b7FWtZjxGepDi2KQH1z
KoQJ+w7Ws33iu3bz/aYdzX1B9AIN4N60ZdQsIHvAdn7CXg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:46 2024 by rpki-client on console-fra.rpki-client.org