Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/NqnXcVOdhKTxWyABN0L4uabtPi0.roa
File: NqnXcVOdhKTxWyABN0L4uabtPi0.roa (raw, json)
Hash identifier: 0zRUPvFi+fUG+mGv+/nznb83DMTjAPgdWDwIAMTnK/8=
Subject key identifier: 36:A9:D7:71:53:9D:84:A4:F1:5B:20:01:37:42:F8:B9:A6:ED:3E:2D
Certificate issuer: /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial: 018D21FB92BC07F0A31CA4981673F75789B4
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/NqnXcVOdhKTxWyABN0L4uabtPi0.roa
Signing time: Fri 19 Jan 2024 13:49:11 +0000
ROA not before: Fri 19 Jan 2024 13:49:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2647
IP address blocks: 57.68.0.0/15 maxlen: 32
57.68.10.0/24 maxlen: 24
57.70.0.0/16 maxlen: 32
57.74.29.0/24 maxlen: 32
57.77.0.0/16 maxlen: 32
57.100.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Sun 21 Jan 2024 18:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:fb:92:bc:07:f0:a3:1c:a4:98:16:73:f7:57:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Validity
Not Before: Jan 19 13:49:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=36a9d771539d84a4f15b20013742f8b9a6ed3e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c0:4d:e4:8e:a1:02:10:95:fb:f1:ae:18:21:
da:1f:78:86:63:6b:3f:56:54:b3:3f:89:d6:4c:32:
d5:5c:6b:a0:6c:0d:0c:cc:2b:6d:39:91:38:a9:84:
f9:85:74:fc:4e:bf:ff:2a:5b:51:26:61:bb:b5:2f:
17:08:ea:f2:8c:8a:6a:92:aa:ab:c6:ed:e5:51:35:
1d:49:48:94:5f:78:ec:7b:ee:a3:e5:da:1c:a2:d5:
7e:17:28:ac:54:42:20:7b:e2:b0:44:77:32:22:53:
d7:c0:82:4f:b8:64:b7:c1:a0:16:64:a5:d3:0e:44:
86:07:2d:ba:10:6f:4a:38:32:f6:fb:51:fe:72:1e:
51:e7:13:e4:07:ad:b2:80:47:ce:43:b6:fc:f7:46:
22:92:f7:52:08:f9:95:63:c6:e9:8d:52:35:67:26:
5f:3f:82:0c:5c:84:23:64:b6:9f:9b:83:25:46:b6:
e1:f3:39:7c:4b:2e:92:7a:b5:3d:de:bb:2b:72:80:
d5:71:e7:9d:28:ce:05:1a:e0:66:75:06:d6:39:ea:
70:4b:46:36:f6:ab:a9:61:37:67:7c:2c:b1:02:6f:
bb:30:e4:e2:47:d0:4c:08:56:55:79:96:3b:f2:17:
84:1d:6d:9f:2c:e3:54:61:57:d7:5b:45:80:b0:9a:
24:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:D7:71:53:9D:84:A4:F1:5B:20:01:37:42:F8:B9:A6:ED:3E:2D
X509v3 Authority Key Identifier:
keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/NqnXcVOdhKTxWyABN0L4uabtPi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
57.68.0.0-57.70.255.255
57.74.29.0/24
57.77.0.0/16
57.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
13:8a:c7:9d:ee:37:3b:0d:e3:2e:80:2e:8f:d8:92:be:aa:f4:
26:2c:95:9c:5e:8a:f7:2e:82:ce:08:49:4b:51:42:7c:d6:15:
0a:88:f8:96:82:d3:84:47:08:5c:18:e1:ed:85:9d:9e:49:c5:
96:1d:9b:d3:b2:13:20:db:a7:2e:07:14:c1:0b:fa:0a:71:53:
39:14:89:b3:71:69:75:39:7c:7c:3b:4e:2a:af:ee:49:2d:6b:
40:56:ca:ee:10:a6:64:f1:2b:80:c8:1d:ff:aa:6a:d4:35:9a:
a2:bb:12:94:8b:ed:d0:72:0b:c2:28:07:d9:1e:d6:18:68:97:
9b:42:0b:6d:64:a5:e2:b0:0e:f8:0b:62:3c:64:22:42:88:06:
72:df:22:e7:f0:5b:4c:35:d1:4c:62:ad:bb:50:1e:c1:5b:43:
44:ca:81:c9:cc:85:e1:7d:e1:15:13:9a:62:cc:59:a2:16:f0:
91:07:ed:6a:89:83:5b:f3:09:e5:2a:8e:44:e2:6f:3b:c8:4c:
eb:de:0f:bf:a0:60:56:62:9b:35:2b:07:e3:e3:57:e3:7a:8f:
56:67:b3:35:25:62:56:cd:bc:45:47:65:b4:bd:2b:db:5a:7e:
2a:39:a6:a2:fc:e0:03:87:32:81:41:32:14:91:33:2f:1c:12:
e6:0c:c5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:35 2024 by rpki-client on console-ams.rpki-client.org