Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/NA7-7Ek62yrdQGULF3daYSrD37Y.roa
File: NA7-7Ek62yrdQGULF3daYSrD37Y.roa (raw, json)
Hash identifier: 5ZGTc1IPSXQFvxapvYJG5WvINMfaH/HcbklEuQ1KW3o=
Subject key identifier: 34:0E:FE:EC:49:3A:DB:2A:DD:40:65:0B:17:77:5A:61:2A:C3:DF:B6
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0191A9A0A45CB670FA467BCFE4DD9E39B32F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/NA7-7Ek62yrdQGULF3daYSrD37Y.roa
Signing time: Sat 31 Aug 2024 18:09:23 +0000
ROA not before: Sat 31 Aug 2024 18:09:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211432
IP address blocks: 2a13:bfc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 02 Nov 2024 23:23:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:a0:a4:5c:b6:70:fa:46:7b:cf:e4:dd:9e:39:b3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 31 18:09:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=340efeec493adb2add40650b17775a612ac3dfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:d8:d0:6e:79:04:de:fd:20:07:ca:f5:1f:
b9:0a:dd:ec:b5:b7:ff:7e:68:92:87:7d:11:93:8a:
a6:6e:18:6e:47:32:43:9a:5e:4a:c7:44:0e:3d:22:
50:96:02:c7:c6:73:58:01:8a:3a:d2:d2:e8:b4:cd:
26:da:cd:df:94:b3:18:85:9f:e6:90:ec:c6:50:60:
65:c3:e6:ee:7d:09:51:78:88:b6:e4:e9:95:e4:ca:
ab:37:6d:89:1a:17:25:13:67:9d:80:29:87:94:68:
e0:a1:40:9b:48:90:d6:d2:9d:3e:58:73:48:7c:fe:
f5:04:7f:f5:49:5e:9c:a9:bf:dc:fe:05:f0:7c:93:
ea:09:72:1c:33:25:4e:83:ea:14:56:06:36:90:1a:
90:17:fd:c1:e3:75:e6:61:97:37:88:45:ce:ac:de:
d9:65:4c:e0:8b:f0:54:9a:57:d3:00:87:be:5d:e5:
85:73:86:d3:0c:33:f0:4f:a2:aa:9a:e3:0c:9e:15:
fa:c4:ee:7f:d2:4b:f5:36:8e:98:49:45:70:8f:4c:
3d:f8:23:b8:7c:e8:d1:fd:19:80:29:26:7f:38:ac:
f0:6d:20:9f:b3:84:23:33:3e:a9:89:ee:2a:d9:9d:
fe:fe:fd:5d:8e:43:64:be:d9:76:2e:00:e5:f3:2e:
2f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:FE:EC:49:3A:DB:2A:DD:40:65:0B:17:77:5A:61:2A:C3:DF:B6
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/NA7-7Ek62yrdQGULF3daYSrD37Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bfc0::/29
Signature Algorithm: sha256WithRSAEncryption
51:3a:db:64:e8:69:ba:88:60:be:09:a7:68:a2:02:09:d1:f7:
24:13:e5:bf:83:d6:27:32:70:b8:b8:e7:24:55:62:44:3e:3e:
53:bb:fc:79:18:36:bd:43:dc:ca:65:ba:ef:ea:6f:8a:24:d9:
31:33:57:17:8a:4f:c2:c2:ab:37:ab:4b:0e:d4:d8:46:06:82:
ba:8a:f0:7e:5c:8f:88:8e:53:b6:25:ec:42:2a:0c:1e:a3:ec:
42:d9:6a:ac:f7:91:b8:08:a2:07:f4:c7:ed:12:a7:04:05:40:
c8:f7:37:47:59:1e:76:c0:3b:f1:6b:a4:fd:09:cc:3f:8c:a5:
7e:de:71:ac:d6:84:1f:9c:f8:96:44:03:7c:5f:6a:3e:65:5d:
02:9a:dc:9b:58:30:56:81:67:d5:77:b2:ad:b4:8c:ec:a0:40:
ee:da:68:50:1f:df:4d:a0:d2:e3:43:94:67:b1:7b:c3:06:69:
e3:aa:9e:5a:3f:9a:b7:f4:a7:fe:b8:8e:35:07:ab:ba:11:ec:
48:7a:5c:eb:ac:9b:f4:30:88:28:0d:e2:82:f4:95:c6:03:b5:
5a:7a:87:a1:d4:b9:84:98:65:24:fb:75:f0:a4:0f:9a:da:70:
05:bd:95:aa:85:8c:ce:88:97:a8:f4:24:ef:bf:13:1a:a2:87:
b5:be:c7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 02:04:09 2024 by rpki-client on console-fra.rpki-client.org